last executing test programs: 5.619433796s ago: executing program 4 (id=777): r0 = socket(0x1e, 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f080002", 0x1f) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000002b7cf16060300001d2220edad00"/28], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1a, 0x0, 0x0, 0x0, 0x80000002, 0x57, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x1000, 0x0, 0xde0}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r3, 0x1, 0x0, 0x0, &(0x7f0000000280)) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000001600)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) close(0xffffffffffffffff) socket$kcm(0x29, 0x5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) socket$kcm(0x29, 0x5, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0x14, r7, 0x100, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc010}, 0x801) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) 2.842492985s ago: executing program 2 (id=783): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x8c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x69, 0x6, "e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a074e0e46e35eabfb48a4cd2cd8379a97e705b01"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x4000089}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0x1, 0x0, 0x0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x4, 0x80, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r1}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r2 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x61d0, 0x0) writev(r2, &(0x7f0000000580)=[{&(0x7f00000006c0)="315e45f8d55ddc1c2a791c794a6e5a7bd2fac22373e932293e69229ccf123bad3acd6cd12d6b5e8aecb32854a1d8ecab030f02bc5a58dfff5afe766d67d9812383d0e38c2e6267fdc5b10ef0392a40cc34bef5067f0cd400237fda04", 0x5c}, {0x0}], 0x2) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r1, &(0x7f0000000340), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x8c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x69, 0x6, "e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a074e0e46e35eabfb48a4cd2cd8379a97e705b01"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x4000089}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) (async) socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0x1, 0x0, 0x0}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x4, 0x80, 0x40, 0x42, 0x1}, 0x50) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r1}, 0x38) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) (async) socket(0x14, 0x2, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x61d0, 0x0) (async) writev(r2, &(0x7f0000000580)=[{&(0x7f00000006c0)="315e45f8d55ddc1c2a791c794a6e5a7bd2fac22373e932293e69229ccf123bad3acd6cd12d6b5e8aecb32854a1d8ecab030f02bc5a58dfff5afe766d67d9812383d0e38c2e6267fdc5b10ef0392a40cc34bef5067f0cd400237fda04", 0x5c}, {0x0}], 0x2) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r1, &(0x7f0000000340), 0x0}, 0x20) (async) 2.388032046s ago: executing program 4 (id=789): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@private=0xa010101, 0x1, 0x0, 0x30, 0x0, [{@local}, {@broadcast}, {}]}}) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000080)=0x10, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x9, 0x301, 0x0, 0x0, {0xa}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1a}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x18000}, 0x80) r3 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0x10, 0x80000) getsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000300)={'sit0\x00', &(0x7f00000002c0)={'tunl0\x00', 0x0, 0x80, 0x700, 0x4, 0x7, {{0x7, 0x4, 0x1, 0x17, 0x1c, 0x67, 0x0, 0x6, 0x4, 0x0, @private=0xa010100, @loopback, {[@rr={0x7, 0x7, 0x68, [@dev={0xac, 0x14, 0x14, 0x40}]}, @noop]}}}}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x9, 0x99c, 0x3, 0x20000, 0x1, 0xfffffffc, '\x00', r4, 0xffffffffffffffff, 0x1, 0x5, 0x2}, 0x50) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f00000003c0)) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000400)='macsec0\x00', 0x10) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x3f, &(0x7f0000000440)=0xba8, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000500)={0x8, 'syzkaller0\x00', {'wg2\x00'}, 0x2}) ioctl$XFS_IOC_GOINGDOWN(r5, 0x8004587d, &(0x7f0000000540)) writev(r6, &(0x7f0000001840)=[{&(0x7f0000000580)="7e74d2a24e6b123f249253ae62fcddc7e579a2fb00cb06760bdc84ba1d186fc6660a66a11fab20e8076998326325b45457c329dd2e3bb998d566f04b158f9fbfa79fa3af5bfff5e5d765e6d08e7f4c55f96c43eca9f487fcfef5e648923bb61c0a1a7b6aa9ad6d8dc8e1094abd96945e1157c919ec71c900c40a82a73d63935ad9950ef7aea3abb8d3bee3cd", 0x8c}, {&(0x7f0000000640)="b03840436874cd21", 0x8}, {&(0x7f0000000680)="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", 0xff}, {&(0x7f0000000780)="551aae526981f1ad84523249a57f02b39fbd9d8ee4a6f1843443afa040480df48c0b0014a71d043fba1f716baf4249f6e5f7f9510d53d0885c487a181c59bbf4795ddb62cc6c33f69915812fc1b229c6b2b291d68ad72734997a39b2afd02c7efe56c3c3e1920005ce37cc128251327116be4407228a00733f332bb35ae6dbc6576b68e81c3913024d5ad5f0899351db8bece25044cc6af8faf16fb4", 0x9c}, {&(0x7f0000000840)="5e7bd195e918c77a2641dbfe077c00bfe2a5958794d81a9a4a19fd922847ba9aafb15f5dfaab14776d7b1f2755145dbf697e32e51a598fae3ad2b08cde36f5d049e121b8804d5be60789141d378c3d2d2c7bba101e1dddef966f11e854f85bb43174baaa84637ab8087d606e81badf6f161ba16fa8beac6d9ba10b4f313e8cc794ee56daa8a960119b32a1d078814993ca8a216a116c7036f1b18420367532e9865a7852d3e61c4b7f2c08004dd6ff26c187820d14a30fd4a8c4baa8072ffb9f2f212ba31e8cc17777c9043a451a71e92a663a6ef968ab25c504b35132649963da21b0df4537a0cdeb72fef5c1efb6bc177d4c5a06d0dfb49cfe3774086c8290cc009044146986be78579f58cd2761f5120d40a7954697088dffef7711befe1aeaa0d2c30552fa15d879cf5cb0a2f9b7d6cef699a20773c373133a71da28cb3ee579470aaff31d076744f89332f8f7c25987cdecd98ecc7af255321fbd78f3a85f0724794ddec390452a1ff9513b84db0501eff1eb5a838ac6f1aee27893c161c43450825c5af8b317b17465c0486a5579860898ceed913e04d062c575734aa09885527a1d23d4a58e4030168b9f90160471373d29dc9499b509d65dfaed5e9c7cdc35d4769594bc59faf7044e8631ae3fedbeba88c57e46abbb78a57b8d27667636664f16166cebe0e4761f0074ae9049d21a02ec9907292a33ed16111aabab367559ae267204d54eb27f6735bb9549427f9266ceeb91ba58f29052079e54dff469d1048928469cd7c4cb02f962f17030a8e5dae68f526d550ca483b7967ec00e4137deb6db1a7510cee92bfa6d79a6cad25b984f7c5e160159b4ac46b1e9563d2a1cb605a008f2bbcd53399cbe37d64df58eb95268780ea942bd48410bd5348c645eea9dffd2f005e51903f6d6522ae0f61a6bdbeb083386c83e539cb618b3379b3f88e529d399c818ee9952b2a1771b52957198fb136b149f29840fe654c28abe1bbca0a4949c1615775818da5d74b81e4bdd922302305e64492842da4ec69d95c76763e8d61a784d8bf127c520f1f197a078bc864d5e9c6404ac94325d35eac224ede908e4875532343bed11416c32b8836d513647ac9a095b8796315ac46a6e22b1f3906208835c2dd56c79877e462fd8ca6d344d0ba08b16fe6693c6cb91e1882b11865c3de0530166726e52963e5a9c3eaf9590b7734842f2977dfd45a75b176f02d53bd66ea1b281d4a7a6fb647ed2b2fd9ca996f1ab4565f89ad8217620b8930b4c7e5187799f6deb3ac2ab0283fe00f110c346044056f32bc11538a42701ca5ff9f370787e5c704b9379723a04881816b1a4c5eefb37ac11455b017f40cce34f5b8b589634987ac094c259c47ab00717242f5b8dc5f7f0ebda3b21a909a0a8388bd71ae1d2ca0a70ac30c74ca62d9654f527dbebdb1301657265b8774312be9c912bdb9ecc7b8f4b254961a622ff4dc97da29a902c8f2e284caebd49678cfa02e6f3a0a7920daa0dc8e099b22928ab7671d60ec3fc02a86394dffdb5ad7eeee1da1f2ef017aa177214230f9eabe475c419b08771ce6a13801e19890b9709c3b1b46bde6af3af78ad2cc740c439c1e65b939093c9fff3b91f28879b6535835bda4338805bbdad3fc8e90a09ca5bfb9e235dbad35d2cfc560369fbd1ed3962b5dc0c86d314ee6b5160a568e00bffc05046bd10f4ca2c2ba22134eab79d57bb8db91fa45f934234d46a491ba9f60df91f4bc76a349a537cd98695c84fbe22654d07e9153541a6c8eec73e041c17c3747c9441bf5de31f2667c0896067628c2e13c0288eeff4d97465b406e9810b0db4aab9affc407ac7518a76a0e7d320c2de9ff25e1ab9b00885a80885c067db95441f1e05165105f0bb50845c8e7e2f79908b934d8c4f5c4fee296d8386d09556253b752e38bc92f4c33e4acf4a0ed1c299cd7ea9a005b9a5095825c28b4b418f045bf9f86106e7c67a45aa08f132aee7ebb576be9c14f0f7d55f33a7a7ceca3d00f090284fd90c71bb14d28fb49ceb52870d25809b9b265f926fc456ff392c8977114b6cc4fa1c57e002cf5dea103b226fc22681937e957caeff4ac8304e356f0ab82962b6960ad8a82c6e426b92c9afa1046cc918f1ad39c167144941cad2bd23565dca3019759799f4b0dc77a944198ed37587b138dc3f9071fb39fc9a6beba545c564ee7dea2c8586ab0f0768c1d8f00306440793741342121f38f9ab4ed0c9f6c421b9a77ea8f8718244a66a707c3d7cabf520f824d0fa2bfcb523db245d0fe581ba29772a6f51539bd33cfd14a814c2cca00ad7890d840f639331f030d010634a2143303248d332a4d380d4b2ce8a0741ec990898f570880d8ba1a35bd69261264ccc6011f2a038f312a45c7b492be1cab0563ff0b6882e29f69f5248cfc84b26d5070c6a9072138ddde00bd0354c29c6b74b2feecbcf8d2f969eaf4afd08ca55b7145d7e8836cd27d2639584b8cbe5fc62e31154b8177015794c35eec54dc462279d761daa8fc4d00f1a2e043472ff63e49e4408e0e9fa9919bd83a8046ad490867b7c6507e2b2a6e5f199f227785e656ac381bf1f00efd0c7b8fe76bbf73ccb7079a2e7f0ecc8a7e787b8ceb31dd0e0d956fa4e4796c0b08760be2ee4f8d1bd6a5203174a37bbb55c1c86675370cf0d10aa1d509fd4055a8554470bc853ce71c9e1859fdb98faaf4b6752b20f7002c264daf339b7f1dcb7653b5c69f7eea80d583e9ef95345f5e49c09d11dec6226afb29c28b0ff1b0ebb7ae33ab2a184a110026ce934b3f4d2fe73047015e19c46f4c7dbc0b173e898d51928219bd591462127bd32f568117a9521c84c9735b27f88f1cb045553e86975cea02ed384a95c0d4b3bef8310cce9ffca15388875d27345fdc3c3d5b019541bd04846b87c46bd6c28deba9ce8e2b9588429f8a518c69056240511f813062c7bd6342609fcdfa2c11c00cd5a684c6f323b5982ad18c06306e36226dba8580011e8b25a75f10a7b9b10f3cc92e83c479d2730a4d7bcb86e586fa32e42a8bc32f5b1f788710c993633fb8d954ad6257f1562ed161ffccc5a12795c5598e1edb833a9f7b5227c0535247c0c599c312873205ecfabd8a774999d2d50626ff37f42aa08772e2e2cd1e3e1d82ac6980152b6e1f878f7e3c76350411ad9f6f7b9c358652f6434412545e76738f80d0985a58d6c56eedbf025ddd332ba30562865f11f0537c524232997d9cc5552dcf7f58cdc7b1a2b1c77fe66730c648b2ba50b3ef5e09e1d5d0750c1f9484c0a2d5448c3a731fbdc197c05a50c74b757cc866c76124ff63473f5aee21c476a82839a2ee12effdf6cb8dfd4e1db04a52d548571d861e87f704847fbdd228aa35980d16b6d29102c17b78fe7f16e5f3a55fbac7ce2d6605aabd9a9419048f4d4ec0836255a6218e64be9afe96bffa0f67c4db44bc6f547cd6064d1173897ca8b1b434685a9959fba61c569404de50e7b765ba132f2d8fa811dfd8fd0783204f03068aca6af359ec68ede829ffbdff38bf67b656c06ad3b353f83bf3795d41a239f78d190b372a4cd821644b228074c422c31c4fa615df2a7b257d3decdea2b705929a96d5ad6bb0f09e2108550468c687e02db120347565e54ddbdfba07676794ec0df9ade3c69e40f323fa497b6c0230dbba03de098c05a1d77ee0d4bc73432ea4c3597e60c331842cba8a82e6a0e136fd7d7839756fda00d3f3d8930ef273f94b164525bd82cfdb7f9bd1a6e22204d672f30eac088f95872cf33d5a55e963ef4f1e48f353a5a895251f16fd2e66df9e6e41b3d51d6394c0d54e58f8b2d1ba0c4d6b501baf931a0500e7c917a3f7b2db2f7ec9f85bb7d5215d7b773bbe9f601470943dd7a8f002a26f4b9483ed1a2a71e731069d9a4e7964f00eb1bd52eda812141518bec1c0f294b5f7f8c91a74e7678385abe48e71c9b82a4934ae74c83589cc863ed6e82bbc1528afe47776b177bd3c91d29af04df323e370ee269311fb62e16032ec9e440ce5638a5214ce190506f4579a2f3446ccd195158848bffeeb931174146ca4defae360d9ccce07e82648812b127b6ec44f83d65f43f81fac060ef67cc635f137028bc843ea3fc3d53b36a3abca2483b76495bbe4a7f13b76f2a7abb77f391f284d571efd4d9e21a15ed0b7a5d5ba185308efd48ffd38c1a51ef7d8013fd6b51b5a505ec28c76b8fd249f54a488e63a278a2e9970959b405e3d5ad836259c896e79509a4bfa9e11b234bfdf38525b3dbe9ab04cf364a9033a68eaf55986bcbf18a3280ffe9561a752557ced68c178134e9708e1d76b8235c3369babfbd0354e8a27e61ebe4e02ff6c8fab33dfb55c66804d8bfe25b77797b5b48e48070cc5e4ecb6e11c0d609c25dbd153194830adc05197f51156f3af6660430c841d52d159811eee45d03808bd8411beaf611a2a3bcf4a10609ec6ab60cefdc8e327f0bfe71fc4dda4deb45860d623e62cb79d0abb672c5057a7fde1973b6a1744ad59adfb11f867c9a63e135d4db7ce61bf8588c524ca24d60fd1fa0164cff3940124467d59d7359a6f02d3e9a2ec1c65403ab5368f2c2e4427659b693cf66fa5a9da4668fa0309ba7b1787cd4524a04dd6e22e2c2ee5a643d7a64077759183de283bb600e643cfdf53f0931fd2d8c72ca92ea41043e9786668e75833616ea2e84d74611b2d4397e0baef1f79f89e660a75e43bfd13bb755185fa0c926f70f03f71b76e4c7932acd782a9a491b227abbf5e9497046e41a6efcdbab389ddede56821f7026eb2f65dfd1a101e244dd7d6823001e153133949277a7ebcd0f30dde44ee37f255f7e472c055063d6cd88c2a5ab5b2f10dda43a85e8305476a5c3915466fa43b4eb85c8fdaa9bcbc0aac326e7eeecc9df4b7f39d7d41eeee0248d0d932762c3a57b0183b0e92cde9d237bd412eb68c831accddad84ee67228fffb1e2893b763bec490af4622e5729709463aa1b7fde5dfddd9fbefe626c530ebffcd067cd100156798604a39175c7e1c6565939b3d2440919d6285fcc9cc2382edaa0c86c8fe3cf7aa4384af2dfa0556800b3577123ae98954bdd1886563f6da743669c30027d9a667455c14c240bbec71f503891cce51ce7397fa04c3bbcdefa9d1cf5461b43bfb78651a5853f6215ef4adb4e39aa0a4105bbd825589c55d15ad973d26275407b7b0957f7758d7e19509e41bdfa3aae829383e2a887dcadf31166c421578ba7ddb4bb5fa5bf2f2b233baf525d771d648ce6bd7de6de59131c5db8c67bd1c0261f0396397db55aac6223f7803a5ca06809a1d078c9c54e3ea8cff090692f7663a2dfaa828c4946c7f8a3d5ee9a263621931899629c601fee54eabbb847652dc97ff63569652c75b990c68e5e9fed45d526109e5c14758b872cb1c9ea5a5e0a5fade04f708752a08675144b3ff10311b662eb98e85fa09e38dd4bd7a65d31b78ca89baf0658301e13849257914d8e6e2e9c801cb83d679c9b81504afd786457dddb60a708d390df4b9fa7b1c9c623ea3b97a93fecba9cdd72d374923328b29ac53794ad9c931478164e6fb0d3f9c69e626426e05addf1721fdd9a40ddb365588717c5405b65422c6e501acd1612c5fe90062f6b9b2d6072b8f90121178454897c178344aa87f6ec7d60e4244af67db31349584ccda3fc622baf70023c7e625ef65fee1490ddd002ab1734fa4b462c10744df677f9159180a11431b92c5e4e6184e9ef98741c591c1a9a87493a97140312716383b2bb541a87f2719fc0d4bc279d954e5bacfee", 0x1000}], 0x5) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001900), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r7, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x54, r8, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xfd}, @L2TP_ATTR_DEBUG={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008801}, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001a40)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r9, &(0x7f0000001a80), &(0x7f0000001b00)=0x6e) r10 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$sock(r10, &(0x7f0000001ec0)={&(0x7f0000001b40)=@vsock={0x28, 0x0, 0x2710}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001bc0)="92b92d1d3ee38f9561da844ccb3ecc38416a36ba2fe6b975d7f42757c3868434dc50c673a1216179d016806007cbbfa01ca1d8514213f65b715623d11183daf7a6c18174a93e4b70e1a1da5a67dd44c15910aa1a8d21698e07c6b26953ee998f93d5843f4ffab9fa1bfb9ee6e23d351d002ac9432b5d5367ea935d52a5c303bc203d2abaa56312722105985e6c82bb5aa498d480c6a854f24313b6dc30a8ea28a852b7bd8f9cf0989c9f6310cd868152323db722ad0b8e580aa19439d8e9131fa62edc75e25c6155a088166ec9eb30ac70de64669a14787792bae0ddfa60d3", 0xdf}, {&(0x7f0000001cc0)="1ebf3965f2f7ffe8e7b3a9b2d991e51cd3bce22557ead8e35b5414815cd1b85158f3028a6da3f360f3508de1099941be18161ea0da494837e2afdb5c51deb086b2cd7ca71b031e5763ee2dd2c9c8e4432c", 0x51}, {&(0x7f0000001d40)="a52d540fdda31affcbe26702c7c7b740f540694e564e8384d37fac088289b888a5cb013bbae56cabf9d6863ef6c2682c1bf0d0cc5873", 0x36}, {&(0x7f0000001d80)="2c380415b5666633f525d03c46660a57312b4bec431d7f420d36d9b9542d936332462eab3b0c6d1cefb90feeea65cff229a15b0cc560be8554a3ae8057c904b7495a0b0ab2133321996e27e894dd049dad471716b26b2f34da5da5d38c20f664ab69", 0x62}], 0x4, &(0x7f0000001e40)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x8001}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0x60}, 0x20000000) ioctl$BTRFS_IOC_GET_DEV_STATS(r10, 0xc4089434, &(0x7f0000001f00)={0x0, 0x8, 0x1, [0x7fff, 0x4, 0x40, 0xffff, 0xa], [0xa, 0xfffffffffffffbff, 0x3, 0x40, 0xa, 0x72, 0x5, 0x2, 0x10000, 0x0, 0x0, 0x5, 0x0, 0xffffffffffff0000, 0x9, 0x7, 0xf, 0x5c63, 0x3, 0x3, 0xc4f7, 0x7, 0xb, 0x1, 0x32a16b20, 0x1e72, 0x8, 0x209c00000, 0x7, 0x1000, 0x8000000000000001, 0xc, 0xf, 0x3, 0x8, 0x874, 0x40, 0x7, 0x908c, 0x8, 0x3, 0x2, 0xfffffffffffffe00, 0x80000000, 0x3, 0x9, 0x2, 0x2, 0x0, 0x2, 0x7, 0x4, 0x8, 0x4, 0xe558, 0x6, 0x9a, 0x5, 0x3, 0x4, 0x7f, 0x5, 0x1, 0x5, 0x10000, 0xd48c, 0x9, 0x1, 0xffffffffffff8000, 0xffffffffffffffff, 0xfffffffffffff000, 0x537b, 0x2, 0xfffffffffffffff8, 0x6f95, 0x80, 0x7f, 0x3, 0xcd7, 0x1, 0x4, 0x0, 0x9, 0x100000, 0x100000000, 0x200000000, 0x7, 0x7, 0x1967, 0x5, 0x4, 0x40, 0x2, 0x3, 0x4, 0x7f, 0x5, 0xd79, 0x7, 0xf, 0xf3f7, 0x400, 0x100000001, 0x4, 0x1, 0x6, 0x8, 0xf, 0xe1c8, 0x2, 0x10001, 0x1ff, 0x6860, 0x2, 0x4e3, 0x0, 0x1, 0x80000000, 0x0, 0x1, 0xfffffffffffffff8]}) ioctl$BTRFS_IOC_DEV_INFO(r6, 0xd000941e, &(0x7f0000002340)={r11, "157e90c5c201e60bcbc8eb6c78a1e5cf"}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000003340)={'team0\x00', @ifru_hwaddr}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000033c0), r7) sendmsg$NL80211_CMD_REQ_SET_REG(r7, &(0x7f0000003500)={&(0x7f0000003380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000034c0)={&(0x7f0000003400)={0x94, r12, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x64, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffff6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffffc}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1000}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x401}]}]}]}, 0x94}, 0x1, 0x0, 0x0, 0xd5}, 0x40090) 2.168193484s ago: executing program 4 (id=794): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8d1}, 0x880) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0xeb923771a6a8c729, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x84040) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8d1}, 0x880) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0xeb923771a6a8c729, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x84040) (async) 2.020414429s ago: executing program 3 (id=796): r0 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x4e, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd6003000000182c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0202000100000000fc0100000000000000000000000000005c2ac7caaaa933ff75a32527ec074c4701d87b07c10b55fca46610566fbc6fed00c9c10f583e6f71648cb27b9e85f46e"], 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0x6, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r1 = socket(0xb, 0x4, 0x3faa) ioctl$FIONCLEX(r0, 0x5450) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc1a4}, 0x94) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x2, 0x13, 0x7, 0x6, 0x5, 0x0, 0x70bd27, 0x25dfdbfc, [@sadb_address={0x3, 0x17, 0x32, 0xa0, 0x0, @in={0x2, 0x4e22, @local}}]}, 0x28}}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f0000000880)={'sit0\x00', &(0x7f0000000840)={@empty, @private=0xa010100, 0x800, 0x2}}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000540)={{r5, &(0x7f0000000100)='\x00', 0x10000, &(0x7f0000000380)={@_ha_fsid={[0xffff, 0x3]}, {0x5, 0xc, 0x3ac}}, 0x4, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f0000000400)=0x101}, 0x1, &(0x7f0000000500)=[{0x3, 0x1, &(0x7f0000000440)='sit0\x00', &(0x7f0000000480)="c65c4b047719c7aa3cdf83990530e9a1b5f3c81ffad9ebfcbc49bcdd9adb5533d6c3b81db08f2d9c21e5a20b8e5f4040d83a5e6c93a655993dfa", 0x3a, 0x20}]}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000006c0)={0x0, 0x53, "d3a8fbd9db384cf194d2c52698014ae5ac86515a4b7e0d78e78966d69220d85346847b006841c542508b76a48f5508cbeaa776e0a4fded2f8be761e1b98336b4b7f83d74ae1ebd7407bce3aa7dd8a272e73514"}, &(0x7f0000000740)=0x5b) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000780)={r7, 0x1ff, 0x30, 0x0, 0x202e}, &(0x7f00000007c0)=0x18) poll(&(0x7f0000000640)=[{r5, 0x4001}], 0x1, 0x7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.952378148s ago: executing program 4 (id=797): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @random="d976f308c05c"}) (async) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="08000800070303000200140007004510002800000000082f9078ac1e0001ffffffff81006558", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6c00de049078000023db96faf9808d479625db6540d2b54e5fea5659183c7c8ec8f0c766cfb2a164296e73fec6ef2ed6c2ea0b0c13e9a187ada26b2121e4558ff3da1b7b31b822523e43d60e8a84423c98f0cc1d4db3ed47b1874c2e11c5ad346c6e3152c76d3b79bec81bcac4e4f8f3f747945108999ef64b06bb6fcaec94ead11e43666f402985604c662fc63cdb994425c0cbd45dea594b8f5a55747cbba192930b246681329ec66fda4afeef255d62"], 0x36) 1.850311887s ago: executing program 0 (id=798): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x8, 0x800, 0x7a, @private0, @mcast1, 0x20, 0x7, 0x4, 0xcb7}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6erspan0\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x2, @private1}, 0x1c, &(0x7f0000000d00)=[{&(0x7f00000002c0)='\n', 0x1}], 0x1}}], 0x1, 0x40088d4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0xffff, @private1, 0x1}}, 0x0, 0x2000}, 0x90) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0xfff1}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_fw={{0xc}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x408c0}, 0x4000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x0, 0xeb, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0xb3, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r7, 0x0, 0x95, 0x60, &(0x7f0000000700)="e24cfa9588df4a0bb68bd9f1e013a956d80dfe19f45af75fece3c60cc5b3c0868ebd7da2a32f46f1d22ffc45ce29ad6eea53964c6a63f288ec5121e81967dcdb8e55310dc09e09572e06b69eed63c8710efc0cdfa4ecc972d1fa41c2c90b8bf33c05e4bc0867598cbda55639b5987b92457d420ec9e062287455e608c7931fdaadd1117932800f9e493ab3f01a85edfdea57dff901", &(0x7f00000007c0)=""/96, 0x2, 0x0, 0x38, 0x0, &(0x7f0000000840)="78f8ea6fa6f267cd5186cf38a7ecabe05c8e3804428c8d73d05919ed6fe8a77f7da2af4f1047017939ae92b4f28e45dfb1c5f43057aaee1d", &(0x7f0000000880), 0x1, 0x0, 0xb}, 0x50) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r4, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040001}, 0xc0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r8, 0x0) syz_emit_ethernet(0x46, &(0x7f00000003c0)={@remote, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120300", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@RTM_DELMDB={0xd8, 0x55, 0x30, 0x70bd2b, 0x25dfdbfb, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x1, 0x1, 0x0, {@ip4=@rand_addr=0x64010102, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x0, 0x1, {@in6_addr=@mcast1}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x4, 0x4, {@in6_addr=@private1={0xfc, 0x1, '\x00', 0x1}, 0x18b67}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x5, 0x4, {@in6_addr=@private1={0xfc, 0x1, '\x00', 0x1}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x0, 0x2, 0x3, {@ip4=@remote, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x0, {@in6_addr=@empty, 0x8edd}}}]}, 0xd8}}, 0x8811) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) 1.774770904s ago: executing program 1 (id=799): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) unshare(0x22020400) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x38, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x38}}, 0x0) (async) r3 = socket$kcm(0x29, 0x5, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0xffffffff000) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000000000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000007440000000c0a01020000000000000000010000000900020073797a3200000000180003801400008004000180080003400000000104000b800900010073797a3000000000140000001000010000000000000000000000000a61d35546647df382f24a7e1a04c3019449c2a7d170ca871e996f10d6c72c024a52"], 0xd0}}, 0x0) 1.566871209s ago: executing program 2 (id=800): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x4e23, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10}, 0x1c) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c010000040001000000000000000000fc020000000000000000000000000000fe8000000000000000000000000000aa00000003000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000001d0000000000000000000000000000000000000000000000fcffffffffffffffdd0200000000000000000000000000000000000000000000c4000500ac14143b000000000000000000000000000000002b00000000000000fc000000000000000000000000000001000000000000ff00000000000000000000000000ff020000000000000000000000000001000000003c00000002000000640101020000000000000000000000000000000001030000000000000104000000000000fe800000000000000000000000000011000004d22b0000000a000000fc0100000000000000000000000000000000000000000000000000000200000000000000"], 0x17c}}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESOCT=r2, @ANYBLOB="0000000000000000b70500000000000085000000a800000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1a, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{0x0}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x2, 0x400000000002, 0x0) setsockopt(r5, 0x0, 0x20, &(0x7f00000012c0)="15020000", 0x4) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x10) sendmsg$key(r6, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x400008a, 0xff80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r3}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) sendmsg$ETHTOOL_MSG_FEATURES_GET(r7, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x20008894) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043d000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 1.534296577s ago: executing program 1 (id=801): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000040000100fcff0700fedbdf25010000000400478018000180110010800800020010b036c6ee9ec4b08bdda4b190f3c4ce15a69c01a3415f5dc06555abaf020095b543d101001bb9751caf5668381c5b25ccb12a0267882ff41754", @ANYRES32=0x0, @ANYBLOB="90b24b101d00000008000200", @ANYRES32, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008084) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="8800000003148da429bd7000fddbdf250900020073797a31000000000800410072786500140033006c6f00000000000000000200000000000900020073797a300000000008004100736977001400330076657468305f746f5f687372000000000900020073797a3100000000080041007369770014003300776c616e3000"/135], 0x88}, 0x1, 0x0, 0x0, 0x81}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe28}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000480)=0x10, 0x80c00) getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e22, 0x8, @empty, 0x8}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd71100400000005000000060001000500000008000900050000000b000000000008000c00a80a00006ca10d36b53b496d6920a3abd5d048ee08514282"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x40010) socket$unix(0x1, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0xa, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000001000010500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001006565746800000000040002800a000100ffffffffffff0000"], 0x40}}, 0x850) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000300)={0x6, {{0xa, 0x4e22, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e20, 0x4a4, @mcast2, 0x4f1}}}, 0x108) sendmsg$nl_route(r7, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x20008010}, 0x4000011) unshare(0x40400) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x6, &(0x7f00000004c0)=0x6, 0x4) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa"], 0x610) r10 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r10, 0x29, 0x2b, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f2}}}, 0x108) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000008d3001926fa41c83000000230000000000", @ANYRES32=0x0, @ANYBLOB="0000000028120700080004008100000008001b0000000000"], 0x30}}, 0x4004090) 1.447736717s ago: executing program 3 (id=802): r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, 0x0, 0x6) unshare(0x20400) r2 = socket$nl_route(0x10, 0x3, 0x0) sendto(r0, &(0x7f00000001c0)="70f33535d28fcc8a6f4db8260f5f61de58217f9dfae092a66cfc47d5f7927d4332fafdad0ff009a100136445f9c672edf79b51df7c3470f75ecbaa57a8dcb3", 0x3f, 0x1, &(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x101, 0x2}, 0x80) ioctl$FIOCLEX(r2, 0x5451) r3 = socket$kcm(0x2b, 0x1, 0x0) close(r3) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004040) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r5) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="000000006d3668367c9d6bbbac684abbefd2e51c3f97518754b37abe", @ANYRES16=r6, @ANYBLOB="01002ebd70000000000003000000140001800d0001006574683a6873723000000000"], 0x28}}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r3) 1.390374837s ago: executing program 0 (id=803): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd}, 0xe) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x1e}}}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x5c}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'ip_vti0\x00'}) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000600)={0x0, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, @rc={0x1f, @any, 0x8}, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1}, 0xe, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000500)='veth1_vlan\x00', 0x9, 0x3, 0x7}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001700)={'sit0\x00', &(0x7f0000001600)={'sit0\x00', 0x0, 0x8000, 0x7800, 0x0, 0x81, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x68, 0x0, 0x6a, 0x2b, 0x0, @private=0xa010101, @remote}}}}) r5 = socket(0xa, 0x5, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000003c0)=@allocspi={0x11c, 0x16, 0x1, 0x70bd28, 0x25dfdbfc, {{{@in=@multicast1, @in=@empty, 0x4e21, 0x3, 0x4e22, 0x10, 0x2, 0x80, 0xa0, 0x3b}, {@in=@remote, 0x4d4, 0x32}, @in6=@rand_addr=' \x01\x00', {0x373a, 0x4, 0x2, 0xab8, 0x8, 0x1, 0x4, 0x3}, {0x22, 0xd2, 0x4, 0x3}, {0x0, 0xce, 0x7}, 0x70bd2c, 0x3504, 0xf016e6580cc0e8b0, 0x1, 0x0, 0x2c}, 0x1, 0x2}, [@encap={0x1c, 0x4, {0x1, 0x4e22, 0x4e20, @in6=@rand_addr=' \x01\x00'}}, @replay_thresh={0x8, 0xb, 0x10}]}, 0x11c}, 0x1, 0x0, 0x0, 0x48095}, 0x4000014) listen(r5, 0x100) sendmsg$inet_sctp(r5, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="18000000000000008400000005"], 0x20, 0x8804}, 0x20048f2) 1.306083933s ago: executing program 4 (id=804): r0 = socket(0x10, 0x803, 0x2) r1 = epoll_create1(0x80000) r2 = socket(0x1, 0x80802, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x80000000, 0x0, 0x0) close(r3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, 0x0, 0x0) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000180), 0x8) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x0) shutdown(r2, 0x0) close(r1) 1.25634242s ago: executing program 3 (id=805): socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) (async) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) read$alg(r0, &(0x7f0000000300)=""/74, 0x4a) (async) r1 = socket$packet(0x11, 0x2, 0x300) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) (async) bind$alg(r0, &(0x7f00000007c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) (async) accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth1_macvtap\x00'}) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) (async) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r5, &(0x7f0000000040)={0x23, 0x14}, 0x10) (async) bind$phonet(r4, &(0x7f0000000000)={0x23, 0x4}, 0x10) (async) close(0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_coalesce={0x33, 0x0, 0x7f2e, 0x0, 0xfffffffd, 0x2, 0x80000000, 0xfffffffe, 0xffff2ee0, 0xfffffffe, 0x8, 0x4000004, 0x0, 0x40000044, 0x0, 0x80000001, 0x0, 0x7, 0x20002, 0x0, 0x2, 0x0, 0x3ff}}) socket(0x10, 0x803, 0x0) unshare(0x22020400) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xb, &(0x7f00000002c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) 1.180421985s ago: executing program 1 (id=806): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e6, &(0x7f0000000140)="a5053afbd74bbdf83bde27f3b89caa3aacd4a5382a69a87e7481d94d50348509e0988ee763") r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r2, r3, 0x26, 0x0, @void}, 0x10) unshare(0x400) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x9, 0x2, 0x0, 0x0, 0xfffffffd}, 0x10}, 0x1b}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001600010000000000000000000a0000000000000014000100f90100000000000000000000d8000001170002"], 0x44}}, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r4, r2, 0x4, r2}, 0x6) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r11, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="2508007a0000000000030700000008000300", @ANYRES32=r10, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f016400000005005300010000000800050004"], 0x54}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r7, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x814}, 0x10) socket$inet(0x2, 0x1, 0xb) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newneigh={0x38, 0x1c, 0x400, 0x70bd2b, 0x25dfdbff, {0x1c, 0x0, 0x0, r12, 0x8, 0x3, 0x6}, [@NDA_SRC_VNI={0x8, 0xb, 0x1000}, @NDA_PROTOCOL={0x5, 0xc, 0xfa}, @NDA_DST_MAC={0xa, 0x1, @random="e9bdab0d17db"}]}, 0x38}}, 0x0) 1.114885644s ago: executing program 0 (id=807): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='GPL\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x3, 0x0, 0x8001, 0x1}}, 0x44) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x2c, 0x0, 0x0, 0xfffff024}, {0x80000006, 0x0, 0x0, 0xb}]}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000055a60701000000000100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000400008500000086000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmsg$key(r7, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x70}}, 0xc810) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r9, &(0x7f0000000080)=[{&(0x7f00000000c0)="fb", 0x1}], 0x1, 0x0) splice(r8, 0x0, r7, 0x0, 0x4, 0x5) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000035090100000000009500000000000000ce98000000000000c6080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_FLUSH_DEVICE(r10, 0x4008f50a, &(0x7f0000000040)={0x8, 0x5}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1a900, 0x0) 1.00731781s ago: executing program 0 (id=808): unshare(0x24020400) r0 = socket$caif_seqpacket(0x25, 0x5, 0x5) ppoll(&(0x7f0000000240)=[{r0, 0x4000}], 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000004000000000000000a00000091116500000000009500"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000004000000000000000a00000091116500000000009500"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) 803.694631ms ago: executing program 3 (id=809): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000500000073019f000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@ptr, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x8, [{0x6, 0x1, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0]}}, &(0x7f0000000380)=""/3, 0x46, 0x3, 0x1}, 0x20) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "370c89", 0x0, 0x2c, 0x0, @rand_addr=' \x01\x00', @mcast2}}}}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r1, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef431000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x48800) 800.03269ms ago: executing program 2 (id=810): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a803f0003"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000140)={0x32, @loopback, 0x4e20, 0x2, 'sh\x00', 0x6e, 0x8, 0x11}, 0x2c) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x0, 0x36, 0x0, &(0x7f0000000b00)="3d25ff0706000000000000c186dd11204073a07132e48ee336c64ca9c82d8c50c0dd37003d5157205177aafdf50a35db8978001ed577", 0x0, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@deltaction={0x134, 0x31, 0x200, 0x70ad27, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2302}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x429}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @TCA_ACT_TAB={0x4}]}, 0x134}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) getsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000200)={@remote, @multicast1, @empty}, &(0x7f0000000280)=0xc) write(r6, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d0a0b49ff708800008002280008020200ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) 785.079386ms ago: executing program 0 (id=811): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) unshare(0x6a040000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000000)=@generic={&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1}, 0x18) writev(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x448d3}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) r2 = socket$inet(0xa, 0x801, 0x84) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) (async) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000180)={@dev={0xac, 0x14, 0x14, 0x15}, @empty, 0x2, "4f6fb4d1af0f724e6118ecfbac0200843af29708e2355d0e7ea0c543011a00", 0xfffffffc, 0x4, 0x81, 0x81}, 0x3c) (async) socket$kcm(0x10, 0x2, 0x10) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001540)=ANY=[@ANYBLOB="700000001900010000000000000000001d01"], 0x70}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xe0}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) (async) close(r4) (async) getsockopt$IPT_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f00000000c0)={'security\x00', 0x0, [0x8, 0x0, 0x7, 0x4, 0x3]}, &(0x7f0000000200)=0x54) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) close(r5) (async) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, 0x0) 580.805547ms ago: executing program 1 (id=812): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x2, 0xf) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x8821}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) (async) sendto$packet(r1, &(0x7f00000003c0)="39c394f705916c4516999da20800492dca353cf3f95cc25cdf1a5bebaa5351b752dd4620bf3a07a8f38ce1bad910df4c8492", 0x32, 0x0, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="4166b961a5c7"}, 0x14) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) (async) r9 = socket(0x2, 0x80805, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) (async) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6}, 0x8, 0x10, &(0x7f0000000000)={0x840000, 0x2, 0x0, 0x1}, 0x10}, 0x94) (async) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0xc, &(0x7f0000000280)=@assoc_value, &(0x7f0000000880)=0x8) (async, rerun: 32) r12 = socket(0x5, 0x1, 0x0) (rerun: 32) sendmmsg$inet(r12, &(0x7f0000000c00)=[{{&(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000240)='P', 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f00000004c0)="89", 0x1}], 0x1}}], 0x2, 0x0) r13 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r13, 0x84, 0x85, 0x0, 0x0) (async) sendmmsg$inet(r9, &(0x7f00000003c0)=[{{&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10, &(0x7f0000001840)}}, {{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a5", 0x1}], 0x1}}], 0x2, 0x4805) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r9, 0x84, 0x23, &(0x7f0000000300)={r8, 0x1}, 0x8) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 471.375562ms ago: executing program 2 (id=813): unshare(0x22020400) (async) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) shutdown(r0, 0x1) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket(0x2, 0x4, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) (async) setsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f00000001c0)={@rand_addr=0x64010101, @broadcast}, 0x8) poll(&(0x7f0000000000)=[{r1, 0x500}], 0x1, 0x9) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000140)=0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32=r9], 0x2c}}, 0x4000000) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000225bd7000fddbdf250a00000018003400feffffff08003b0070000000050038000000000008002c0005000000"], 0x34}, 0x1, 0x0, 0x0, 0x8801}, 0xc041) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x5fc168c9d6b4368d}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x10) (async) socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x50) 439.758841ms ago: executing program 3 (id=814): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000)=0x3, 0x2) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x48) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, @null, @bpq0, 0xd, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b7050000000000006a0a00fe80000000850000000a000000b700000059a700009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r1, &(0x7f00000002c0)}, 0x20) 396.423702ms ago: executing program 1 (id=815): socket(0x2, 0x80805, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000004600)=[{{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/217, 0xe088}, {&(0x7f00000020c0)=""/16, 0x10}], 0x2}, 0x3b83}], 0x1, 0x20001000, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) unshare(0x400) r3 = bpf$PROG_LOAD(0x23, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000005c0)={0x0, r0}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000fdffffff00000000000000001801000020207325feffffff002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0f00008500000006000000850000000e0000009500000000ef0000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r5, 0xc040583f, &(0x7f0000000580)={{@align=0x5, {0xffff, 0x8, 0x391, 0xc00000}}, {{[0x5, 0x2, 0x4, 0x9]}, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)=[{{@align=0x934, {0xc, 0x0, 0x0, 0x1}}, 0x6, 0x0, ' \x01\x00'}, {{@_ha_fsid={[0x516, 0x390]}, {0x7, 0x8, 0x9, 0x4}}, 0x3fc, 0x0, ' \x01\x00'}, {{@_ha_fsid={[0x1, 0x7]}, {0x7ff, 0x9, 0x30d, 0x6}}, 0xffffffff, 0x0, '[/-\'[^/^\x00'}, {{@align, {0x2, 0x2, 0x800, 0xfffffffffffffb98}}, 0x1, 0x0, '!,{-!\x00'}, {{@_ha_fsid={[0x8000, 0xff]}, {0x9, 0x3d2, 0x0, 0x1}}, 0x9a, 0x0, '\x00'}, {{@align=0x4973, {0x5, 0x6, 0x3, 0x5}}, 0x9, 0x0, ' \x01\x00'}, {{@_ha_fsid={[0xccc, 0x5]}, {0x6, 0xf, 0x0, 0x7}}, 0x5, 0x0, ' \x01\x00'}, {{@align=0x10, {0x4, 0xfffb, 0x4800, 0x6558}}, 0x9, 0x0, '{\x00'}, {{@_ha_fsid={[0x10001, 0x7f]}, {0x0, 0x4, 0x6, 0x2}}, 0x8000, 0x0, ' \x01\x00'}, {{@align=0x5, {0x6, 0xffff, 0x9, 0x5}}, 0x5, 0x0, ' \x01\x00'}]}}) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r7 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000010000d042abd70000010000000000000", @ANYRES32=0x0, @ANYBLOB="d0700400400000002c0012800c0001006d6163766c616e001c00028008000900ffffffff08000700000000e0080001"], 0x60}}, 0x8000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="340000000606010200000104000000b0b5bf9e0305000100070000040900030073767a44000000000900020073797a3100000000", @ANYRES8=r4, @ANYRESOCT=r3], 0x34}, 0x1, 0x0, 0x0, 0xc0c0}, 0x0) sendto$inet6(r7, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) r9 = socket(0x2b, 0x80801, 0x1) setsockopt$sock_int(r9, 0x1, 0x20, &(0x7f0000000100)=0xffff8000, 0x4) connect$inet(r9, &(0x7f0000000300)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) connect$inet6(r9, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) 366.536125ms ago: executing program 0 (id=816): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e0000004f0000000000000025000000000000009500000d00000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0xd, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 227.749616ms ago: executing program 4 (id=817): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x13, 0x0, 0x7) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40000000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x18000000}, {}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x9, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x40800d0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000008018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000003509010000000000950000000000000075090200020020007b9a00fe00000000b509000000000000c39a04fef1000000bf8700000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018290000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000ce0000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a00800000000004000000cb2004000001000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0xfe5, &(0x7f0000001480)=""/4069, 0x0, 0x2}, 0x94) 227.343806ms ago: executing program 2 (id=818): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'virt_wifi0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000140)=ANY=[], 0x68}}, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x1ff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETCARRIER(r3, 0x400454e2, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r2) 193.592207ms ago: executing program 3 (id=819): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x6}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x24040010}, 0x20000080) r1 = socket$kcm(0x2d, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x27}}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000400)={r4}, &(0x7f0000000500)=0x8) r5 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0xff07, 0x0) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008b00)=[{{0x0, 0x0, &(0x7f00000076c0)=[{0x0}], 0x1}, 0xffffffff}], 0x1, 0x100, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x58, r10, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x81, 0x1d}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x2c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x800) epoll_pwait(r9, &(0x7f0000000000)=[{}, {}], 0x2, 0x100, &(0x7f0000000040)={[0x4]}, 0x8) 76.659715ms ago: executing program 2 (id=820): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100fe0f000004000480280003800c00010040000000060000000c000100ff04000000000000d8fd010006000000090000000600050088a800000800feff", @ANYRES32, @ANYBLOB="08000500", @ANYRESHEX=r6], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003080)=@newtfilter={0x8b8, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x884, 0x2, [@TCA_MATCHALL_ACT={0x880, 0x2, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0x5, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53616, 0x1, 0x2, 0x9644, 0x800004, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0x1, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x3, 0x5b1f, 0x7b0, 0x7, 0x100, 0x2, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x11ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffef9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x3, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0x80000000, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x7, 0x6, 0x10007a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x10009, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10003, 0x8, 0x7, 0x11, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x9, 0xfffffffd, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0x9, 0x18, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0xac, 0x8, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0xa, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xb, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x0, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0x4, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xfffeffff, 0x2, 0xffff, 0xa6, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0x2, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94b, 0x9, 0x8, 0x6, 0x100, 0x2, 0xffff, 0x4, 0x2, 0x3ff, 0x2, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ffb, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0xff, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x40, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x9, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x1, 0x8, 0x50, 0xf, 0xf, 0xe, 0x6, 0x0, 0x81, 0xfff80000, 0x0, 0x1, 0x6, 0x3, 0x7ef8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x0, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0x4000fff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0xc000, 0xffffff97, 0x2, 0x40, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0xfff, 0xe, 0x3, 0x9, 0xa, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x20000000, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0xb}, {0x6, 0x2, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x49}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x8b8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 0s ago: executing program 1 (id=821): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRES16=r0, @ANYRESOCT=r0, @ANYRES32=r0], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0xe0, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0xb4, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x50, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_LOOKUP_SET_ID={0x8}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x13}]}}}, {0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_DYNSET_SET_ID={0x8}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x1b}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x108}, 0x1, 0x0, 0x0, 0x4000080}, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000000) syz_emit_ethernet(0x46, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x10, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @ni={0x8b, 0x0, 0x0, 0x3, 0xe, 0x81}}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.153' (ED25519) to the list of known hosts. [ 77.941702][ T5810] cgroup: Unknown subsys name 'net' [ 78.054572][ T5810] cgroup: Unknown subsys name 'cpuset' [ 78.064590][ T5810] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.678785][ T5810] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.806347][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.824532][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.831672][ T5825] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.840798][ T5825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.848033][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.857228][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.866349][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.874179][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.883072][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.890832][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.952100][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.970511][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.970543][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.986244][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.994707][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.996844][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.010099][ T5825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.011550][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.035710][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.044301][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.053575][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.054271][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.068473][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.077453][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.086340][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.572832][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 82.697795][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 82.754936][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 82.879067][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 82.912316][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.920415][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.927968][ T5823] bridge_slave_0: entered allmulticast mode [ 82.936571][ T5823] bridge_slave_0: entered promiscuous mode [ 82.983612][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.990978][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.998272][ T5823] bridge_slave_1: entered allmulticast mode [ 83.005916][ T5823] bridge_slave_1: entered promiscuous mode [ 83.060597][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 83.128543][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.148492][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.155864][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.163949][ T5822] bridge_slave_0: entered allmulticast mode [ 83.171394][ T5822] bridge_slave_0: entered promiscuous mode [ 83.187948][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.229476][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.236798][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.244769][ T5822] bridge_slave_1: entered allmulticast mode [ 83.252455][ T5822] bridge_slave_1: entered promiscuous mode [ 83.293055][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.300385][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.307902][ T5832] bridge_slave_0: entered allmulticast mode [ 83.315484][ T5832] bridge_slave_0: entered promiscuous mode [ 83.346725][ T5823] team0: Port device team_slave_0 added [ 83.358922][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.366651][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.374119][ T5832] bridge_slave_1: entered allmulticast mode [ 83.381830][ T5832] bridge_slave_1: entered promiscuous mode [ 83.400534][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.407717][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.415051][ T5833] bridge_slave_0: entered allmulticast mode [ 83.422628][ T5833] bridge_slave_0: entered promiscuous mode [ 83.432499][ T5823] team0: Port device team_slave_1 added [ 83.463974][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.474085][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.481335][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.488623][ T5833] bridge_slave_1: entered allmulticast mode [ 83.496102][ T5833] bridge_slave_1: entered promiscuous mode [ 83.538118][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.583297][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.590800][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.617486][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.633392][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.665515][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.673610][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.681087][ T5838] bridge_slave_0: entered allmulticast mode [ 83.688378][ T5838] bridge_slave_0: entered promiscuous mode [ 83.697125][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.704326][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.730419][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.743905][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.778275][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.788147][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.795658][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.803934][ T5838] bridge_slave_1: entered allmulticast mode [ 83.812457][ T5838] bridge_slave_1: entered promiscuous mode [ 83.838995][ T5822] team0: Port device team_slave_0 added [ 83.847207][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.881989][ T5832] team0: Port device team_slave_0 added [ 83.889817][ T5822] team0: Port device team_slave_1 added [ 83.921203][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.933378][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.944880][ T5832] team0: Port device team_slave_1 added [ 83.961398][ T51] Bluetooth: hci1: command tx timeout [ 83.967029][ T5830] Bluetooth: hci0: command tx timeout [ 83.987464][ T5833] team0: Port device team_slave_0 added [ 83.995633][ T5833] team0: Port device team_slave_1 added [ 84.050464][ T5830] Bluetooth: hci3: command tx timeout [ 84.082014][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.089014][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.115121][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.125797][ T5830] Bluetooth: hci4: command tx timeout [ 84.131795][ T5830] Bluetooth: hci2: command tx timeout [ 84.144472][ T5823] hsr_slave_0: entered promiscuous mode [ 84.151158][ T5823] hsr_slave_1: entered promiscuous mode [ 84.171066][ T5838] team0: Port device team_slave_0 added [ 84.177356][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.184632][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.211791][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.224066][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.231145][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.257534][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.278266][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.285962][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.313150][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.326772][ T5838] team0: Port device team_slave_1 added [ 84.333294][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.341065][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.367030][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.399632][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.406989][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.433595][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.502448][ T5822] hsr_slave_0: entered promiscuous mode [ 84.508964][ T5822] hsr_slave_1: entered promiscuous mode [ 84.515597][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 84.521473][ T5822] Cannot create hsr debugfs directory [ 84.534994][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.542218][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.569041][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.623812][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.631089][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.657885][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.683784][ T5832] hsr_slave_0: entered promiscuous mode [ 84.690898][ T5832] hsr_slave_1: entered promiscuous mode [ 84.697156][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 84.703329][ T5832] Cannot create hsr debugfs directory [ 84.759798][ T5833] hsr_slave_0: entered promiscuous mode [ 84.766484][ T5833] hsr_slave_1: entered promiscuous mode [ 84.772976][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 84.778813][ T5833] Cannot create hsr debugfs directory [ 84.900798][ T5838] hsr_slave_0: entered promiscuous mode [ 84.907341][ T5838] hsr_slave_1: entered promiscuous mode [ 84.913821][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 84.919583][ T5838] Cannot create hsr debugfs directory [ 85.392836][ T5823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.419744][ T5823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.430015][ T5823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.448137][ T5823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.495782][ T5832] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.523131][ T5832] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.534688][ T5832] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.546986][ T5832] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.625614][ T5822] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.645549][ T5822] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.676639][ T5822] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.704471][ T5822] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.772761][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.784507][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.794758][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.813545][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.943879][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.988229][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.996325][ T5838] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.016355][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.025102][ T5838] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.036665][ T5838] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.044480][ T51] Bluetooth: hci0: command tx timeout [ 86.044503][ T5830] Bluetooth: hci1: command tx timeout [ 86.080485][ T5838] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.093687][ T127] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.101050][ T127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.120886][ T5830] Bluetooth: hci3: command tx timeout [ 86.136345][ T127] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.143537][ T127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.166677][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.187739][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.200455][ T5830] Bluetooth: hci2: command tx timeout [ 86.201511][ T51] Bluetooth: hci4: command tx timeout [ 86.232376][ T127] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.239575][ T127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.277760][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.311359][ T127] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.318625][ T127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.329131][ T127] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.336394][ T127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.365414][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.372711][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.428611][ T5823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.524565][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.603764][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.631926][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.645952][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.653164][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.725685][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.732952][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.799233][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.847647][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.854877][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.943399][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.950624][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.054576][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.162327][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.216398][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.301765][ T5838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.453868][ T5822] veth0_vlan: entered promiscuous mode [ 87.571696][ T5823] veth0_vlan: entered promiscuous mode [ 87.593940][ T5823] veth1_vlan: entered promiscuous mode [ 87.617352][ T5822] veth1_vlan: entered promiscuous mode [ 87.717415][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.740130][ T5823] veth0_macvtap: entered promiscuous mode [ 87.794252][ T5823] veth1_macvtap: entered promiscuous mode [ 87.844238][ T5822] veth0_macvtap: entered promiscuous mode [ 87.868539][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.906620][ T5822] veth1_macvtap: entered promiscuous mode [ 87.922040][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.952877][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.964185][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.976816][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.988222][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.003866][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.013922][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.045262][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.062531][ T5832] veth0_vlan: entered promiscuous mode [ 88.077769][ T63] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.106116][ T63] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.115115][ T63] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.125757][ T51] Bluetooth: hci0: command tx timeout [ 88.131367][ T51] Bluetooth: hci1: command tx timeout [ 88.147230][ T5833] veth0_vlan: entered promiscuous mode [ 88.169514][ T63] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.182973][ T5832] veth1_vlan: entered promiscuous mode [ 88.201876][ T51] Bluetooth: hci3: command tx timeout [ 88.252038][ T5833] veth1_vlan: entered promiscuous mode [ 88.259331][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.272697][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.283508][ T51] Bluetooth: hci4: command tx timeout [ 88.287301][ T5830] Bluetooth: hci2: command tx timeout [ 88.367745][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.377408][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.427293][ T5838] veth0_vlan: entered promiscuous mode [ 88.445094][ T3012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.460257][ T3012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.487129][ T5832] veth0_macvtap: entered promiscuous mode [ 88.517915][ T5832] veth1_macvtap: entered promiscuous mode [ 88.537335][ T5838] veth1_vlan: entered promiscuous mode [ 88.556861][ T5823] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 88.566930][ T5833] veth0_macvtap: entered promiscuous mode [ 88.592992][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.604863][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.619708][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.632650][ T5833] veth1_macvtap: entered promiscuous mode [ 88.697474][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.756916][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.767281][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.794246][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.807675][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.818070][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.848311][ T5838] veth0_macvtap: entered promiscuous mode [ 88.864746][ T5942] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1'. [ 88.883388][ T3012] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.918901][ T3012] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.931696][ T3012] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.956582][ T5838] veth1_macvtap: entered promiscuous mode [ 88.977050][ T3012] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.988708][ T3012] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.097783][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.158630][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.276048][ T3012] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.289050][ T3012] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.339814][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.340352][ T3012] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.368654][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.436852][ T3012] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.482673][ T5959] sit0: entered promiscuous mode [ 89.494399][ T5959] netlink: 'syz.0.7': attribute type 1 has an invalid length. [ 89.502810][ T5959] netlink: 1 bytes leftover after parsing attributes in process `syz.0.7'. [ 89.587207][ T3012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.596026][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.604790][ T3012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.612586][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.780836][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.788734][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.798666][ T5973] netlink: 'syz.1.11': attribute type 4 has an invalid length. [ 89.820551][ T5971] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11'. [ 89.841938][ T5973] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11'. [ 90.038628][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.078039][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.094178][ T5976] netlink: 'syz.0.12': attribute type 1 has an invalid length. [ 90.117583][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.140994][ T5976] netlink: 1 bytes leftover after parsing attributes in process `syz.0.12'. [ 90.159836][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.191216][ T5986] syz.4.14 uses obsolete (PF_INET,SOCK_PACKET) [ 90.201796][ T5830] Bluetooth: hci1: command tx timeout [ 90.201806][ T51] Bluetooth: hci0: command tx timeout [ 90.281850][ T5830] Bluetooth: hci3: command tx timeout [ 90.298643][ T5989] netlink: 36 bytes leftover after parsing attributes in process `syz.4.14'. [ 90.361031][ T51] Bluetooth: hci4: command tx timeout [ 90.366731][ T5830] Bluetooth: hci2: command tx timeout [ 90.457569][ T5993] netlink: 'syz.0.15': attribute type 1 has an invalid length. [ 90.887705][ T6011] netlink: 76 bytes leftover after parsing attributes in process `syz.0.17'. [ 90.929899][ T6010] netlink: 52 bytes leftover after parsing attributes in process `syz.0.17'. [ 90.940843][ T6011] netlink: 52 bytes leftover after parsing attributes in process `syz.0.17'. [ 90.953670][ T6010] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.962523][ T6010] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.072447][ T6016] Zero length message leads to an empty skb [ 91.342147][ T6037] syzkaller0: entered promiscuous mode [ 91.347673][ T6037] syzkaller0: entered allmulticast mode [ 91.381359][ T6035] netlink: 240 bytes leftover after parsing attributes in process `syz.4.24'. [ 91.626336][ T6043] af_packet: tpacket_rcv: packet too big, clamped from 18 to 4294967272. macoff=96 [ 92.012513][ T796] cfg80211: failed to load regulatory.db [ 92.352542][ T6067] sctp: [Deprecated]: syz.4.32 (pid 6067) Use of int in max_burst socket option deprecated. [ 92.352542][ T6067] Use struct sctp_assoc_value instead [ 92.509494][ T6056] bridge_slave_0: left allmulticast mode [ 92.551614][ T6056] bridge_slave_0: left promiscuous mode [ 92.573407][ T6056] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.623797][ T6056] bridge_slave_1: left allmulticast mode [ 92.638561][ T6056] bridge_slave_1: left promiscuous mode [ 92.690051][ T6056] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.762175][ T6056] bond0: (slave bond_slave_0): Releasing backup interface [ 92.793355][ T6056] bond0: (slave bond_slave_1): Releasing backup interface [ 92.834476][ T6056] team0: Port device team_slave_0 removed [ 92.883973][ T6056] team0: Port device team_slave_1 removed [ 92.894900][ T6056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.904073][ T6056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.913750][ T6056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.927694][ T6056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.943215][ T6056] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 93.012560][ T6066] delete_channel: no stack [ 93.348096][ T6098] netlink: 'syz.2.39': attribute type 1 has an invalid length. [ 94.161677][ T6114] wg1: entered allmulticast mode [ 94.299495][ T6122] bond1: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 94.399442][ T6122] bond1 (unregistering): Released all slaves [ 94.794032][ T6148] netlink: 'syz.3.48': attribute type 2 has an invalid length. [ 94.844989][ T6146] __nla_validate_parse: 4 callbacks suppressed [ 94.845011][ T6146] netlink: 48 bytes leftover after parsing attributes in process `syz.1.49'. [ 95.188298][ T6162] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.205763][ T6162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.54'. [ 95.239960][ T6162] batadv0: entered promiscuous mode [ 95.247429][ T6162] macvtap1: entered promiscuous mode [ 95.253463][ T6162] macvtap1: entered allmulticast mode [ 95.260126][ T6165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.54'. [ 95.270051][ T6162] batadv0: entered allmulticast mode [ 95.282265][ T6162] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 95.296902][ T6165] batadv0: left allmulticast mode [ 95.302462][ T6165] batadv0: left promiscuous mode [ 95.388731][ T127] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.403761][ T127] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.437305][ T127] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.470753][ T127] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.514597][ T6175] netlink: 27 bytes leftover after parsing attributes in process `syz.1.57'. [ 95.536155][ T6175] warning: `syz.1.57' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 95.624817][ T6180] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 95.703487][ T6184] netlink: 36 bytes leftover after parsing attributes in process `syz.3.59'. [ 95.926324][ T6194] netlink: 72 bytes leftover after parsing attributes in process `syz.4.63'. [ 95.975442][ T6198] netlink: 12 bytes leftover after parsing attributes in process `syz.0.64'. [ 96.004716][ T6200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.65'. [ 96.023633][ T6204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.65'. [ 96.324227][ T6215] netlink: 24 bytes leftover after parsing attributes in process `syz.4.69'. [ 96.351138][ T6215] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.393187][ T6215] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.696292][ T6220] syzkaller1: entered promiscuous mode [ 96.702012][ T6220] syzkaller1: entered allmulticast mode [ 96.879728][ T6240] netlink: 'syz.4.77': attribute type 1 has an invalid length. [ 96.900140][ T6238] tipc: Enabling of bearer rejected, failed to enable media [ 96.944500][ T6242] IPv6: addrconf: prefix option has invalid lifetime [ 98.374508][ T6302] netlink: 'syz.2.89': attribute type 1 has an invalid length. [ 98.417388][ T6302] vlan2: entered promiscuous mode [ 98.423763][ T6302] vlan2: entered allmulticast mode [ 98.428939][ T6302] veth1_macvtap: entered allmulticast mode [ 98.572820][ T6309] netlink: 'syz.1.91': attribute type 1 has an invalid length. [ 98.636846][ T6314] netlink: 'syz.0.93': attribute type 3 has an invalid length. [ 99.282685][ T6326] veth3: entered allmulticast mode [ 99.880699][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.936713][ T6351] __nla_validate_parse: 25 callbacks suppressed [ 99.936737][ T6351] netlink: 16 bytes leftover after parsing attributes in process `syz.4.101'. [ 99.943572][ T6347] netlink: 20 bytes leftover after parsing attributes in process `syz.4.101'. [ 100.175920][ T6363] vti0: entered promiscuous mode [ 100.185633][ T6363] vti0: entered allmulticast mode [ 100.440684][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.553643][ T6381] ip6tnl1: entered promiscuous mode [ 100.936733][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.946344][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.017955][ T6405] netlink: 'syz.3.116': attribute type 4 has an invalid length. [ 101.569732][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.963328][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.209277][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.827390][ T6418] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.008385][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.694515][ T6391] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 103.892711][ T30] audit: type=1804 audit(1776204350.569:2): pid=6455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.131" name="/newroot/23/cgroup.controllers" dev="tmpfs" ino=136 res=1 errno=0 [ 103.935781][ T6460] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 103.975887][ T6462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.134'. [ 104.010771][ T30] audit: type=1800 audit(1776204350.609:3): pid=6455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.131" name="cgroup.controllers" dev="tmpfs" ino=136 res=0 errno=0 [ 104.011722][ T6455] ip6tnl1: entered allmulticast mode [ 104.040542][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.262911][ T6462] netlink: 'syz.4.134': attribute type 1 has an invalid length. [ 104.271106][ T6462] netlink: 'syz.4.134': attribute type 2 has an invalid length. [ 104.311162][ T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 104.331465][ T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 104.340499][ T5835] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 104.358465][ T6470] netlink: 700 bytes leftover after parsing attributes in process `syz.4.134'. [ 104.412979][ T6468] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 104.470582][ T6479] netlink: 28 bytes leftover after parsing attributes in process `syz.0.137'. [ 104.621064][ T29] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 104.776659][ T5835] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 104.823231][ T6497] netlink: 876 bytes leftover after parsing attributes in process `syz.3.140'. [ 104.840416][ T6497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.140'. [ 104.969071][ T29] IPVS: starting estimator thread 0... [ 105.071399][ T6507] IPVS: using max 24 ests per chain, 57600 per kthread [ 105.080502][ T29] net_ratelimit: 2 callbacks suppressed [ 105.080523][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.291746][ T6502] veth1_macvtap: left promiscuous mode [ 105.297389][ T6502] macsec0: entered allmulticast mode [ 105.320416][ T6505] veth1_macvtap: entered promiscuous mode [ 105.330418][ T6505] veth1_macvtap: entered allmulticast mode [ 105.348748][ T6505] macsec0: left allmulticast mode [ 105.362768][ T6516] netlink: 40 bytes leftover after parsing attributes in process `syz.0.146'. [ 105.380464][ T6505] veth1_macvtap: left allmulticast mode [ 105.401618][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.422217][ T6516] netlink: 260 bytes leftover after parsing attributes in process `syz.0.146'. [ 105.809127][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.104277][ T6543] netlink: 24 bytes leftover after parsing attributes in process `syz.0.151'. [ 106.173240][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.256890][ T6550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.266336][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.315066][ T6543] IPVS: Scheduler module ip_vs_sip not found [ 106.342551][ T6548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.364957][ T6548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.408172][ T6548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.440520][ T6554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.700638][ T6561] netlink: 28 bytes leftover after parsing attributes in process `syz.3.155'. [ 106.718681][ T6566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.157'. [ 106.727879][ T6566] netlink: 'syz.0.157': attribute type 2 has an invalid length. [ 106.739828][ T6566] netlink: 32 bytes leftover after parsing attributes in process `syz.0.157'. [ 106.748846][ T6561] netlink: 'syz.3.155': attribute type 7 has an invalid length. [ 106.799540][ T6561] netlink: 'syz.3.155': attribute type 8 has an invalid length. [ 106.830301][ T6561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.155'. [ 106.990984][ T6577] sctp: [Deprecated]: syz.0.160 (pid 6577) Use of int in max_burst socket option deprecated. [ 106.990984][ T6577] Use struct sctp_assoc_value instead [ 107.075849][ T6572] netlink: 165 bytes leftover after parsing attributes in process `syz.1.159'. [ 107.150805][ T6572] netlink: 16 bytes leftover after parsing attributes in process `syz.1.159'. [ 107.792833][ T6626] netlink: 28 bytes leftover after parsing attributes in process `syz.4.169'. [ 108.600841][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 108.915354][ T6670] syzkaller0: entered promiscuous mode [ 108.929177][ T6670] syzkaller0: entered allmulticast mode [ 109.246062][ T6694] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.255836][ T6694] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.295289][ T6694] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.327313][ T6694] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.124196][ T29] net_ratelimit: 10 callbacks suppressed [ 110.124219][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.204428][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.336079][ T6732] xt_CT: No such helper "syz1" [ 110.440457][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.690641][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.209401][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.482253][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.805260][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.281500][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.522614][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.948571][ T6736] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 112.989441][ T6738] __nla_validate_parse: 8 callbacks suppressed [ 112.989466][ T6738] netlink: 28 bytes leftover after parsing attributes in process `syz.2.192'. [ 113.073551][ T6738] netlink: 28 bytes leftover after parsing attributes in process `syz.2.192'. [ 113.108134][ T6755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.143041][ T6744] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 113.285896][ T6759] netlink: 'syz.1.194': attribute type 5 has an invalid length. [ 113.372717][ T6764] netlink: 180 bytes leftover after parsing attributes in process `syz.3.196'. [ 113.817187][ T6788] netlink: 'syz.1.200': attribute type 4 has an invalid length. [ 114.001508][ T6797] netlink: 14 bytes leftover after parsing attributes in process `syz.1.200'. [ 114.156245][ T6779] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 114.210096][ T6779] bond1 (unregistering): Released all slaves [ 114.530861][ T6797] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.616670][ T6797] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.652291][ T6797] bond0 (unregistering): Released all slaves [ 114.891178][ T6812] netlink: 168 bytes leftover after parsing attributes in process `syz.1.203'. [ 115.023978][ T6815] netlink: 128 bytes leftover after parsing attributes in process `syz.1.203'. [ 115.089114][ T6817] netlink: 12 bytes leftover after parsing attributes in process `syz.4.204'. [ 115.309210][ T6825] netlink: 40 bytes leftover after parsing attributes in process `syz.3.205'. [ 115.484854][ T796] net_ratelimit: 11 callbacks suppressed [ 115.484878][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.527425][ T6829] gre1: entered promiscuous mode [ 115.540663][ T6836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.208'. [ 115.643145][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.867922][ T6848] netlink: 24 bytes leftover after parsing attributes in process `syz.1.211'. [ 115.973722][ T6848] vlan2: entered promiscuous mode [ 116.007808][ T6848] bridge0: entered promiscuous mode [ 116.297908][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.499007][ T6869] netlink: 'syz.1.217': attribute type 1 has an invalid length. [ 116.527940][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.680496][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.887258][ T6886] Bluetooth: MGMT ver 1.23 [ 117.485857][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.560368][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 117.600453][ T6907] bridge_slave_1: left allmulticast mode [ 117.612859][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.631880][ T6907] bridge_slave_1: left promiscuous mode [ 117.637749][ T6907] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.714197][ T6907] bridge_slave_0: left allmulticast mode [ 117.722180][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.740525][ T6907] bridge_slave_0: left promiscuous mode [ 117.747149][ T6907] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.991040][ T6922] syzkaller0: entered promiscuous mode [ 117.997809][ T6922] syzkaller0: entered allmulticast mode [ 118.206340][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.215393][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.567316][ T6938] __nla_validate_parse: 6 callbacks suppressed [ 118.567338][ T6938] netlink: 16 bytes leftover after parsing attributes in process `syz.1.237'. [ 118.656121][ T6938] ipvlan1: entered promiscuous mode [ 118.690617][ T6938] ipvlan1: left promiscuous mode [ 119.032020][ T6960] netlink: 'syz.3.240': attribute type 4 has an invalid length. [ 119.039962][ T6959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.242'. [ 119.061597][ T6959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.242'. [ 119.074937][ T6959] netlink: 'syz.4.242': attribute type 18 has an invalid length. [ 119.404709][ T6968] netlink: 12 bytes leftover after parsing attributes in process `syz.4.245'. [ 119.497729][ T6968] 8021q: adding VLAN 0 to HW filter on device bond2 [ 119.615814][ T6974] syzkaller0: entered promiscuous mode [ 119.631370][ T6974] syzkaller0: entered allmulticast mode [ 119.647630][ T6979] netlink: 24 bytes leftover after parsing attributes in process `syz.3.248'. [ 119.666151][ T6972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.245'. [ 119.677420][ T6968] SET target dimension over the limit! [ 119.772871][ T6988] netlink: 'syz.2.250': attribute type 1 has an invalid length. [ 120.061482][ T7004] netlink: 28 bytes leftover after parsing attributes in process `syz.1.253'. [ 120.366053][ T7014] netlink: 24 bytes leftover after parsing attributes in process `syz.4.257'. [ 120.398163][ T7014] ip6gre1: entered promiscuous mode [ 120.431990][ T7014] ip6gre1: entered allmulticast mode [ 120.524293][ T5940] net_ratelimit: 5 callbacks suppressed [ 120.524313][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.843307][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.940638][ T7046] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.265'. [ 120.994661][ T7046] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.265'. [ 121.016954][ T7047] trusted_key: syz.0.266 sent an empty control message without MSG_MORE. [ 121.573500][ T7072] netlink: 'syz.4.273': attribute type 1 has an invalid length. [ 121.639759][ T7072] 0ªX¹¦À: renamed from caif0 [ 121.680289][ T7072] 0ªX¹¦À: entered allmulticast mode [ 121.685564][ T7072] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 121.880939][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.042521][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.106838][ T7097] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 122.138797][ T7097] netlink: 'syz.3.281': attribute type 39 has an invalid length. [ 122.681154][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.769053][ T7124] IPVS: length: 163 != 8 [ 122.778620][ T7089] netlink: 'syz.2.279': attribute type 3 has an invalid length. [ 122.786355][ T7089] netlink: 'syz.2.279': attribute type 1 has an invalid length. [ 122.925428][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.162620][ T7131] syz.0.289 (7131) used greatest stack depth: 17600 bytes left [ 123.297514][ T7142] netlink: 'syz.3.292': attribute type 1 has an invalid length. [ 123.596908][ T7166] __nla_validate_parse: 36 callbacks suppressed [ 123.596929][ T7166] netlink: 88 bytes leftover after parsing attributes in process `syz.3.297'. [ 123.642272][ T7155] syzkaller0: entered promiscuous mode [ 123.662712][ T7155] syzkaller0: entered allmulticast mode [ 123.786556][ T7177] netlink: 4 bytes leftover after parsing attributes in process `syz.4.299'. [ 123.802056][ T7178] netlink: 4 bytes leftover after parsing attributes in process `syz.4.299'. [ 123.965096][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.001483][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.066360][ T7191] tc_dump_action: action bad kind [ 125.169385][ T7196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.304'. [ 125.210760][ T127] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.222008][ T7196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.304'. [ 125.234312][ T127] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.251778][ T127] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.287177][ T127] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.472569][ T7207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.306'. [ 125.536234][ T7207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.618051][ T7207] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 125.720446][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.891182][ T7230] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20002 [ 126.041508][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.246238][ T7240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.315'. [ 126.259374][ T7232] bond2: option mode: invalid value (254) [ 126.296602][ T7232] bond2 (unregistering): Released all slaves [ 126.380015][ T7242] netlink: 28 bytes leftover after parsing attributes in process `syz.2.316'. [ 126.392384][ T7238] syz.1.313 (7238) used obsolete PPPIOCDETACH ioctl [ 126.453047][ T7242] syzkaller0: entered promiscuous mode [ 126.458673][ T7242] syzkaller0: entered allmulticast mode [ 126.471728][ T7242] netlink: 24 bytes leftover after parsing attributes in process `syz.2.316'. [ 126.505085][ T7246] netlink: 16 bytes leftover after parsing attributes in process `syz.3.317'. [ 126.514465][ T7242] netlink: 'syz.2.316': attribute type 9 has an invalid length. [ 126.585122][ T7246] xt_CT: No such helper "syz1" [ 127.083583][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.457014][ T7283] Driver unsupported XDP return value 0 on prog (id 110) dev N/A, expect packet loss! [ 127.469831][ T7282] sctp: [Deprecated]: syz.4.326 (pid 7282) Use of int in max_burst socket option deprecated. [ 127.469831][ T7282] Use struct sctp_assoc_value instead [ 127.498004][ T7283] netlink: 'syz.3.325': attribute type 1 has an invalid length. [ 128.124521][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.214232][ T7302] tipc: Invalid UDP bearer configuration [ 128.214289][ T7302] tipc: Enabling of bearer rejected, failed to enable media [ 128.288022][ T7307] FAULT_INJECTION: forcing a failure. [ 128.288022][ T7307] name failslab, interval 1, probability 0, space 0, times 1 [ 128.342066][ T7307] CPU: 0 UID: 0 PID: 7307 Comm: syz.0.333 Not tainted syzkaller #0 PREEMPT(full) [ 128.342098][ T7307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 128.342119][ T7307] Call Trace: [ 128.342128][ T7307] [ 128.342137][ T7307] dump_stack_lvl+0xe8/0x150 [ 128.342187][ T7307] should_fail_ex+0x412/0x560 [ 128.342229][ T7307] should_failslab+0xa8/0x100 [ 128.342273][ T7307] __kmalloc_cache_noprof+0x88/0x660 [ 128.342301][ T7307] ? sctp_stream_init_ext+0x57/0x180 [ 128.342340][ T7307] sctp_stream_init_ext+0x57/0x180 [ 128.342377][ T7307] sctp_sendmsg_to_asoc+0x8e4/0x1900 [ 128.342405][ T7307] ? __asan_memcpy+0x40/0x70 [ 128.342435][ T7307] ? sctp_assoc_add_peer+0xce1/0x13b0 [ 128.342477][ T7307] ? sctp_connect_new_asoc+0x40a/0x6b0 [ 128.342507][ T7307] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 128.342536][ T7307] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 128.342566][ T7307] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 128.342596][ T7307] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 128.342623][ T7307] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 128.342653][ T7307] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 128.342682][ T7307] ? security_sctp_bind_connect+0x7e/0x2c0 [ 128.342717][ T7307] sctp_sendmsg+0x1b3d/0x2c10 [ 128.342760][ T7307] ? __pfx_sctp_sendmsg+0x10/0x10 [ 128.342792][ T7307] ? aa_sk_perm+0x6d5/0x900 [ 128.342835][ T7307] ? __pfx_aa_sk_perm+0x10/0x10 [ 128.342872][ T7307] ? sock_rps_record_flow+0x19/0x350 [ 128.342905][ T7307] ? __pfx_inet_sendmsg+0x10/0x10 [ 128.342948][ T7307] ? inet_sendmsg+0x2f4/0x370 [ 128.342980][ T7307] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 128.343007][ T7307] ? __pfx_inet_sendmsg+0x10/0x10 [ 128.343042][ T7307] __sys_sendto+0x5de/0x710 [ 128.343077][ T7307] ? __pfx___sys_sendto+0x10/0x10 [ 128.343105][ T7307] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 128.343148][ T7307] ? __fget_files+0x3a0/0x420 [ 128.343187][ T7307] ? ksys_write+0x242/0x270 [ 128.343216][ T7307] ? __pfx_ksys_write+0x10/0x10 [ 128.343248][ T7307] __x64_sys_sendto+0xde/0x100 [ 128.343283][ T7307] do_syscall_64+0x14d/0xf80 [ 128.343309][ T7307] ? trace_irq_disable+0x3b/0x150 [ 128.343329][ T7307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.343353][ T7307] ? clear_bhb_loop+0x40/0x90 [ 128.343381][ T7307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.343403][ T7307] RIP: 0033:0x7f89b159c819 [ 128.343431][ T7307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.343450][ T7307] RSP: 002b:00007f89b2432028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 128.343482][ T7307] RAX: ffffffffffffffda RBX: 00007f89b1815fa0 RCX: 00007f89b159c819 [ 128.343499][ T7307] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: 0000000000000003 [ 128.343513][ T7307] RBP: 00007f89b2432090 R08: 0000200000000480 R09: 000000000000001c [ 128.343529][ T7307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.343542][ T7307] R13: 00007f89b1816038 R14: 00007f89b1815fa0 R15: 00007ffd60082258 [ 128.343577][ T7307] [ 128.492396][ T7310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.660484][ T7310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.669020][ T7310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.678388][ T7311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.686839][ T7311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.740731][ T7311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.791181][ T7309] __nla_validate_parse: 7 callbacks suppressed [ 128.791203][ T7309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.334'. [ 129.073487][ T7324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.339'. [ 129.462446][ T7343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.342'. [ 130.007045][ T7373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.028740][ T7359] syzkaller1: entered promiscuous mode [ 130.036499][ T7359] syzkaller1: entered allmulticast mode [ 130.735986][ T7410] netlink: 52 bytes leftover after parsing attributes in process `syz.2.358'. [ 130.776109][ T7412] netlink: 'syz.4.360': attribute type 83 has an invalid length. [ 131.136989][ T7430] dvmrp6: entered allmulticast mode [ 131.243286][ T5898] net_ratelimit: 39 callbacks suppressed [ 131.243307][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.374291][ T7435] syzkaller0: entered promiscuous mode [ 131.379849][ T7435] syzkaller0: entered allmulticast mode [ 131.639450][ T7453] can: request_module (can-proto-0) failed. [ 131.655402][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.690843][ T7453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.699452][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.801381][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.964333][ T7475] netlink: 68 bytes leftover after parsing attributes in process `syz.1.380'. [ 132.281117][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.922974][ T1300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.924095][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.933721][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.946286][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.324067][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.908663][ T7533] netlink: 28 bytes leftover after parsing attributes in process `syz.3.392'. [ 133.956720][ T7533] netlink: 28 bytes leftover after parsing attributes in process `syz.3.392'. [ 134.023138][ T7531] bond2: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 134.052441][ T7531] bond2 (unregistering): Released all slaves [ 134.338143][ T7553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.398'. [ 134.360738][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.613899][ T7565] netlink: 104 bytes leftover after parsing attributes in process `syz.2.402'. [ 134.766804][ T7575] netlink: 'syz.2.406': attribute type 10 has an invalid length. [ 134.798746][ T7575] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 135.031115][ T7573] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.095267][ T7595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.215467][ T7573] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.338462][ T7573] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.372327][ T7606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.412'. [ 135.480348][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 135.493176][ T7573] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.623167][ T5830] Bluetooth: hci4: link tx timeout [ 135.628665][ T5830] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 135.640955][ T5830] Bluetooth: hci4: link tx timeout [ 135.646119][ T5830] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 135.654365][ T5830] Bluetooth: hci4: link tx timeout [ 135.659522][ T5830] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 135.667894][ T5830] Bluetooth: hci4: link tx timeout [ 135.673143][ T5830] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 135.698977][ T5830] Bluetooth: hci4: link tx timeout [ 135.704762][ T5830] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 135.712945][ T5830] Bluetooth: hci4: link tx timeout [ 135.718376][ T5830] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 135.728945][ T5830] Bluetooth: hci4: link tx timeout [ 135.734367][ T5830] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 135.742378][ T5830] Bluetooth: hci4: link tx timeout [ 135.747536][ T5830] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 135.806617][ T136] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.857573][ T136] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.922186][ T136] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.966522][ T136] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.975275][ T7628] netlink: 14 bytes leftover after parsing attributes in process `syz.0.416'. [ 136.107667][ T7628] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.192918][ T7628] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.225739][ T7628] bond0 (unregistering): Released all slaves [ 136.446994][ T5919] net_ratelimit: 2 callbacks suppressed [ 136.447014][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.508960][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.603941][ T7656] netlink: 16 bytes leftover after parsing attributes in process `syz.0.424'. [ 136.699308][ T7664] netlink: 11 bytes leftover after parsing attributes in process `syz.3.425'. [ 136.710033][ T7665] netlink: 11 bytes leftover after parsing attributes in process `syz.3.425'. [ 136.719149][ T7664] netlink: 28 bytes leftover after parsing attributes in process `syz.3.425'. [ 136.952798][ T7671] xt_CT: You must specify a L4 protocol and not use inversions on it [ 137.058439][ T7680] netlink: 'syz.0.431': attribute type 16 has an invalid length. [ 137.165735][ T7683] syzkaller0: entered promiscuous mode [ 137.180474][ T7683] syzkaller0: entered allmulticast mode [ 137.295084][ T7694] netlink: 'syz.2.435': attribute type 5 has an invalid length. [ 137.481589][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.515073][ T7702] netlink: 'syz.2.438': attribute type 10 has an invalid length. [ 137.561261][ T7677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.577706][ T7677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.587644][ T7677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.642137][ T5830] Bluetooth: hci4: command 0x0406 tx timeout [ 137.655155][ T7703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.675627][ T7703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.062478][ T7719] ifb0: entered promiscuous mode [ 138.068463][ T7719] dummy0: entered promiscuous mode [ 138.082176][ T7719] debugfs: 'hsr0' already exists in 'hsr' [ 138.088005][ T7719] Cannot create hsr debugfs directory [ 138.127297][ T7673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.523587][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.795543][ T7743] netlink: 'syz.3.449': attribute type 9 has an invalid length. [ 138.876015][ T7758] sctp: [Deprecated]: syz.4.448 (pid 7758) Use of struct sctp_assoc_value in delayed_ack socket option. [ 138.876015][ T7758] Use struct sctp_sack_info instead [ 139.017045][ T7768] __nla_validate_parse: 11 callbacks suppressed [ 139.017068][ T7768] netlink: 24 bytes leftover after parsing attributes in process `syz.2.452'. [ 139.139402][ T7774] netlink: 12 bytes leftover after parsing attributes in process `syz.3.453'. [ 139.284860][ T7782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.298999][ T7782] netlink: 'syz.2.456': attribute type 10 has an invalid length. [ 139.307732][ T7782] bond0: (slave wlan1): Opening slave failed [ 139.748747][ T10] IPVS: starting estimator thread 0... [ 139.851713][ T7808] IPVS: using max 26 ests per chain, 62400 per kthread [ 139.926204][ T7814] netlink: 16 bytes leftover after parsing attributes in process `syz.1.462'. [ 140.511529][ T7838] netlink: 12 bytes leftover after parsing attributes in process `syz.0.466'. [ 140.795279][ T7856] netlink: 'syz.0.471': attribute type 13 has an invalid length. [ 140.825739][ T7856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.471'. [ 141.256074][ T7877] netlink: 80 bytes leftover after parsing attributes in process `syz.2.477'. [ 141.277102][ T7878] macsec1: entered allmulticast mode [ 141.346163][ T7878] macsec0: entered allmulticast mode [ 141.372355][ T7878] veth1_macvtap: entered allmulticast mode [ 141.640659][ T5919] net_ratelimit: 6 callbacks suppressed [ 141.640679][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.712082][ T7895] netlink: 80 bytes leftover after parsing attributes in process `syz.4.483'. [ 141.964298][ T7901] netlink: 32 bytes leftover after parsing attributes in process `syz.0.485'. [ 142.041941][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.141415][ T7919] netlink: 156 bytes leftover after parsing attributes in process `syz.4.488'. [ 142.194678][ T7919] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 142.643978][ T7934] dummy0: entered promiscuous mode [ 142.651168][ T7934] bridge0: entered promiscuous mode [ 142.665871][ T7934] hsr1: Slave B (bridge0) is not up; please bring it up to get a fully working HSR network [ 142.682373][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.708351][ T7934] hsr1: entered allmulticast mode [ 142.725077][ T7934] dummy0: entered allmulticast mode [ 142.734201][ T7934] bridge0: entered allmulticast mode [ 143.037159][ T7947] netlink: 51 bytes leftover after parsing attributes in process `syz.2.496'. [ 143.175085][ T7947] 8021q: adding VLAN 0 to HW filter on device bond2 [ 143.499534][ T7966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.508256][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.682563][ T7970] sctp: [Deprecated]: syz.4.500 (pid 7970) Use of struct sctp_assoc_value in delayed_ack socket option. [ 143.682563][ T7970] Use struct sctp_sack_info instead [ 143.721031][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.341018][ T7992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.379004][ T7992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.743632][ T8015] __nla_validate_parse: 3 callbacks suppressed [ 144.743657][ T8015] netlink: 12 bytes leftover after parsing attributes in process `syz.4.513'. [ 144.761158][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.801844][ T8016] netlink: 12 bytes leftover after parsing attributes in process `syz.4.513'. [ 144.861235][ T8018] netlink: 156 bytes leftover after parsing attributes in process `syz.3.514'. [ 144.919801][ T8018] netlink: 164 bytes leftover after parsing attributes in process `syz.3.514'. [ 145.093431][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.203611][ T8037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.518'. [ 145.247566][ T8037] openvswitch: netlink: Message has 2 unknown bytes. [ 145.302642][ T8042] sctp: [Deprecated]: syz.3.521 (pid 8042) Use of int in maxseg socket option. [ 145.302642][ T8042] Use struct sctp_assoc_value instead [ 145.826303][ T8062] netlink: 60 bytes leftover after parsing attributes in process `syz.1.528'. [ 146.017410][ T8071] IPv6: Can't replace route, no match found [ 146.030709][ T8071] IPv6: Can't replace route, no match found [ 146.047778][ T8071] IPVS: set_ctl: invalid protocol: 115 10.1.1.1:20002 [ 146.079155][ T8076] syzkaller0: entered promiscuous mode [ 146.094974][ T8076] syzkaller0: entered allmulticast mode [ 146.271565][ T8085] syzkaller0: entered promiscuous mode [ 146.277282][ T8085] syzkaller0: entered allmulticast mode [ 146.843791][ T796] net_ratelimit: 1 callbacks suppressed [ 146.843812][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.965951][ T8117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.539'. [ 147.196126][ T8133] netlink: 224 bytes leftover after parsing attributes in process `syz.1.543'. [ 147.640597][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.884015][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.132230][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.217609][ T8127] tipc: Enabling of bearer rejected, failed to enable media [ 148.227847][ T8126] netlink: 32 bytes leftover after parsing attributes in process `syz.3.542'. [ 148.441998][ T8144] netlink: 260 bytes leftover after parsing attributes in process `syz.3.546'. [ 148.928006][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.288590][ T8168] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.301998][ T8168] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.394002][ T8185] geneve2: entered promiscuous mode [ 149.504323][ T8168] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.518401][ T8168] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.627642][ T8168] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.660389][ T8168] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.702437][ T8199] syzkaller0: entered promiscuous mode [ 149.708201][ T8199] syzkaller0: entered allmulticast mode [ 149.773903][ T8168] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.799303][ T8168] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.961205][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.050064][ T34] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.066029][ T8210] block nbd1: not configured, cannot reconfigure [ 150.083206][ T34] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.112314][ T136] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.113447][ T8210] netlink: 'syz.1.559': attribute type 1 has an invalid length. [ 150.137907][ T136] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.284234][ T8210] bond2: entered promiscuous mode [ 150.290372][ T8210] 8021q: adding VLAN 0 to HW filter on device bond2 [ 150.316926][ T136] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.339677][ T136] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.388825][ T8219] 8021q: adding VLAN 0 to HW filter on device bond2 [ 150.409099][ T8219] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 150.420466][ T8219] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 150.456644][ T8219] bond2: (slave wireguard0): making interface the new active one [ 150.473167][ T8219] wireguard0: entered promiscuous mode [ 150.491689][ T8219] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 150.525900][ T127] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.534611][ T127] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.756588][ T8230] Bluetooth: MGMT ver 1.23 [ 150.829445][ T8233] __nla_validate_parse: 1 callbacks suppressed [ 150.829467][ T8233] netlink: 32 bytes leftover after parsing attributes in process `syz.1.564'. [ 150.853736][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.870570][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.001378][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.062941][ T8233] netlink: 16 bytes leftover after parsing attributes in process `syz.1.564'. [ 151.160515][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.353333][ T8246] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 151.456556][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.524605][ T8250] netlink: 'syz.4.568': attribute type 10 has an invalid length. [ 151.549899][ T8250] bond0: (slave wlan1): Opening slave failed [ 151.568786][ T8257] netlink: 12 bytes leftover after parsing attributes in process `syz.1.570'. [ 151.597292][ T8250] netlink: 60 bytes leftover after parsing attributes in process `syz.4.568'. [ 151.620438][ T8250] netlink: 67 bytes leftover after parsing attributes in process `syz.4.568'. [ 151.641789][ T8250] netlink: 12 bytes leftover after parsing attributes in process `syz.4.568'. [ 151.724577][ T8257] 8021q: adding VLAN 0 to HW filter on device bond3 [ 151.848223][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.980678][ T8260] macvlan2: entered allmulticast mode [ 152.001590][ T8260] veth0_to_bond: entered promiscuous mode [ 152.013505][ T8260] veth0_to_bond: entered allmulticast mode [ 152.044389][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.066606][ T8260] bond3: (slave macvlan2): Enslaving as an active interface with an up link [ 152.128999][ T8274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.572'. [ 152.177693][ T8274] batadv_slave_0: entered promiscuous mode [ 152.190372][ T8274] macsec1: entered promiscuous mode [ 152.195888][ T8274] macsec1: entered allmulticast mode [ 152.255846][ T8274] batadv_slave_0: entered allmulticast mode [ 152.312957][ T8274] batadv_slave_0: left allmulticast mode [ 152.319125][ T8274] batadv_slave_0: left promiscuous mode [ 152.670413][ T8292] netlink: 16 bytes leftover after parsing attributes in process `syz.3.577'. [ 152.747592][ T8292] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 152.756205][ T8293] openvswitch: netlink: IP tunnel dst address not specified [ 152.819210][ T8303] netlink: 52 bytes leftover after parsing attributes in process `syz.4.578'. [ 152.927754][ T8303] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 153.141542][ T8316] netlink: 20 bytes leftover after parsing attributes in process `syz.4.582'. [ 154.845173][ T8383] ip6gretap0: entered promiscuous mode [ 155.141541][ T8393] bond2: option all_slaves_active: invalid value (5) [ 155.151757][ T8393] bond2 (unregistering): Released all slaves [ 155.863493][ T8431] __nla_validate_parse: 13 callbacks suppressed [ 155.863515][ T8431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.609'. [ 155.897352][ T8431] netlink: 'syz.0.609': attribute type 39 has an invalid length. [ 156.089876][ T8440] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 156.128641][ T8440] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 156.965110][ T8486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.621'. [ 157.120477][ T8493] netlink: 'syz.4.624': attribute type 13 has an invalid length. [ 157.188106][ T8496] netlink: 'syz.4.624': attribute type 1 has an invalid length. [ 157.222643][ T8495] netlink: 76 bytes leftover after parsing attributes in process `syz.2.625'. [ 157.250113][ T8498] netlink: 36 bytes leftover after parsing attributes in process `syz.4.624'. [ 157.323182][ T8501] No such timeout policy "syz0" [ 157.515091][ T8496] 8021q: adding VLAN 0 to HW filter on device bond3 [ 157.543596][ T8506] bond3: (slave bridge3): making interface the new active one [ 157.552994][ T8506] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 157.709164][ T8517] netlink: 48 bytes leftover after parsing attributes in process `syz.2.628'. [ 157.740767][ T8516] syzkaller0: entered promiscuous mode [ 157.746322][ T8516] syzkaller0: entered allmulticast mode [ 157.789592][ T8520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.630'. [ 157.845826][ T8522] netlink: 12 bytes leftover after parsing attributes in process `syz.1.630'. [ 157.939480][ T8517] netlink: 48 bytes leftover after parsing attributes in process `syz.2.628'. [ 158.205580][ T8539] ip6tnl0: Caught tx_queue_len zero misconfig [ 158.619993][ T8563] netlink: 8 bytes leftover after parsing attributes in process `syz.4.638'. [ 158.730467][ T8563] lo: Caught tx_queue_len zero misconfig [ 158.802544][ T8573] netlink: 16 bytes leftover after parsing attributes in process `syz.3.640'. [ 158.968605][ T8573] bond2: entered promiscuous mode [ 159.413550][ T8589] syzkaller0: entered promiscuous mode [ 159.419163][ T8589] syzkaller0: entered allmulticast mode [ 160.030000][ T8624] netlink: 'syz.1.653': attribute type 1 has an invalid length. [ 160.144200][ T8632] netlink: 'syz.2.657': attribute type 2 has an invalid length. [ 160.150078][ T8624] macvtap1: left promiscuous mode [ 160.162513][ T8624] vlan2: left promiscuous mode [ 160.167454][ T8624] bridge0: left promiscuous mode [ 160.178349][ T8624] bond2: left promiscuous mode [ 160.186234][ T8624] wireguard0: left promiscuous mode [ 160.256629][ T8630] sit0: left promiscuous mode [ 160.304378][ T8630] wg1: left allmulticast mode [ 160.365175][ T8630] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.379861][ T8630] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.482340][ T8630] ip6tnl1: left allmulticast mode [ 160.495063][ T8628] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 160.537588][ T3012] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.566571][ T3012] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.603234][ T3012] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.631573][ T3012] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.974037][ T8673] xt_connbytes: Forcing CT accounting to be enabled [ 161.111329][ T8688] IPVS: length: 102 != 24 [ 161.214588][ T8692] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 162.139727][ T8734] netlink: 'syz.0.671': attribute type 61 has an invalid length. [ 162.223937][ T8739] __nla_validate_parse: 8 callbacks suppressed [ 162.223960][ T8739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.672'. [ 162.701792][ T8764] netlink: zone id is out of range [ 162.706990][ T8764] netlink: zone id is out of range [ 162.725437][ T8764] netlink: zone id is out of range [ 162.750829][ T8764] netlink: zone id is out of range [ 162.756041][ T8764] netlink: zone id is out of range [ 162.761967][ T8764] netlink: zone id is out of range [ 162.767136][ T8764] netlink: zone id is out of range [ 162.780955][ T8764] netlink: zone id is out of range [ 162.786235][ T8764] netlink: zone id is out of range [ 163.137673][ T8632] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 163.343353][ T8767] ip6gre1: entered promiscuous mode [ 163.358421][ T8767] ip6gre1: entered allmulticast mode [ 163.372444][ T1037] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 163.392827][ T1037] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 163.401612][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 163.435755][ T8771] netlink: 12 bytes leftover after parsing attributes in process `syz.1.681'. [ 163.462487][ T8771] netlink: 12 bytes leftover after parsing attributes in process `syz.1.681'. [ 163.490950][ T5828] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 163.961382][ T5828] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 164.005328][ T8806] xt_TPROXY: Can be used only with -p tcp or -p udp [ 164.038339][ T8810] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 164.048490][ T8811] block nbd0: not configured, cannot reconfigure [ 164.137502][ T8818] netlink: 44 bytes leftover after parsing attributes in process `syz.4.693'. [ 164.177584][ T8818] netlink: 43 bytes leftover after parsing attributes in process `syz.4.693'. [ 164.222861][ T8818] netlink: 'syz.4.693': attribute type 5 has an invalid length. [ 164.247167][ T8818] netlink: 43 bytes leftover after parsing attributes in process `syz.4.693'. [ 164.512426][ T8837] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.698'. [ 165.029696][ T8868] syzkaller0: entered promiscuous mode [ 165.035394][ T8868] syzkaller0: entered allmulticast mode [ 165.080427][ T8868] bond3: option all_slaves_active: invalid value (5) [ 165.102665][ T8868] bond3 (unregistering): Released all slaves [ 165.351743][ T8878] netlink: 'syz.1.710': attribute type 1 has an invalid length. [ 165.599209][ T8878] 8021q: adding VLAN 0 to HW filter on device bond4 [ 165.618757][ T8880] vlan3: entered allmulticast mode [ 165.624810][ T8880] bond4: entered allmulticast mode [ 165.666366][ T8881] bond4: (slave geneve3): making interface the new active one [ 165.693974][ T8881] geneve3: entered allmulticast mode [ 165.705823][ T8881] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 165.744338][ T34] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 165.768906][ T34] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 165.783430][ T34] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 165.793591][ T34] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 165.936334][ T8899] xt_policy: too many policy elements [ 166.043114][ T8905] tipc: Started in network mode [ 166.048066][ T8905] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 166.097212][ T8910] netlink: 'syz.1.720': attribute type 10 has an invalid length. [ 166.106723][ T8905] tipc: Enabling of bearer rejected, failed to enable media [ 166.121760][ T8910] syz_tun: entered promiscuous mode [ 166.156153][ T8912] netlink: 'syz.3.721': attribute type 11 has an invalid length. [ 166.241915][ T8912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.721'. [ 166.341920][ T8920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.724'. [ 166.448841][ T8920] bond3: option broadcast_neighbor: invalid value (30) [ 166.505674][ T8920] bond3 (unregistering): Released all slaves [ 166.615963][ T8924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.725'. [ 166.633834][ T8926] syzkaller0: entered promiscuous mode [ 166.639496][ T8926] syzkaller0: entered allmulticast mode [ 166.837624][ T8950] x_tables: duplicate underflow at hook 4 [ 167.321022][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 167.676216][ T8976] __nla_validate_parse: 1 callbacks suppressed [ 167.676260][ T8976] netlink: 28 bytes leftover after parsing attributes in process `syz.4.738'. [ 167.743196][ T29] net_ratelimit: 43 callbacks suppressed [ 167.743214][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.767184][ T8990] xt_bpf: check failed: parse error [ 168.049554][ T8999] netlink: 44 bytes leftover after parsing attributes in process `syz.1.741'. [ 168.076124][ T8996] netlink: 'syz.3.742': attribute type 1 has an invalid length. [ 168.101056][ T8996] netlink: 96 bytes leftover after parsing attributes in process `syz.3.742'. [ 168.144837][ T8996] netlink: 1 bytes leftover after parsing attributes in process `syz.3.742'. [ 168.166042][ T9005] netlink: 'syz.1.741': attribute type 30 has an invalid length. [ 168.174042][ T8996] netlink: 'syz.3.742': attribute type 1 has an invalid length. [ 168.174079][ T8996] netlink: 634 bytes leftover after parsing attributes in process `syz.3.742'. [ 168.253924][ T9005] bond5: option arp_missed_max: invalid value (0) [ 168.261472][ T9005] bond5: option arp_missed_max: allowed values 1 - 255 [ 168.315989][ T9005] bond5 (unregistering): Released all slaves [ 168.361204][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.573147][ T9014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.745'. [ 168.622313][ T9014] netlink: 'syz.3.745': attribute type 30 has an invalid length. [ 168.636957][ T9014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.745'. [ 168.687084][ T9017] netlink: 'syz.3.745': attribute type 3 has an invalid length. [ 168.766034][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.261198][ T9030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.749'. [ 169.591302][ T9043] netlink: 'syz.3.753': attribute type 1 has an invalid length. [ 169.783128][ T9045] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 169.795900][ T9043] netlink: 20 bytes leftover after parsing attributes in process `syz.3.753'. [ 169.811742][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.834052][ T9045] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 169.854948][ T9052] netlink: 28 bytes leftover after parsing attributes in process `syz.3.753'. [ 169.926836][ T9043] bond3: (slave bridge2): Enslaving as an active interface with a down link [ 170.064168][ T9052] 8021q: adding VLAN 0 to HW filter on device bond3 [ 170.223183][ T9052] macvlan1: entered promiscuous mode [ 170.268286][ T9052] macvlan1: entered allmulticast mode [ 170.307490][ T9052] bond3: entered promiscuous mode [ 170.390275][ T9052] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 170.504335][ T9052] bond3: left promiscuous mode [ 170.582337][ T9074] netlink: 'syz.1.760': attribute type 1 has an invalid length. [ 170.685463][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.769814][ T9074] 8021q: adding VLAN 0 to HW filter on device bond5 [ 170.847971][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.861203][ T9083] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 170.873943][ T9084] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 170.974941][ T9076] bond5: (slave veth3): Enslaving as an active interface with a down link [ 171.013767][ T9088] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 171.057317][ T9081] bond5: (slave dummy0): making interface the new active one [ 171.097678][ T9081] dummy0: entered promiscuous mode [ 171.124257][ T9081] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 171.191709][ T9074] bond5: (slave dummy0): Releasing active interface [ 171.198407][ T9074] dummy0 (unregistering): left promiscuous mode [ 171.401600][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.893591][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.581342][ T9147] ipvlan0: entered promiscuous mode [ 172.630129][ T9147] team0: Device ipvlan0 failed to register rx_handler [ 172.776266][ T9146] ipvlan0: entered promiscuous mode [ 172.796033][ T9146] team0: Device ipvlan0 failed to register rx_handler [ 172.935497][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.473576][ T9175] bond3 (unregistering): Released all slaves [ 173.901929][ T9197] netlink: 'syz.1.781': attribute type 21 has an invalid length. [ 173.965922][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.440598][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.450058][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.004291][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.612061][ T9152] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 175.622883][ T9188] __nla_validate_parse: 5 callbacks suppressed [ 175.622903][ T9188] netlink: 260 bytes leftover after parsing attributes in process `syz.3.779'. [ 175.799584][ T9212] netlink: 212328 bytes leftover after parsing attributes in process `syz.2.783'. [ 175.809326][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 175.832234][ T9212] netlink: Unknown conntrack attr (type=2304, max=9) [ 176.046423][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.579552][ T30] audit: type=1804 audit(1776204423.259:4): pid=9252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.795" name="/newroot/164/memory.events" dev="tmpfs" ino=851 res=1 errno=0 [ 176.674845][ T30] audit: type=1800 audit(1776204423.259:5): pid=9252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.795" name="memory.events" dev="tmpfs" ino=851 res=0 errno=0 [ 176.740574][ T9260] syzkaller1: entered allmulticast mode [ 176.758844][ T30] audit: type=1804 audit(1776204423.289:6): pid=9254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.795" name="/newroot/164/memory.events" dev="tmpfs" ino=851 res=1 errno=0 [ 177.094793][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.131018][ T9278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.801'. [ 177.168428][ T9278] openvswitch: netlink: Flow actions attr not present in new flow. [ 177.183608][ T9273] netlink: 'syz.2.800': attribute type 29 has an invalid length. [ 177.206356][ T9278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.801'. [ 177.267957][ T9281] netlink: 'syz.2.800': attribute type 29 has an invalid length. [ 177.481037][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.504380][ T5828] IPVS: starting estimator thread 0... [ 177.558606][ T9299] netlink: 'syz.1.806': attribute type 11 has an invalid length. [ 177.601148][ T9297] IPVS: using max 26 ests per chain, 62400 per kthread [ 177.808413][ T9309] netlink: 'syz.3.809': attribute type 10 has an invalid length. [ 177.829083][ T9309] netlink: 2 bytes leftover after parsing attributes in process `syz.3.809'. [ 177.872474][ T9311] netlink: 'syz.2.810': attribute type 12 has an invalid length. [ 177.884910][ T9311] netlink: 'syz.2.810': attribute type 29 has an invalid length. [ 177.899911][ T9317] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.810'. [ 177.912346][ T9311] netlink: 148 bytes leftover after parsing attributes in process `syz.2.810'. [ 177.932306][ T9311] netlink: 59 bytes leftover after parsing attributes in process `syz.2.810'. [ 177.941948][ T9309] hsr0: entered promiscuous mode [ 177.947937][ T9309] bridge0: port 1(hsr0) entered blocking state [ 177.954923][ T9309] bridge0: port 1(hsr0) entered disabled state [ 177.985520][ T9309] hsr0: entered allmulticast mode [ 177.998495][ T9309] hsr_slave_0: entered allmulticast mode [ 178.026371][ T9309] hsr_slave_1: entered allmulticast mode [ 178.045993][ T9309] bridge0: port 1(hsr0) entered blocking state [ 178.052423][ T9309] bridge0: port 1(hsr0) entered forwarding state [ 178.131175][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.520405][ C1] [ 178.522819][ C1] ============================================ [ 178.529006][ C1] WARNING: possible recursive locking detected [ 178.535395][ C1] syzkaller #0 Not tainted [ 178.539852][ C1] -------------------------------------------- [ 178.546385][ C1] syz-executor/5833 is trying to acquire lock: [ 178.552681][ C1] ffff88807a114fb0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 178.561907][ C1] [ 178.561907][ C1] but task is already holding lock: [ 178.569323][ C1] ffff88807b758fb0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0 [ 178.579670][ C1] [ 178.579670][ C1] other info that might help us debug this: [ 178.587769][ C1] Possible unsafe locking scenario: [ 178.587769][ C1] [ 178.595350][ C1] CPU0 [ 178.598657][ C1] ---- [ 178.601959][ C1] lock(&hsr->seqnr_lock); [ 178.606490][ C1] lock(&hsr->seqnr_lock); [ 178.611019][ C1] [ 178.611019][ C1] *** DEADLOCK *** [ 178.611019][ C1] [ 178.619176][ C1] May be due to missing lock nesting notation [ 178.619176][ C1] [ 178.627857][ C1] 16 locks held by syz-executor/5833: [ 178.633248][ C1] #0: ffffffff8e82ac10 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x130/0x4a0 [ 178.641998][ C1] #1: ffff888035424080 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x181/0x1d90 [ 178.651115][ C1] #2: ffff88807a33c080 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x26f/0x1d90 [ 178.660376][ C1] #3: ffffffff8e75e5a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 178.669894][ C1] #4: ffff88805658b138 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 178.680376][ C1] #5: ffffffff8e75e5a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 178.689996][ C1] #6: ffff88805c70d378 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x6e8/0x8050 [ 178.700403][ C1] #7: ffffffff8e75e5a0 (rcu_read_lock){....}-{1:3}, at: page_table_check_set+0x148/0x610 [ 178.710357][ C1] #8: ffffc90000a08ce0 ((&hsr->announce_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd4/0x640 [ 178.720400][ C1] #9: ffffffff8e75e5a0 (rcu_read_lock){....}-{1:3}, at: hsr_announce+0x89/0x370 [ 178.729650][ C1] #10: ffff88807b758fb0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0 [ 178.740569][ C1] #11: ffffffff8e75e5a0 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0xbb/0x2a80 [ 178.750269][ C1] #12: ffffffff8e75e600 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3980 [ 178.760311][ C1] #13: ffffffff8e75e5a0 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x193/0x1990 [ 178.769650][ C1] #14: ffffffff8e75e600 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3980 [ 178.779684][ C1] #15: ffffffff8e75e5a0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 178.789038][ C1] [ 178.789038][ C1] stack backtrace: [ 178.794953][ C1] CPU: 1 UID: 0 PID: 5833 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 178.794973][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 178.794984][ C1] Call Trace: [ 178.794993][ C1] [ 178.795001][ C1] dump_stack_lvl+0xe8/0x150 [ 178.795029][ C1] print_deadlock_bug+0x279/0x290 [ 178.795057][ C1] __lock_acquire+0x253f/0x2cf0 [ 178.795085][ C1] ? skb_network_protocol+0x234/0x400 [ 178.795114][ C1] ? netif_skb_features+0xdf0/0x1480 [ 178.795142][ C1] lock_acquire+0xf0/0x2e0 [ 178.795163][ C1] ? hsr_dev_xmit+0x237/0x360 [ 178.795188][ C1] ? __pfx_netif_skb_features+0x10/0x10 [ 178.795215][ C1] ? hsr_dev_xmit+0x237/0x360 [ 178.795238][ C1] _raw_spin_lock_bh+0x36/0x50 [ 178.795255][ C1] ? hsr_dev_xmit+0x237/0x360 [ 178.795278][ C1] hsr_dev_xmit+0x237/0x360 [ 178.795301][ C1] ? hsr_dev_xmit+0x2d/0x360 [ 178.795342][ C1] dev_hard_start_xmit+0x2d8/0x870 [ 178.795375][ C1] __dev_queue_xmit+0x14d9/0x3980 [ 178.795395][ C1] ? __dev_queue_xmit+0x2b6/0x3980 [ 178.795413][ C1] ? ebt_do_table+0x2665/0x2830 [ 178.795429][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 178.795452][ C1] ? ebt_do_table+0x2665/0x2830 [ 178.795470][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 178.795501][ C1] ? br_nf_post_routing+0x219/0xfe0 [ 178.795531][ C1] br_dev_queue_push_xmit+0x370/0x4b0 [ 178.795556][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 178.795579][ C1] NF_HOOK+0x360/0x3f0 [ 178.795603][ C1] ? NF_HOOK+0xa2/0x3f0 [ 178.795624][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 178.795648][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 178.795675][ C1] br_forward_finish+0xd3/0x130 [ 178.795698][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 178.795721][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 178.795745][ C1] NF_HOOK+0x360/0x3f0 [ 178.795769][ C1] ? NF_HOOK+0xa2/0x3f0 [ 178.795791][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 178.795814][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 178.795837][ C1] ? br_flood+0x8ff/0xb80 [ 178.795860][ C1] ? br_handle_vlan+0x61/0x530 [ 178.795881][ C1] __br_forward+0x397/0x540 [ 178.795903][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 178.795927][ C1] ? br_dev_xmit+0x193/0x1990 [ 178.795943][ C1] br_dev_xmit+0x12bd/0x1990 [ 178.795960][ C1] ? br_dev_xmit+0x193/0x1990 [ 178.795980][ C1] ? __pfx_br_dev_xmit+0x10/0x10 [ 178.796000][ C1] ? netif_disable_lro+0x280/0x4b0 [ 178.796026][ C1] dev_hard_start_xmit+0x2d8/0x870 [ 178.796059][ C1] __dev_queue_xmit+0x14d9/0x3980 [ 178.796075][ C1] ? handle_softirqs+0x22a/0x870 [ 178.796098][ C1] ? page_table_check_set+0x165/0x610 [ 178.796120][ C1] ? __dev_queue_xmit+0x2b6/0x3980 [ 178.796136][ C1] ? __x64_sys_clone+0x1b6/0x230 [ 178.796168][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 178.796188][ C1] ? __copy_skb_header+0xa3/0x4a0 [ 178.796215][ C1] ? __asan_memcpy+0x40/0x70 [ 178.796232][ C1] ? __skb_clone+0x63/0x7a0 [ 178.796259][ C1] ? __skb_clone+0x483/0x7a0 [ 178.796284][ C1] ? hsr_addr_subst_dest+0x30d/0xa90 [ 178.796309][ C1] ? skb_clone+0x246/0x3a0 [ 178.796325][ C1] hsr_forward_skb+0x167e/0x2a80 [ 178.796346][ C1] ? hsr_forward_skb+0xbb/0x2a80 [ 178.796363][ C1] ? __pfx_hsr_forward_skb+0x10/0x10 [ 178.796378][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 178.796397][ C1] ? __asan_memset+0x22/0x50 [ 178.796414][ C1] ? __skb_pad+0x405/0x610 [ 178.796432][ C1] send_hsr_supervision_frame+0x731/0xcb0 [ 178.796462][ C1] ? __pfx_send_hsr_supervision_frame+0x10/0x10 [ 178.796488][ C1] hsr_announce+0x1db/0x370 [ 178.796518][ C1] ? hsr_announce+0x89/0x370 [ 178.796541][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 178.796569][ C1] call_timer_fn+0x192/0x640 [ 178.796592][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 178.796615][ C1] ? call_timer_fn+0xd4/0x640 [ 178.796636][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 178.796662][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 178.796678][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 178.796702][ C1] __run_timer_base+0x652/0x8b0 [ 178.796722][ C1] ? ktime_get+0x45/0x200 [ 178.796743][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 178.796766][ C1] ? sched_clock_cpu+0x74/0x440 [ 178.796792][ C1] run_timer_softirq+0xb7/0x170 [ 178.796813][ C1] handle_softirqs+0x22a/0x870 [ 178.796837][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 178.796862][ C1] __irq_exit_rcu+0x5f/0x150 [ 178.796885][ C1] irq_exit_rcu+0x9/0x30 [ 178.796906][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 178.796926][ C1] [ 178.796933][ C1] [ 178.796939][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 178.796959][ C1] RIP: 0010:lock_acquire+0x20b/0x2e0 [ 178.796983][ C1] Code: e9 30 ff ff ff e8 65 59 12 0a f7 c3 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 e1 06 7c 11 48 3b 44 24 30 75 33 fb 48 83 c4 38 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 46 3f 15 0a cc 48 8d 3d 4e 9d 73 [ 178.796997][ C1] RSP: 0018:ffffc900039f7288 EFLAGS: 00000286 [ 178.797014][ C1] RAX: 35c42a81bb695700 RBX: 0000000000000246 RCX: 0000000080000002 [ 178.797027][ C1] RDX: 00000000c02f764a RSI: ffffffff8e1a21dd RDI: ffffffff8c27d480 [ 178.797039][ C1] RBP: 0000000000000000 R08: ffffffff823c4748 R09: ffffffff8e75e5a0 [ 178.797052][ C1] R10: dffffc0000000000 R11: fffff9400031bda1 R12: 0000000000000002 [ 178.797064][ C1] R13: ffffffff8e75e5a0 R14: 0000000000000000 R15: 0000000000000000 [ 178.797078][ C1] ? page_table_check_set+0x148/0x610 [ 178.797102][ C1] ? page_table_check_set+0x148/0x610 [ 178.797122][ C1] page_table_check_set+0x165/0x610 [ 178.797142][ C1] ? page_table_check_set+0x148/0x610 [ 178.797163][ C1] copy_pmd_range+0x4f5a/0x8050 [ 178.797181][ C1] ? arch_stack_walk+0xfb/0x150 [ 178.797221][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 178.797237][ C1] ? kernel_clone+0x248/0x8e0 [ 178.797261][ C1] ? __x64_sys_clone+0x1b6/0x230 [ 178.797285][ C1] ? do_syscall_64+0x14d/0xf80 [ 178.797305][ C1] ? mas_wr_walk_descend+0x525/0x860 [ 178.797326][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 178.797349][ C1] ? mas_wr_store_type+0xcc2/0x19d0 [ 178.797369][ C1] copy_page_range+0xbe8/0x11f0 [ 178.797400][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 178.797430][ C1] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 178.797455][ C1] dup_mmap+0xf40/0x1d90 [ 178.797482][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 178.797508][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 178.797536][ C1] copy_mm+0x13b/0x4a0 [ 178.797561][ C1] copy_process+0x18b6/0x3cd0 [ 178.797589][ C1] ? copy_process+0x921/0x3cd0 [ 178.797617][ C1] ? __pfx_copy_process+0x10/0x10 [ 178.797641][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 178.797666][ C1] kernel_clone+0x248/0x8e0 [ 178.797690][ C1] ? cgroup1_freezing+0x20/0x350 [ 178.797716][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 178.797750][ C1] __x64_sys_clone+0x1b6/0x230 [ 178.797777][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 178.797810][ C1] ? do_user_addr_fault+0xc6f/0x1340 [ 178.797837][ C1] do_syscall_64+0x14d/0xf80 [ 178.797856][ C1] ? trace_irq_disable+0x3b/0x150 [ 178.797871][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.797888][ C1] ? clear_bhb_loop+0x40/0x90 [ 178.797908][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.797925][ C1] RIP: 0033:0x7f5605fc5292 [ 178.797940][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 178.797954][ C1] RSP: 002b:00007ffe1feb41a0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 178.797970][ C1] RAX: ffffffffffffffda RBX: 00007ffe1feb41a0 RCX: 00007f5605fc5292 [ 178.797983][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 178.797994][ C1] RBP: 00007ffe1feb432c R08: 0000000000000000 R09: 0000000000000001 [ 178.798004][ C1] R10: 00005555697f97d0 R11: 0000000000000246 R12: 0000000000000001 [ 178.798015][ C1] R13: 00000000000927c0 R14: 000000000002b8cb R15: 00007ffe1feb4380 [ 178.798034][ C1] [ 179.609604][ T9352] netlink: 'syz.2.820': attribute type 1 has an invalid length. [ 179.619070][ T9352] netlink: 12 bytes leftover after parsing attributes in process `syz.2.820'. [ 179.628650][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.637163][ T9352] netlink: 12 bytes leftover after parsing attributes in process `syz.2.820'. [ 180.291088][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.530948][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.682532][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.722670][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.762376][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.561127][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.802907][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.842486][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.882448][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.600817][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.922552][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.962601][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog