last executing test programs: 3.140908464s ago: executing program 2 (id=384): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@ifindex, r1, 0x25, 0x0, 0x0, @link_id}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0xe, 0x8, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2f, r2, 0x8, &(0x7f0000000380)={0x0, 0x20}, 0x8, 0x10, &(0x7f0000000000)={0x400001, 0x40000, 0x0, 0x9}, 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f00000000c0), 0x2, 0x0) r5 = openat$cgroup_procs(r3, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000180), 0x12) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r6, 0x0, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000400)='FROZEN\x00', 0x7) close(r7) write$cgroup_freezer_state(r4, &(0x7f0000000200)='THAWED\x00', 0x7) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETLINK(r8, 0x400454cd, 0x339) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) close(r8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20040000) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) 2.715210057s ago: executing program 3 (id=388): unshare(0x2c060000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c) sendmsg$kcm(r1, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001840)="ccfef8", 0x3}], 0x1}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)={0x58, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@nested={0x43, 0x40, 0x0, 0x1, [@generic="c943baeb0001b585eff3ee64a7bce24bccbf06700d37ba74698ea757ca27f1bab7a5751ce90c182bab33f0b256920f9ee58321885652bc91e013f41ff8cbfb"]}]}, 0x58}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x3, &(0x7f00000001c0)=@framed, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, r2) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f00000004c0)={&(0x7f0000000180), 0xc, 0x0}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x2}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [], {0x14}}, 0x28}}, 0x0) sendmsg$NFT_BATCH(r7, 0x0, 0x0) unshare(0x24020400) socket$unix(0x1, 0x1, 0x0) 2.592137469s ago: executing program 0 (id=391): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14004e65", @ANYRES16=0x0, @ANYBLOB="0000000000000000000014000000"], 0x14}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x200ca040) r2 = socket(0x2, 0x3, 0xff) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)=0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$binfmt_misc(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="3200030007", @ANYRES16=r6], 0xd) r7 = getpid() r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000048c0)={0x0, 0x0}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000008001900", @ANYRES32=r9, @ANYBLOB="ea1a69b2f13a12e7c99308692d0c55c2545fb47e3c7442d4618a3c7a6490f723fae6fa941ec10684894226528bfeaf13db56dc5fb1756b8c0d3701edeafdf3"], 0x24}}, 0x0) sendmmsg$unix(r2, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)="643c87cf2bd21d995e613d73613b1e78334efea0", 0x14}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)="13149518ba85f7a769d1052ef8be78cc221f0447b56ad88433257bf97ad54b3f0b7c7c20c357eef9492744f8b8b7e1b27809d7001e87d01cc9dbc40efb744be08201bed934bc8b9cd2368f82ccc8ef487f229e59fe4fdd764937ed8eb3e7565a617a605061b9adea63865fe03ea53f4819dc3d7f847352eab3c5b69be3e9c9451829ed817229e8f931deb4ade91d6df55f606b63d3d5ea0bf5381b2d2be3d6435dd447a594d518f45318f7e5bf452476fb9eae52d53bc742b9544e94f48180340657267365f5fbd2727f3a4fde3dd7c37fd36ae600e172", 0xd7}, {&(0x7f0000000380)="d8a10241ea405234cbd41bc5019e3a4f254bbe4fb3aeaf3794407d1b5f7a57b4363e46c887cdb1b3ea5d06bc1201336998eae94c05cca464ed1d2ce850b45b950f314368c81a9596bf2e16438a7583a4e2b408e5ab652b134291efaa0a292bd4995b8e62c966c34b474dae23d69f2a38da72be2165e9e981338e2d7d6710bcbfa36b", 0x82}, {&(0x7f0000000040)="7cfaa91b25ebf88223", 0x9}, {&(0x7f0000000500)="89973da5dac3d2b9629a1143553b85334ab451013c1abac5a9fa8981df39a0b1871dba11edaedbaf09ea2d2288d412b4ffc917b5f2f5fc32b49eb3364a9bf3866cbaa1439fede2eab43aadda47f1d3efd4b787264e5ac8b6b7f4a7e541c8bdd60bca260f48346e95b180c849486a62ab3dfd6e3c7b59d71785d26b58da094ca603a7d221ba54d769fc7dac66c5e75ae2b5f873c82f2e1890b02e9b76d4f2256d2dc6505133e8876e091a26d7655051f16ca314bea04f62ede02dfefe5113e72b05bc33ddaa64ca7a22cef2e6f300b47f9c08", 0xd2}, {&(0x7f0000000140)="a475de345c5969e759e278fb484bcbbd08dd09747098b317f78614201ce3f979fe7f9aed142424d0e2c2ee9b29d5", 0x2e}, {&(0x7f0000000600)="fff0d08fc47cb549b0f14d5ee37cb05640f37cba880b8c7c807dec0196047945f2bbe431caa64bbbfeaeadfc699a93ef6cb4e3c675caf4bf639480c8b95f3514935630047c2a7f8288823a5411fba51a4e334c6de7973dce50b32d79f6d0402b97483b2a479299067f58baf4946b287122f008db68c17b271e0f945b6a649bdbc43bea5abc774d132579d2e77e167e8f9c7cfdd296a0b9ddde40a2", 0x9b}, {&(0x7f00000006c0)="c4cddc6b65ebf5de302841ba61af4785578a0ffad3fe15f84ae58ba0cfa97bd83d74ba49eec2a0d3d2d4eb892e47a7742fdf2f9e95e8cf90214225003debbc4ced6539b55c50bbd3c09b8f20bfc3d0197d70f33a10318299e6808f70fd6d22af9edeeb9cc7d564d98065f1f33204f2f03ec25a2d06131939ff5a2b65f9320a48a8c499d1e327c4b1366116dc0c4ecbfdc7c58d3f69070869d18395716dcf6252841522fbe2602e8587b462cef25cd1355ade30b84128869f5f7655121a78f9ebbf78d3b1cd5db13dd3c2019a687f7a33eafaf04143c4ac27cb39b807767405821903202cda36fef1968e", 0xea}], 0x7, &(0x7f00000007c0)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xffffffffffffffff, r6}}}, @cred={{0x1c, 0x1, 0x2, {r7, r9}}}], 0x40, 0x40}}], 0x3, 0x0) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014e40900b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000018500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r11}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x700, 0x8000, 0x7433, 0x8, {{0x6, 0x4, 0x3, 0x9, 0x18, 0x68, 0x0, 0x30, 0x2f, 0x0, @remote, @empty, {[@noop]}}}}}) socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000001e00)={'macvtap0\x00', 0x0}) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r13], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x3, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x66}}, 0x0}, 0x90) 2.519195954s ago: executing program 2 (id=392): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB=' '], 0x38}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\nm\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r6, @ANYBLOB="24005a802000018014000300000000000000000000000000020000000400020004000100"], 0x40}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0}, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100f8ffffffffffffff3b00000008000300deb8976cf8b3ad2792826528e329de44af06aab223aa8ec1ddcd07f2e4d035dcd3e8bac4b38557ed4ebdf6778373f8f53b8ccec2c67a05e06cf72b256d3994cf1457d6549931452267947edabe9d50192b69", @ANYRES32=r8, @ANYBLOB="1e003300a0040000080211000001080211000000ffffffffffff000000000000"], 0x3c}}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r10, &(0x7f0000000040), 0xfea0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000380), 0x101bf) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000000000000000000006070000000000000000"], 0x0, 0x1e, 0x0, 0x1}, 0x20) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r11, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r11, 0xc028660f, &(0x7f0000000000)={0x2880008, r10, 0x0, 0x7}) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.self_freezing\x00', 0xb00000000065808, 0x0) preadv(r12, &(0x7f0000001580)=[{&(0x7f0000000340)=""/238, 0xee}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) 2.493540379s ago: executing program 1 (id=393): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000006c0)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000000)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000000080)=0x10) 2.39241566s ago: executing program 3 (id=394): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r1, &(0x7f0000000380)=""/147, 0x93, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev}, 0x20) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040), 0x0) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xf000000, @loopback}, 0x1c, &(0x7f0000000240)}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="02df70d5f7fe295b"], 0x8) syz_genetlink_get_family_id$nl80211(0xfffffffffffffffd, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) connect$rds(r2, &(0x7f0000000b40)={0x2, 0x0, @broadcast}, 0x10) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x19037}}], 0x48}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b15, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000280)=@get={0x1, &(0x7f0000000200)=""/2, 0x8}) clock_gettime(0x0, &(0x7f00000024c0)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x800c4) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) socket(0x43, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000380)={'#! ', './file1'}, 0xb) socket$inet(0x2, 0x3, 0x8) 2.163242108s ago: executing program 0 (id=395): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000040), 0x10, &(0x7f00000015c0)=[{&(0x7f0000000080)='\r', 0x1}], 0x1}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r1], 0x18}}, 0x40) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x6fef}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000001c0)={r3, 0x8, 0x2, 0x5}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x20) r5 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x20008055}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x8, 0x0, '\x00', [{0x1ff, 0x108, 0x9, 0x4, 0xff, 0x5}, {0x5, 0xffffff00, 0xf, 0x1, 0x4, 0x9}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) 2.09971898s ago: executing program 0 (id=396): r0 = socket$rds(0x15, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x308) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="171692e7f7ef"}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0}, 0x0) 1.839240587s ago: executing program 4 (id=398): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r2, r1, 0x2, 0x0, 0x4000}, 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x8914, 0x20000000) close(r1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup=r3, 0xffffffffffffffff, 0x2}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth1_to_batadv\x00', &(0x7f0000000000)=@ethtool_channels={0x3c, 0x4, 0x3, 0xb, 0x101, 0x7fffffff, 0x0, 0x7095eac1, 0xfff}}) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800010000000000000000001d01000008000a00", @ANYRES32=0x0, @ANYBLOB='\b\x00\t\x00', @ANYRES32=0x0, @ANYBLOB="2ab87d0ad7177c2f091608000000f632137d0162af"], 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x4, 0x6, 0x3, 0xa00, r5}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r6, 0x58, &(0x7f00000000c0)}, 0x10) close(r6) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x8, 0x19, 0x1d, 0x0, @private2, @mcast1, 0x7, 0x10, 0x5, 0x5}}) pipe(&(0x7f0000000280)) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r10 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r10, 0x84, 0x76, &(0x7f0000000280)={r9}, 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f00000003c0)={r9, @in6={{0xa, 0x4e21, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x258b}}, 0x3, 0x7}, 0x90) 1.777237095s ago: executing program 4 (id=399): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0xb}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000ecff850000000400000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_RESTART_COUNT={0x5}]}}}]}, 0x38}}, 0x0) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000001740)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @loopback}, 0x10) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000000)=0x9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0xb}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000ecff850000000400000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) (async) socket$igmp(0x2, 0x3, 0x2) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_RESTART_COUNT={0x5}]}}}]}, 0x38}}, 0x0) (async) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000001740)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @loopback}, 0x10) (async) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000000)=0x9, 0x4) (async) 1.600999542s ago: executing program 4 (id=400): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCALLUSERDATA(r1, 0x89e4, &(0x7f00000000c0)={0x1f, "3cae1c4800d8032d13e45e6506c784cf82bb6129d5a888a685991e7ff1ba1c4f3a4be2d453228fef4f02cd4dbed6657b8ba9e44aee259aefd91a7e6d03f4d32f4a979faabfbca69cc54c9550e0d14ae039b0a5cca464113dfcc80f2cf2d0267bb02651016234b7e3514ad4680600ff296e8604581d46c82deec0548ca1735b7c"}) r2 = socket(0x15, 0x5, 0x0) (async) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local}) (async) r5 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x64, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @mcast1}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}]}}}]}, 0x64}}, 0x0) (async) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0000000000000000002", 0x11) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021380ee02"], 0x10}}, 0x0) (async) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x2, 0x9, 0x2, 0x0, 0x2}, 0x10}}, 0x0) (async) getsockopt(r2, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) 1.551261815s ago: executing program 2 (id=401): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{}]}]}}, &(0x7f0000000f40)=""/4089, 0x3e, 0xff9, 0xa}, 0x20) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$phonet(0x23, 0x2, 0x1) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r0}, {r0, 0x3200}, {r1}, {r0, 0x8}, {r0, 0x404}, {r0}, {r2}, {r3, 0x400}, {r0}], 0x9, &(0x7f0000000140)={r4, r5+60000000}, &(0x7f0000000180)={[0x800]}, 0x8) (async) ppoll(&(0x7f0000000040)=[{r0}, {r0, 0x3200}, {r1}, {r0, 0x8}, {r0, 0x404}, {r0}, {r2}, {r3, 0x400}, {r0}], 0x9, &(0x7f0000000140)={r4, r5+60000000}, &(0x7f0000000180)={[0x800]}, 0x8) 1.502867799s ago: executing program 1 (id=402): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000580)={@mcast1, 0x5, 0x0, 0xff, 0x0, 0xfffc, 0x1d4}, 0x20) syz_emit_ethernet(0x72, &(0x7f00000005c0)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "10e200", 0x3c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0xd, 0xf989, "e71b81ebc44f354efd"}, @timestamp={0x2, 0xa}, @sack={0x5, 0xa, [0x0, 0x4]}, @exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x0, 0x111, 0x4b4, 0xd0, 0xd4feffff, 0x228, 0x20a, 0x278, 0x228, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x22051, r3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101800000005e1affcc020000000073797a300000000008000240000000032c000000030a0103ecffe5ff00000000020000000900010073797a300000000009004dd3b30c98030073797a32000000001400000011"], 0x7c}, 0x1, 0x0, 0x0, 0x89f200cab0defa47}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000ff1000010000000000000000000000000a60000000060a090400000000000000000200000034000480300001800e000100696d6d6564696174650000001c000280100002800c000280080001800000000008000140000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x88}}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x4d, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0xd8) bind$inet(r6, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x898, &(0x7f0000000500)={0x2, 0x4c23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(r6, &(0x7f0000000080)='\x00', 0x1, 0xc840, 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r7) 1.419315605s ago: executing program 3 (id=403): r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000640)={'#! ', '', [{}], 0xa, "451e30af765385d1c77115d15fab599a93541820df04f3a57530591adee60100000000000080e3aab7b83b91a29c3707b609caf9277d8e00e92b4f9c"}, 0x41) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, 0x0, &(0x7f0000000040)) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000300)={0x2, @long}, 0x14) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0xf, &(0x7f00000004c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xc4}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000280), 0xa7c, r8}, 0x38) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000002000000002000000200004801c0001"], 0x74}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="bc01000010000300"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000140012800b00010067656e657665"], 0x1bc}, 0x1, 0x2}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000007000000000000", @ANYRES32=r4, @ANYRESOCT=r4], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.32336134s ago: executing program 4 (id=404): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x1, 0x1, 0x0, {}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x0, 0xd05}}]}]}, @IFLA_GROUP={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4000) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x31f2552d984251b8, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x9) 1.289641756s ago: executing program 1 (id=405): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x8, 0xa}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xts-twofish-avx,camellia-asm,cbcmac(aes))\x00'}, 0x58) r6 = socket$nl_crypto(0x10, 0x3, 0x15) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x28, 0x1, 0x0) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001e40)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x28, r12, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc0}]}]}, 0x28}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x800, 0x1a, @remote, @private1, 0x80, 0x80, 0x0, 0xf17}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r10, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB='yX\x00\x00', @ANYRES16=r12, @ANYBLOB="00002abd7000fbdbdf25050000001400068008000700", @ANYRES32=0x0, @ANYBLOB="08000300ac14141008000300020000004800018014000400fe880000000000000000000000000101060005004e240000080006001200000008000700", @ANYRES32=r13, @ANYBLOB="0500020002000000060001000a0000000500020004000000"], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) sendmsg$nl_crypto(r6, &(0x7f0000000200)={0x0, 0xb00, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0xff6, &(0x7f0000001e00)=""/4086}, 0x90) mkdirat$cgroup(r2, &(0x7f0000000040)='syz0\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) 1.184064031s ago: executing program 4 (id=406): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x14, &(0x7f0000001500)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88635aa7"], 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000a40)=ANY=[@ANYBLOB="d074a9b2", @ANYRES16=0x0, @ANYBLOB="0000000000000000000016000000"], 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/156, 0x9c}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000001340)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {}, {0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x44, 0x2, [@TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000000, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}}}]}]}}]}, 0x70}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000040000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000a000000b703000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000e40)=ANY=[@ANYBLOB="bf"], 0x0}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x6, &(0x7f0000000d00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="b4000000000000007910000000000000630000000000000095007400000000006aee5030a2eb891311b3451ec0687faec0432b5455cb1000805bdfb16dbbdf085f1b75f36653"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) 1.027261138s ago: executing program 3 (id=407): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="650a00000000000061118000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000180)={0x0, 0x2, 0xb0}) socket$xdp(0x2c, 0x3, 0x0) syz_emit_ethernet(0x15b, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000100)=""/26, &(0x7f0000000040)=0x1a) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x54}, {0x6}]}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000000614010029bd7000ffdbdf2508"], 0x40}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000240)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(r4, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x24, r6, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket(0x30c55fb50202d0e9, 0x7f3890071c35e3fc, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x200, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_TXQLEN={0x8}, @IFLA_OPERSTATE={0x5}]}, 0x48}}, 0x8004) listen(r8, 0x0) unshare(0x20000400) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000040)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000080), 0x4) 957.129816ms ago: executing program 1 (id=408): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@polexpire={0xcc, 0x1b, 0x319516ae726afe1b, 0x0, 0x0, {{{@in6=@private1}}}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x0, 0x2}}]}, 0xcc}}, 0x0) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) socket$inet6(0xa, 0x3, 0x2f) (async) r2 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x42}}, 0xe8) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x42}}, 0xe8) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 876.268468ms ago: executing program 1 (id=409): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x48, &(0x7f0000000300)=ANY=[@ANYRES16], &(0x7f0000000240)='syzkaller\x00', 0xffffffdd, 0x0, 0x0, 0x41000, 0x73, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000080)=0x2, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f00000004c0), 0x12) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x40010, r1, 0x2000) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000003c0)='rpcgss_svc_accept_upcall\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8000800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000500)="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", 0x101, 0x4008000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x11, &(0x7f0000000640)=ANY=[@ANYBLOB="b405000000000000791038000000000006000001000000004f69100001000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000600000018290000", @ANYRES32=r2, @ANYBLOB="0000000006000000183600000300000000000000000000009506000000000000580f51756f30ed0c545d03515cf10bf6863f95d78d38a558c946857d04a07625d2d692732c849d9265cecee9d512e40062a90dafc40000399ab8"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x7}, 0x10}, 0x90) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="9ae4f586cd26caa878971ca0c12dda15d9c0618d2c9daf2420b3c651b450b60f4e71a22ff5d8b2e18938442619ed11ef7ff2b63f4af33299c07592672e5462000f05838e85d0532d9177efdd8eb3b7500210a55a4e77ac0c57b7ad253eef5cdd7ab8f088c86bb307c912b03793ee6347467dc5e2208ed7459d82a701170224cc87f018f33b0d15b2bca532dd6102ca955ae325f2c170151ca8375cb4ccb0afa76d5a795e9f7e629da49f37", @ANYRES16=r4, @ANYBLOB="010000010000000000000005000000020000000900010073797a3100"/46], 0x34}, 0x1, 0x40030000000000, 0x0, 0x4000000}, 0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_mtu(r6, 0x29, 0x4a, 0x0, &(0x7f0000000900)) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000002001200000004000000"], 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000005, 0x11, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_ro(r2, 0x0, 0x275a, 0x0) socket(0x8, 0x6, 0xfffffffc) 739.326065ms ago: executing program 1 (id=410): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) 739.018522ms ago: executing program 3 (id=411): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_VLAN_TUNNEL={0x5, 0x1d, 0x1}]}}}]}, 0x44}}, 0x0) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000000000006000000001002f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYBLOB='s'], 0xfdef) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) (async) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_VLAN_TUNNEL={0x5, 0x1d, 0x1}]}}}]}, 0x44}}, 0x0) (async) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000000000006000000001002f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYBLOB='s'], 0xfdef) (async) 659.941222ms ago: executing program 0 (id=412): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000440012800b00010067726574617000e92970414100340002a006000f000000000006000e00000000002800050000000000080006003514140b9e0bff1df7d7d1c0eff835b1199bffd8e4247a226b8a3c76c91bce7c59528ef3dea8092067144686b562686b64c16e69925111c93551635f6d2f5d6695b75080ef6a056f186e26f09e5ce688952f5edc4475ae233335120c6b646c268a5aa78148beba9cdb367cc5bb"], 0x64}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r1, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private2, 0x1e9b}, 0x1c, 0x0}}], 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) (rerun: 64) connect$llc(r3, 0x0, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) (async) r4 = socket$inet6(0xa, 0x80803, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x4}, {0x7}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x33}, 0x0, @in6=@loopback, 0x3502, 0x0, 0x0, 0x5, 0x0, 0x6}}, 0xe8) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) (async) connect$inet6(r4, &(0x7f0000000280)={0xa, 0x4e23}, 0x1c) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r6, @ANYRES32=r7, @ANYBLOB="0000000000000000b70200000000000085000000860000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0xfffffffe, 0xffffffffffffff93, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='kmem_cache_free\x00', r8}, 0x10) (async) unshare(0x62040200) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async, rerun: 32) sendmsg$NL80211_CMD_SET_INTERFACE(r2, 0x0, 0x40084) (rerun: 32) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async, rerun: 64) r10 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_START_AP(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6cb9bd01", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="38000e008000000008021100000108021100000108021100000000000000000000000000640000007206030303030303760602091c000000080026006c09000008000c006400000008000d00a2a40000"], 0x6c}}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="0a003400020202020202000004009300"], 0x2c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socket$caif_seqpacket(0x25, 0x5, 0x0) (async) getpid() 634.886085ms ago: executing program 2 (id=413): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000e80)={r2, &(0x7f0000000cc0), &(0x7f0000000dc0), 0x3}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10) close(0x4) (async) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x10, 0x6, 0x5c0, 0x1f8, 0xd0, 0x0, 0xd0, 0x1f8, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}]}, @common=@unspec=@NFQUEUE3={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@mcast1}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'wg1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) sendto$packet(r0, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x11, 0xf8, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r7, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x3, 0x2f}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}}, 0x4000000) 367.352082ms ago: executing program 2 (id=414): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x0, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x10000042}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'geneve0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b051000e0ff030006004788aa96a13bb1000000000088a8400f", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) 356.280624ms ago: executing program 0 (id=415): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000580)={@mcast1, 0x5, 0x0, 0xff, 0x0, 0xfffc, 0x1d4}, 0x20) syz_emit_ethernet(0x72, &(0x7f00000005c0)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "10e200", 0x3c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0xd, 0xf989, "e71b81ebc44f354efd"}, @timestamp={0x2, 0xa}, @sack={0x5, 0xa, [0x0, 0x4]}, @exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x0, 0x111, 0x4b4, 0xd0, 0xd4feffff, 0x228, 0x20a, 0x278, 0x228, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x22051, r3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101800000005e1affcc020000000073797a300000000008000240000000032c000000030a0103ecffe5ff00000000020000000900010073797a300000000009004dd3b30c98030073797a32000000001400000011"], 0x7c}, 0x1, 0x0, 0x0, 0x89f200cab0defa47}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000ff1000010000000000000000000000000a60000000060a090400000000000000000200000034000480300001800e000100696d6d6564696174650000001c000280100002800c000280080001800000000008000140000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x88}}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x4d, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0xd8) bind$inet(r6, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x898, &(0x7f0000000500)={0x2, 0x4c23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(r6, &(0x7f0000000080)='\x00', 0x1, 0xc840, 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 297.960717ms ago: executing program 3 (id=416): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f00000001c0)=0x8) r3 = socket(0x2, 0x80805, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r5) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r7, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r8 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r8, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r8, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) sendmmsg(r8, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "ec"}], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) sendmmsg(r8, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f2, 0x4, 0x70bd26, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$IEEE802154_ASSOCIATE_REQ(r4, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000005000100000000000500070019000000050011007f0000000c0009000200aaaaaaaaaaaa06000a00ffff00000c0009"], 0x4c}}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x10, &(0x7f00000077c0)={r1}, 0x8) 67.274344ms ago: executing program 4 (id=417): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0xfffffffffffffffd, 0x38}, 0x1, 0x0, 0x0, 0xc804}, 0x40880) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff070007003a3a0909140002"], 0x44}, 0x1, 0x1000000, 0x0, 0x81}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0xfffffff9, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5}, 0x48) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r10, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) connect$pppl2tp(r8, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x1, 0x2}}, 0x26) getsockopt$bt_BT_SECURITY(r8, 0x111, 0x3, 0x0, 0x20001f00) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @initdev, @multicast1}, &(0x7f00000002c0)=0xc) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[@ANYRES16=r7, @ANYRES16=r3, @ANYBLOB="00032abd7000fddbdf25030000000500050002000000040006801c0006c0050002000d000000080407003306dc6433cdbadf1ea7162d2404bc428e42b6c0faba53beaece2a54f7f9aa5a4b10f5ba4eef6a671d257c11f44e7796bc5eca396e54810f4f2e9dd312bd0e3b17394b22dab34c09e17888f332b4bf99b32c18e711", @ANYRES32=r6, @ANYBLOB="0534f85dac06e62b03b8d32bd2190002000a000000087000c32fe02e8b830700000900000000"], 0x44}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, 0x0, &(0x7f0000000080)=0x46) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000003b002101000000000000feff037c00000400f2000c0001800600060086", @ANYRESDEC=0x0], 0x24}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000640)="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", 0x102}], 0x1}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={0x0, 0x58}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x1, 0x2, 0x2, 0x100, 0x1, 0x63, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2, 0xa}, 0x48) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000004c0)="ed6d9ce2c78082650b6769e8ded5a17757becede97936fae293e0af0a833b761cb2f7feefa81f7faf8592703c75b9cdc9fa64c2ffb30026aadb39d"}, {&(0x7f00000004c0)}], 0x62}, 0x0) 50.947128ms ago: executing program 2 (id=418): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a00000001900010000000000000000001c140000fe00"], 0xa0}}, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @private1}, 0x1c) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, 0x0, 0x18fe2a01ed25d92f, 0x0, 0x0, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x34}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7eb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1ff, 0x9}, 0x0, &(0x7f0000000100)={0x4b, 0x7, 0x0, 0x1, 0x0, 0x9, 0x1}, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r5, 0x0, 0x0}, 0x10) shutdown(r0, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x7c, 0x30, 0xb, 0x0, 0x0, {}, [{0x68, 0x1, [@m_ct={0x64, 0x1, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @dev}, @TCA_CT_NAT_PORT_MIN={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="98030000", @ANYRES16=r8, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r10, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x1) 0s ago: executing program 0 (id=419): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000003c0)=[{&(0x7f0000000580)="db56b84884ffc02c06bd0f01587a681de55a4df7714790716dddfa75831670014c811bd064f615db698adab3", 0x2c}], 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r1, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x890c, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) sendmsg$nl_route(r2, 0x0, 0x8001) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x89) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r6, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008051}, 0x20000880) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.207' (ED25519) to the list of known hosts. [ 71.959358][ T5218] cgroup: Unknown subsys name 'net' [ 72.159443][ T5218] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.863726][ T5218] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.436094][ T5232] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.449837][ T5242] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.458312][ T5242] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.463336][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.470610][ T5242] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.474210][ T5235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.488330][ T5235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.497035][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.505556][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.513524][ T5235] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.520993][ T5235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.547611][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.556083][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.564962][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.567779][ T5246] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.572851][ T5248] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.586795][ T5245] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.587297][ T5248] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.595668][ T5247] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.614374][ T5245] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.621794][ T5245] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.631253][ T5245] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.639844][ T5246] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.647615][ T5246] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.657033][ T5246] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.665403][ T4619] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.674496][ T4619] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.700911][ T5232] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.717816][ T5232] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 76.726047][ T5232] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.261749][ T5228] chnl_net:caif_netlink_parms(): no params data found [ 77.314589][ T5236] chnl_net:caif_netlink_parms(): no params data found [ 77.436489][ T5243] chnl_net:caif_netlink_parms(): no params data found [ 77.532140][ T5229] chnl_net:caif_netlink_parms(): no params data found [ 77.617257][ T5236] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.626150][ T5236] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.633751][ T5236] bridge_slave_0: entered allmulticast mode [ 77.640974][ T5236] bridge_slave_0: entered promiscuous mode [ 77.650467][ T5236] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.657628][ T5236] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.664904][ T5236] bridge_slave_1: entered allmulticast mode [ 77.672294][ T5236] bridge_slave_1: entered promiscuous mode [ 77.687708][ T5238] chnl_net:caif_netlink_parms(): no params data found [ 77.698495][ T5228] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.705901][ T5228] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.713194][ T5228] bridge_slave_0: entered allmulticast mode [ 77.721010][ T5228] bridge_slave_0: entered promiscuous mode [ 77.771398][ T5228] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.778690][ T5228] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.786800][ T5228] bridge_slave_1: entered allmulticast mode [ 77.794860][ T5228] bridge_slave_1: entered promiscuous mode [ 77.871929][ T5236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.919611][ T5236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.948261][ T5228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.957779][ T5243] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.965789][ T5243] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.973082][ T5243] bridge_slave_0: entered allmulticast mode [ 77.980702][ T5243] bridge_slave_0: entered promiscuous mode [ 77.988692][ T5243] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.996036][ T5243] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.003966][ T5243] bridge_slave_1: entered allmulticast mode [ 78.011955][ T5243] bridge_slave_1: entered promiscuous mode [ 78.050566][ T5228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.099821][ T5229] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.107046][ T5229] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.115102][ T5229] bridge_slave_0: entered allmulticast mode [ 78.122626][ T5229] bridge_slave_0: entered promiscuous mode [ 78.133243][ T5229] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.140720][ T5229] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.147900][ T5229] bridge_slave_1: entered allmulticast mode [ 78.155605][ T5229] bridge_slave_1: entered promiscuous mode [ 78.217443][ T5236] team0: Port device team_slave_0 added [ 78.237087][ T5238] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.244728][ T5238] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.253038][ T5238] bridge_slave_0: entered allmulticast mode [ 78.260383][ T5238] bridge_slave_0: entered promiscuous mode [ 78.268683][ T5238] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.276225][ T5238] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.283594][ T5238] bridge_slave_1: entered allmulticast mode [ 78.291227][ T5238] bridge_slave_1: entered promiscuous mode [ 78.301232][ T5228] team0: Port device team_slave_0 added [ 78.322480][ T5243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.338798][ T5243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.351344][ T5236] team0: Port device team_slave_1 added [ 78.374159][ T5229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.385453][ T5228] team0: Port device team_slave_1 added [ 78.455656][ T5229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.497573][ T5238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.521988][ T5236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.529849][ T5236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.556111][ T5236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.582894][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.591077][ T5239] Bluetooth: hci0: command tx timeout [ 78.595546][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.623281][ T5228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.637460][ T5238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.652146][ T5243] team0: Port device team_slave_0 added [ 78.659202][ T5236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.666196][ T5236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.692367][ T5239] Bluetooth: hci2: command tx timeout [ 78.697954][ T5236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.719893][ T5229] team0: Port device team_slave_0 added [ 78.727503][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.735134][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.754083][ T5239] Bluetooth: hci4: command tx timeout [ 78.761351][ T5232] Bluetooth: hci1: command tx timeout [ 78.767133][ T5239] Bluetooth: hci3: command tx timeout [ 78.772672][ T5228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.811571][ T5243] team0: Port device team_slave_1 added [ 78.833201][ T5229] team0: Port device team_slave_1 added [ 78.869898][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.876896][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.902950][ T5229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.941909][ T5243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.949159][ T5243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.975906][ T5243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.989537][ T5243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.996521][ T5243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.022689][ T5243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.034680][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.041860][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.067827][ T5229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.102217][ T5238] team0: Port device team_slave_0 added [ 79.144835][ T5238] team0: Port device team_slave_1 added [ 79.185814][ T5228] hsr_slave_0: entered promiscuous mode [ 79.193191][ T5228] hsr_slave_1: entered promiscuous mode [ 79.232344][ T5236] hsr_slave_0: entered promiscuous mode [ 79.239397][ T5236] hsr_slave_1: entered promiscuous mode [ 79.246177][ T5236] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.254983][ T5236] Cannot create hsr debugfs directory [ 79.275303][ T5238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.282432][ T5238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.309862][ T5238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.338592][ T5243] hsr_slave_0: entered promiscuous mode [ 79.345801][ T5243] hsr_slave_1: entered promiscuous mode [ 79.352691][ T5243] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.360350][ T5243] Cannot create hsr debugfs directory [ 79.411873][ T5238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.419758][ T5238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.446925][ T5238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.471950][ T5229] hsr_slave_0: entered promiscuous mode [ 79.478852][ T5229] hsr_slave_1: entered promiscuous mode [ 79.485356][ T5229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.493174][ T5229] Cannot create hsr debugfs directory [ 79.679153][ T5238] hsr_slave_0: entered promiscuous mode [ 79.685878][ T5238] hsr_slave_1: entered promiscuous mode [ 79.692543][ T5238] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.700213][ T5238] Cannot create hsr debugfs directory [ 80.141725][ T5236] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.153875][ T5236] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.164339][ T5236] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.187868][ T5236] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.241836][ T5228] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.280459][ T5228] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.302358][ T5228] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.313299][ T5228] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.368580][ T5243] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.380149][ T5243] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.394125][ T5243] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.415225][ T5243] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.518159][ T5229] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.531624][ T5229] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.565824][ T5229] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.576724][ T5229] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.669759][ T5239] Bluetooth: hci0: command tx timeout [ 80.706944][ T5238] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.735554][ T5236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.742617][ T5238] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.759619][ T5239] Bluetooth: hci2: command tx timeout [ 80.772736][ T5238] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.784390][ T5238] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.830376][ T5239] Bluetooth: hci1: command tx timeout [ 80.830457][ T4619] Bluetooth: hci3: command tx timeout [ 80.844083][ T5232] Bluetooth: hci4: command tx timeout [ 80.904089][ T5236] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.945664][ T5281] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.953115][ T5281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.978073][ T5243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.991417][ T5281] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.998606][ T5281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.045950][ T5228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.101481][ T5229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.124195][ T5243] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.165421][ T5228] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.213242][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.220549][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.232056][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.239436][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.250408][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.257561][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.288841][ T944] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.296038][ T944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.318177][ T5229] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.343042][ T5286] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.350348][ T5286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.456373][ T5286] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.463641][ T5286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.493535][ T5238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.643451][ T5238] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.715303][ T944] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.722578][ T944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.734206][ T944] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.741458][ T944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.767299][ T5236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.975518][ T5238] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.097571][ T5243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.124076][ T5236] veth0_vlan: entered promiscuous mode [ 82.151056][ T5228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.198018][ T5236] veth1_vlan: entered promiscuous mode [ 82.400518][ T5236] veth0_macvtap: entered promiscuous mode [ 82.443362][ T5228] veth0_vlan: entered promiscuous mode [ 82.464865][ T5229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.477440][ T5236] veth1_macvtap: entered promiscuous mode [ 82.534114][ T5228] veth1_vlan: entered promiscuous mode [ 82.617599][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.657968][ T5238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.685287][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.732795][ T5229] veth0_vlan: entered promiscuous mode [ 82.758965][ T5232] Bluetooth: hci0: command tx timeout [ 82.762582][ T5236] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.789405][ T5236] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.798165][ T5236] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.823854][ T5236] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.829646][ T5232] Bluetooth: hci2: command tx timeout [ 82.897487][ T5229] veth1_vlan: entered promiscuous mode [ 82.909492][ T5232] Bluetooth: hci3: command tx timeout [ 82.909567][ T4619] Bluetooth: hci4: command tx timeout [ 82.914949][ T5232] Bluetooth: hci1: command tx timeout [ 83.111652][ T5228] veth0_macvtap: entered promiscuous mode [ 83.155041][ T5238] veth0_vlan: entered promiscuous mode [ 83.180948][ T5228] veth1_macvtap: entered promiscuous mode [ 83.204243][ T5229] veth0_macvtap: entered promiscuous mode [ 83.248296][ T5229] veth1_macvtap: entered promiscuous mode [ 83.268099][ T5238] veth1_vlan: entered promiscuous mode [ 83.304727][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.316272][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.331207][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.344336][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.357412][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.368446][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.379720][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.394927][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.407561][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.418211][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.431389][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.442446][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.457312][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.485026][ T5243] veth0_vlan: entered promiscuous mode [ 83.491706][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.502666][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.513441][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.524343][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.535781][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.569813][ T5243] veth1_vlan: entered promiscuous mode [ 83.578238][ T5229] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.587189][ T5229] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.597149][ T5229] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.605933][ T5229] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.628627][ T5228] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.638099][ T5228] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.649361][ T5228] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.658113][ T5228] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.695895][ T2560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.707462][ T2560] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.767539][ T5238] veth0_macvtap: entered promiscuous mode [ 83.824709][ T5238] veth1_macvtap: entered promiscuous mode [ 83.834852][ T5243] veth0_macvtap: entered promiscuous mode [ 83.901610][ T5243] veth1_macvtap: entered promiscuous mode [ 83.921649][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.943717][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.974323][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.025746][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.043884][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.054908][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.065203][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.076150][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.115365][ T5238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.131585][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.142368][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.156102][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.167077][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.177463][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.188737][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.200858][ T5238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.252129][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.264498][ T2510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.278848][ T2510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.280707][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.297699][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.309536][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.319589][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.335568][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.351887][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.364841][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.382968][ T5243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.394068][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.395432][ T2560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.406762][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.422613][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.434859][ T2560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.442506][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.453166][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.463849][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.473823][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.485122][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.497372][ T5243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.507771][ T5238] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.518283][ T5238] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.527169][ T5238] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.536534][ T5238] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.583353][ T5243] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.595069][ T5243] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.609336][ T5243] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.618098][ T5243] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.773021][ T2580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.789308][ T2580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.830443][ T5232] Bluetooth: hci0: command tx timeout [ 84.909262][ T5232] Bluetooth: hci2: command tx timeout [ 84.978226][ T2580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.990253][ T5239] Bluetooth: hci3: command tx timeout [ 84.991232][ T4619] Bluetooth: hci1: command tx timeout [ 84.995719][ T5232] Bluetooth: hci4: command tx timeout [ 85.028859][ T2580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.099410][ T2510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.145980][ T2510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.236880][ T5329] nbd: socks must be embedded in a SOCK_ITEM attr [ 85.254286][ T5341] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 85.300917][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.308798][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.366416][ T5342] netlink: 'syz.1.9': attribute type 3 has an invalid length. [ 85.397127][ T5342] netlink: 'syz.1.9': attribute type 3 has an invalid length. [ 85.442946][ T5342] Bluetooth: MGMT ver 1.23 [ 85.467689][ T5339] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3'. [ 85.544840][ T5339] sit0: entered promiscuous mode [ 85.574488][ T5339] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 85.613285][ T5339] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3'. [ 85.687269][ T5342] tc_dump_action: action bad kind [ 85.820152][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.898383][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.479800][ T5375] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 86.609345][ T5379] netlink: 224 bytes leftover after parsing attributes in process `syz.1.18'. [ 86.719479][ T5379] RDS: rds_bind could not find a transport for ::ffff:172.30.13.2, load rds_tcp or rds_rdma? [ 86.800716][ T5379] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.179692][ T5396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.222999][ T5396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.854260][ T5383] syz.4.19 (5383) used greatest stack depth: 18992 bytes left [ 88.080850][ T5423] Zero length message leads to an empty skb [ 88.439944][ T5436] netlink: 36 bytes leftover after parsing attributes in process `syz.2.33'. [ 88.649907][ T5443] netlink: 144 bytes leftover after parsing attributes in process `syz.4.35'. [ 89.300308][ T5466] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.42'. [ 89.325276][ T5475] netlink: 48 bytes leftover after parsing attributes in process `syz.4.43'. [ 89.360363][ T5466] openvswitch: netlink: Flow key attribute not present in set flow. [ 89.420438][ T5465] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.693085][ T5493] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.867918][ T5495] netlink: 12 bytes leftover after parsing attributes in process `syz.0.47'. [ 89.927605][ T5500] netlink: 88 bytes leftover after parsing attributes in process `syz.2.49'. [ 89.940375][ T5501] netlink: 88 bytes leftover after parsing attributes in process `syz.2.49'. [ 90.152093][ T5507] warning: `syz.3.52' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 91.092427][ T5549] netlink: 'syz.0.61': attribute type 1 has an invalid length. [ 91.114850][ T5549] __nla_validate_parse: 2 callbacks suppressed [ 91.114873][ T5549] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.61'. [ 91.153346][ T5548] netlink: 20 bytes leftover after parsing attributes in process `syz.4.63'. [ 91.156487][ T5551] netlink: 20 bytes leftover after parsing attributes in process `syz.3.64'. [ 91.372299][ T5554] netlink: 20 bytes leftover after parsing attributes in process `syz.3.64'. [ 91.512738][ T5556] netlink: 16 bytes leftover after parsing attributes in process `syz.0.65'. [ 92.210874][ T8] cfg80211: failed to load regulatory.db [ 93.049649][ T5606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.75'. [ 93.094950][ T5609] netlink: 24 bytes leftover after parsing attributes in process `syz.1.76'. [ 93.208876][ T5614] Bluetooth: MGMT ver 1.23 [ 93.363302][ T5617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.81'. [ 94.162167][ T5648] syz.0.85 uses old SIOCAX25GETINFO [ 95.402690][ T5659] netlink: 24 bytes leftover after parsing attributes in process `syz.0.90'. [ 95.581583][ T5661] vlan2: entered promiscuous mode [ 95.602842][ T5661] vlan2: entered allmulticast mode [ 95.625838][ T5661] hsr_slave_1: entered allmulticast mode [ 95.668518][ T5661] hsr_slave_1: left allmulticast mode [ 95.770413][ T5678] netlink: 36 bytes leftover after parsing attributes in process `syz.2.92'. [ 96.332708][ T5693] __nla_validate_parse: 1 callbacks suppressed [ 96.332730][ T5693] netlink: 16 bytes leftover after parsing attributes in process `syz.4.100'. [ 97.308361][ T5734] netlink: 'syz.4.111': attribute type 11 has an invalid length. [ 97.331085][ T5728] netlink: 'syz.1.110': attribute type 21 has an invalid length. [ 97.350914][ T5728] netlink: 132 bytes leftover after parsing attributes in process `syz.1.110'. [ 97.379881][ T5732] netlink: 16 bytes leftover after parsing attributes in process `syz.0.109'. [ 97.691074][ T5745] netlink: 28 bytes leftover after parsing attributes in process `syz.4.114'. [ 97.790949][ T5748] netlink: 32 bytes leftover after parsing attributes in process `syz.1.115'. [ 97.910917][ T5752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.116'. [ 98.057350][ T5754] netlink: 32 bytes leftover after parsing attributes in process `syz.0.118'. [ 98.369455][ T5764] FAULT_INJECTION: forcing a failure. [ 98.369455][ T5764] name failslab, interval 1, probability 0, space 0, times 1 [ 98.410222][ T5764] CPU: 1 UID: 0 PID: 5764 Comm: syz.2.122 Not tainted 6.11.0-rc1-syzkaller-00300-ge66f33bdf0c3 #0 [ 98.420995][ T5764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 98.431188][ T5764] Call Trace: [ 98.434588][ T5764] [ 98.437628][ T5764] dump_stack_lvl+0x241/0x360 [ 98.442392][ T5764] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.447649][ T5764] ? __pfx__printk+0x10/0x10 [ 98.452473][ T5764] ? __kmalloc_node_noprof+0xb7/0x440 [ 98.457924][ T5764] ? __pfx___might_resched+0x10/0x10 [ 98.463248][ T5764] should_fail_ex+0x3b0/0x4e0 [ 98.467966][ T5764] should_failslab+0xac/0x100 [ 98.472675][ T5764] __kmalloc_node_noprof+0xdf/0x440 [ 98.477887][ T5764] ? crypto_create_tfm_node+0x88/0x3d0 [ 98.483554][ T5764] crypto_create_tfm_node+0x88/0x3d0 [ 98.488895][ T5764] crypto_alloc_tfm_node+0x161/0x360 [ 98.494245][ T5764] esp_init_state+0x611/0x10b0 [ 98.499056][ T5764] ? __pfx_esp_init_state+0x10/0x10 [ 98.504315][ T5764] ? __xfrm_init_state+0x708/0xea0 [ 98.509464][ T5764] ? __pfx_lock_release+0x10/0x10 [ 98.514530][ T5764] __xfrm_init_state+0x9db/0xea0 [ 98.519502][ T5764] xfrm_init_state+0x1f/0x80 [ 98.524149][ T5764] pfkey_add+0x1dfe/0x3030 [ 98.528619][ T5764] ? __pfx_pfkey_add+0x10/0x10 [ 98.533407][ T5764] ? pfkey_broadcast+0x45/0x400 [ 98.538278][ T5764] ? pfkey_broadcast+0x3e3/0x400 [ 98.543483][ T5764] pfkey_sendmsg+0xbcc/0x1050 [ 98.548201][ T5764] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 98.553352][ T5764] ? __might_fault+0xaa/0x120 [ 98.558082][ T5764] ? __pfx_lock_release+0x10/0x10 [ 98.563179][ T5764] ? __import_iovec+0x536/0x820 [ 98.568053][ T5764] ? aa_sock_msg_perm+0x91/0x160 [ 98.573013][ T5764] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 98.578330][ T5764] ? security_socket_sendmsg+0x87/0xb0 [ 98.583814][ T5764] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 98.588962][ T5764] __sock_sendmsg+0x221/0x270 [ 98.593710][ T5764] ____sys_sendmsg+0x525/0x7d0 [ 98.598614][ T5764] ? __pfx_____sys_sendmsg+0x10/0x10 [ 98.603948][ T5764] __sys_sendmmsg+0x3b2/0x740 [ 98.608664][ T5764] ? __pfx___sys_sendmmsg+0x10/0x10 [ 98.613915][ T5764] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 98.619840][ T5764] ? ksys_write+0x23e/0x2c0 [ 98.624473][ T5764] ? __pfx_lock_release+0x10/0x10 [ 98.629534][ T5764] ? vfs_write+0x7c4/0xc90 [ 98.634008][ T5764] ? __mutex_unlock_slowpath+0x21d/0x750 [ 98.639670][ T5764] ? __pfx_vfs_write+0x10/0x10 [ 98.644565][ T5764] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 98.650572][ T5764] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 98.656922][ T5764] ? do_syscall_64+0x100/0x230 [ 98.661795][ T5764] __x64_sys_sendmmsg+0xa0/0xb0 [ 98.666661][ T5764] do_syscall_64+0xf3/0x230 [ 98.671189][ T5764] ? clear_bhb_loop+0x35/0x90 [ 98.675906][ T5764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.682051][ T5764] RIP: 0033:0x7f8111b779f9 [ 98.686663][ T5764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.706811][ T5764] RSP: 002b:00007f81128e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 98.715258][ T5764] RAX: ffffffffffffffda RBX: 00007f8111d05f80 RCX: 00007f8111b779f9 [ 98.723260][ T5764] RDX: 001c15e33101f29d RSI: 0000000020000180 RDI: 0000000000000003 [ 98.731255][ T5764] RBP: 00007f81128e8090 R08: 0000000000000000 R09: 0000000000000000 [ 98.739248][ T5764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.747238][ T5764] R13: 0000000000000000 R14: 00007f8111d05f80 R15: 00007fffeb72d468 [ 98.755882][ T5764] [ 98.877843][ T5767] netlink: 'syz.1.123': attribute type 9 has an invalid length. [ 98.924637][ T5772] netlink: 'syz.4.114': attribute type 4 has an invalid length. [ 98.931418][ T5767] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.123'. [ 98.939039][ T5772] netlink: 17 bytes leftover after parsing attributes in process `syz.4.114'. [ 98.954839][ T5771] IPVS: length: 215 != 24 [ 99.045198][ T5777] xt_recent: Unsupported userspace flags (00000042) [ 99.258166][ T5784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.127'. [ 99.311758][ T5774] netlink: 'syz.1.123': attribute type 9 has an invalid length. [ 99.958311][ T5805] FAULT_INJECTION: forcing a failure. [ 99.958311][ T5805] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 100.032246][ T5805] CPU: 0 UID: 0 PID: 5805 Comm: syz.1.131 Not tainted 6.11.0-rc1-syzkaller-00300-ge66f33bdf0c3 #0 [ 100.042924][ T5805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 100.053115][ T5805] Call Trace: [ 100.056432][ T5805] [ 100.059400][ T5805] dump_stack_lvl+0x241/0x360 [ 100.064165][ T5805] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.069423][ T5805] ? __pfx__printk+0x10/0x10 [ 100.074067][ T5805] ? __pfx_lock_release+0x10/0x10 [ 100.079163][ T5805] should_fail_ex+0x3b0/0x4e0 [ 100.083911][ T5805] _copy_from_user+0x2f/0xe0 [ 100.088647][ T5805] copy_msghdr_from_user+0xae/0x680 [ 100.093905][ T5805] ? _parse_integer_limit+0x1b5/0x200 [ 100.099343][ T5805] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 100.105244][ T5805] __sys_sendmmsg+0x374/0x740 [ 100.109994][ T5805] ? __pfx___sys_sendmmsg+0x10/0x10 [ 100.115295][ T5805] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 100.121259][ T5805] ? ksys_write+0x23e/0x2c0 [ 100.125825][ T5805] ? __pfx_lock_release+0x10/0x10 [ 100.130999][ T5805] ? vfs_write+0x7c4/0xc90 [ 100.135779][ T5805] ? __mutex_unlock_slowpath+0x21d/0x750 [ 100.141492][ T5805] ? __pfx_vfs_write+0x10/0x10 [ 100.146388][ T5805] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 100.152518][ T5805] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 100.158902][ T5805] ? do_syscall_64+0x100/0x230 [ 100.163904][ T5805] __x64_sys_sendmmsg+0xa0/0xb0 [ 100.168800][ T5805] do_syscall_64+0xf3/0x230 [ 100.173359][ T5805] ? clear_bhb_loop+0x35/0x90 [ 100.178167][ T5805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.184114][ T5805] RIP: 0033:0x7fc2a4f779f9 [ 100.188566][ T5805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.208219][ T5805] RSP: 002b:00007fc2a5d10038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 100.216688][ T5805] RAX: ffffffffffffffda RBX: 00007fc2a5105f80 RCX: 00007fc2a4f779f9 [ 100.224710][ T5805] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 100.232729][ T5805] RBP: 00007fc2a5d10090 R08: 0000000000000000 R09: 0000000000000000 [ 100.240942][ T5805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.249048][ T5805] R13: 0000000000000000 R14: 00007fc2a5105f80 R15: 00007ffe2b59ca68 [ 100.257090][ T5805] [ 101.347416][ T5811] __nla_validate_parse: 6 callbacks suppressed [ 101.347437][ T5811] netlink: 76 bytes leftover after parsing attributes in process `syz.2.133'. [ 101.402094][ T5846] netlink: 52 bytes leftover after parsing attributes in process `syz.4.140'. [ 101.703564][ T5855] netlink: 224 bytes leftover after parsing attributes in process `syz.1.142'. [ 101.725572][ T5855] netlink: 1020 bytes leftover after parsing attributes in process `syz.1.142'. [ 101.751251][ T5855] netlink: 2640 bytes leftover after parsing attributes in process `syz.1.142'. [ 101.805497][ T5854] netlink: 'syz.1.142': attribute type 10 has an invalid length. [ 101.827323][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 101.934231][ T5854] team0: Port device wlan1 added [ 101.958530][ T5858] netlink: 'syz.1.142': attribute type 10 has an invalid length. [ 102.284942][ T5871] xt_hashlimit: overflow, try lower: 0/0 [ 102.424267][ T5879] netlink: 24 bytes leftover after parsing attributes in process `syz.2.150'. [ 102.645156][ T5884] netlink: 12 bytes leftover after parsing attributes in process `syz.0.152'. [ 102.680903][ T5887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.151'. [ 102.757467][ T5896] netlink: 20 bytes leftover after parsing attributes in process `syz.2.155'. [ 102.853418][ T5903] ieee802154 phy0 wpan0: encryption failed: -22 [ 103.085272][ T5906] Illegal XDP return value 5906 on prog (id 106) dev N/A, expect packet loss! [ 103.390871][ T5922] FAULT_INJECTION: forcing a failure. [ 103.390871][ T5922] name failslab, interval 1, probability 0, space 0, times 0 [ 103.411379][ T5922] CPU: 1 UID: 0 PID: 5922 Comm: syz.3.163 Not tainted 6.11.0-rc1-syzkaller-00300-ge66f33bdf0c3 #0 [ 103.422134][ T5922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 103.432233][ T5922] Call Trace: [ 103.435541][ T5922] [ 103.438505][ T5922] dump_stack_lvl+0x241/0x360 [ 103.443235][ T5922] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.448479][ T5922] ? __pfx__printk+0x10/0x10 [ 103.453109][ T5922] ? __kmalloc_noprof+0xb0/0x400 [ 103.458065][ T5922] ? __pfx___might_resched+0x10/0x10 [ 103.463372][ T5922] should_fail_ex+0x3b0/0x4e0 [ 103.468076][ T5922] ? alloc_pipe_info+0x1ff/0x4d0 [ 103.473035][ T5922] should_failslab+0xac/0x100 [ 103.477742][ T5922] ? alloc_pipe_info+0x1ff/0x4d0 [ 103.482706][ T5922] __kmalloc_noprof+0xd8/0x400 [ 103.487487][ T5922] alloc_pipe_info+0x1ff/0x4d0 [ 103.492277][ T5922] splice_direct_to_actor+0xaac/0xc90 [ 103.497667][ T5922] ? aa_file_perm+0x3ef/0xf60 [ 103.502396][ T5922] ? __pfx_aa_file_perm+0x10/0x10 [ 103.507442][ T5922] ? __pfx_direct_splice_actor+0x10/0x10 [ 103.513090][ T5922] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 103.519034][ T5922] ? __fget_files+0x29/0x470 [ 103.523647][ T5922] ? __pfx_lock_release+0x10/0x10 [ 103.528693][ T5922] do_splice_direct+0x28c/0x3e0 [ 103.533568][ T5922] ? __pfx_do_splice_direct+0x10/0x10 [ 103.538962][ T5922] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 103.544884][ T5922] ? security_file_permission+0x7f/0xa0 [ 103.550454][ T5922] ? rw_verify_area+0x1d2/0x6b0 [ 103.555355][ T5922] do_sendfile+0x56d/0xe20 [ 103.559787][ T5922] ? __might_fault+0xaa/0x120 [ 103.564517][ T5922] ? __pfx_do_sendfile+0x10/0x10 [ 103.569473][ T5922] ? __might_fault+0xc6/0x120 [ 103.574187][ T5922] __se_sys_sendfile64+0x100/0x1e0 [ 103.579334][ T5922] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 103.584995][ T5922] ? do_syscall_64+0x100/0x230 [ 103.589813][ T5922] ? do_syscall_64+0xb6/0x230 [ 103.594508][ T5922] do_syscall_64+0xf3/0x230 [ 103.599033][ T5922] ? clear_bhb_loop+0x35/0x90 [ 103.603726][ T5922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.609728][ T5922] RIP: 0033:0x7f51b9d779f9 [ 103.614179][ T5922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.633994][ T5922] RSP: 002b:00007f51bab2d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 103.642431][ T5922] RAX: ffffffffffffffda RBX: 00007f51b9f05f80 RCX: 00007f51b9d779f9 [ 103.650414][ T5922] RDX: 0000000020000240 RSI: 0000000000000003 RDI: 0000000000000004 [ 103.658396][ T5922] RBP: 00007f51bab2d090 R08: 0000000000000000 R09: 0000000000000000 [ 103.666380][ T5922] R10: 000000000000ffeb R11: 0000000000000246 R12: 0000000000000001 [ 103.674364][ T5922] R13: 0000000000000000 R14: 00007f51b9f05f80 R15: 00007ffd2ffc8608 [ 103.682369][ T5922] [ 104.102930][ T5949] netlink: 32 bytes leftover after parsing attributes in process `syz.2.171'. [ 104.558451][ T5970] team0: entered promiscuous mode [ 104.564330][ T5970] team_slave_0: entered promiscuous mode [ 104.586342][ T5970] team_slave_1: entered promiscuous mode [ 104.611142][ T5970] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 104.694526][ T5966] team0: left promiscuous mode [ 104.707656][ T5966] team_slave_0: left promiscuous mode [ 104.739903][ T5966] team_slave_1: left promiscuous mode [ 104.768688][ T5966] mac80211_hwsim hwsim6 wlan1: left promiscuous mode [ 105.044731][ T5991] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 105.074031][ T5991] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 105.376836][ T6000] syzkaller0: entered allmulticast mode [ 105.417035][ T6000] IPVS: length: 192 != 8 [ 105.878834][ T6023] netlink: 'syz.0.194': attribute type 1 has an invalid length. [ 105.887342][ T6023] netlink: 'syz.0.194': attribute type 1 has an invalid length. [ 105.895697][ T6023] netlink: 'syz.0.194': attribute type 2 has an invalid length. [ 106.997265][ T6059] dummy0: entered promiscuous mode [ 107.016394][ T6059] dummy0: left promiscuous mode [ 107.093125][ T6059] __nla_validate_parse: 8 callbacks suppressed [ 107.093148][ T6059] netlink: 44 bytes leftover after parsing attributes in process `syz.4.207'. [ 107.192847][ T6071] netlink: 'syz.2.211': attribute type 4 has an invalid length. [ 107.269954][ T6072] netlink: 'syz.2.211': attribute type 4 has an invalid length. [ 107.443261][ T6080] netlink: 4 bytes leftover after parsing attributes in process `syz.4.214'. [ 107.597819][ T6084] macvlan0: entered allmulticast mode [ 107.619425][ T6084] veth1_vlan: entered allmulticast mode [ 107.654477][ T6084] veth1_vlan: left allmulticast mode [ 107.747883][ T6084] macvlan0 (unregistering): left allmulticast mode [ 107.948053][ T6096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.104709][ T6098] xt_TCPMSS: Only works on TCP SYN packets [ 108.207771][ T6106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.222'. [ 108.340311][ T6114] netlink: 56 bytes leftover after parsing attributes in process `syz.1.223'. [ 108.363880][ T6114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.223'. [ 108.634259][ T6118] trusted_key: syz.1.225 sent an empty control message without MSG_MORE. [ 108.649430][ T6127] netlink: 40 bytes leftover after parsing attributes in process `syz.2.226'. [ 109.364035][ T6151] veth0_vlan: entered allmulticast mode [ 109.523140][ T6158] netlink: 'syz.1.233': attribute type 15 has an invalid length. [ 109.664805][ T6164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.234'. [ 109.873867][ T6174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.237'. [ 109.884770][ T6174] netlink: 12 bytes leftover after parsing attributes in process `syz.4.237'. [ 109.992968][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 110.017628][ T6181] netlink: 16 bytes leftover after parsing attributes in process `syz.1.238'. [ 110.085602][ T6175] vlan3: entered promiscuous mode [ 110.100285][ T6175] bridge2: entered promiscuous mode [ 110.561808][ T6195] netlink: 'syz.0.241': attribute type 5 has an invalid length. [ 110.662117][ T6195] : entered promiscuous mode [ 110.672624][ T6198] bridge_slave_1: left allmulticast mode [ 110.678350][ T6198] bridge_slave_1: left promiscuous mode [ 110.752748][ T6198] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.833186][ T6198] bridge_slave_0: left allmulticast mode [ 110.865376][ T6198] bridge_slave_0: left promiscuous mode [ 110.896329][ T6198] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.312848][ T6216] netlink: 'syz.3.247': attribute type 2 has an invalid length. [ 111.522155][ T6224] netlink: 'syz.4.251': attribute type 28 has an invalid length. [ 111.553212][ T6224] netlink: 'syz.4.251': attribute type 29 has an invalid length. [ 111.872887][ T6244] netlink: 'syz.4.255': attribute type 7 has an invalid length. [ 111.899892][ T6244] netlink: 'syz.4.255': attribute type 39 has an invalid length. [ 112.065424][ T6248] netlink: 'syz.4.255': attribute type 7 has an invalid length. [ 112.110569][ T6248] netlink: 'syz.4.255': attribute type 39 has an invalid length. [ 112.435132][ T6260] __nla_validate_parse: 7 callbacks suppressed [ 112.435156][ T6260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.259'. [ 112.743254][ T6266] netlink: 'syz.3.262': attribute type 64 has an invalid length. [ 112.769891][ T6266] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 113.023967][ T6288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.267'. [ 113.091380][ T6288] netlink: 24 bytes leftover after parsing attributes in process `syz.2.267'. [ 113.514202][ T6305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.273'. [ 113.675192][ T6312] netlink: 36 bytes leftover after parsing attributes in process `syz.1.277'. [ 114.041139][ T6322] netlink: 20 bytes leftover after parsing attributes in process `syz.3.279'. [ 114.059423][ T6322] netlink: 24 bytes leftover after parsing attributes in process `syz.3.279'. [ 114.173438][ T6324] xt_CT: No such helper "netbios-ns" [ 114.226340][ T6324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.280'. [ 114.265098][ T6324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.280'. [ 114.757113][ T6348] netlink: 'syz.4.284': attribute type 2 has an invalid length. [ 115.215869][ T6366] netlink: 'syz.3.286': attribute type 12 has an invalid length. [ 115.341851][ T6373] netlink: 44 bytes leftover after parsing attributes in process `syz.4.291'. [ 115.451909][ T6372] macsec1: entered allmulticast mode [ 115.486211][ T6372] veth1_macvtap: entered allmulticast mode [ 115.689886][ T6392] xt_l2tp: v2 sid > 0xffff: 16777216 [ 115.736959][ T6378] veth1_macvtap (unregistering): left allmulticast mode [ 115.746347][ T6393] xt_TPROXY: Can be used only with -p tcp or -p udp [ 116.030185][ T6394] syzkaller1: entered promiscuous mode [ 116.039867][ T6394] syzkaller1: entered allmulticast mode [ 117.183820][ T6435] FAULT_INJECTION: forcing a failure. [ 117.183820][ T6435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.251870][ T6435] CPU: 0 UID: 0 PID: 6435 Comm: syz.1.304 Not tainted 6.11.0-rc1-syzkaller-00300-ge66f33bdf0c3 #0 [ 117.262548][ T6435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 117.272645][ T6435] Call Trace: [ 117.275969][ T6435] [ 117.278937][ T6435] dump_stack_lvl+0x241/0x360 [ 117.283690][ T6435] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.289025][ T6435] ? __pfx__printk+0x10/0x10 [ 117.293670][ T6435] ? __pfx_lock_release+0x10/0x10 [ 117.298759][ T6435] should_fail_ex+0x3b0/0x4e0 [ 117.303593][ T6435] _copy_from_iter+0x1f6/0x1960 [ 117.308506][ T6435] ? __virt_addr_valid+0x183/0x530 [ 117.313835][ T6435] ? __pfx_lock_release+0x10/0x10 [ 117.318894][ T6435] ? __alloc_skb+0x28f/0x440 [ 117.323513][ T6435] ? __pfx__copy_from_iter+0x10/0x10 [ 117.328811][ T6435] ? __virt_addr_valid+0x183/0x530 [ 117.333933][ T6435] ? __virt_addr_valid+0x183/0x530 [ 117.339096][ T6435] ? __virt_addr_valid+0x45f/0x530 [ 117.344222][ T6435] ? __check_object_size+0x49c/0x900 [ 117.349524][ T6435] netlink_sendmsg+0x73d/0xcb0 [ 117.354340][ T6435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.359930][ T6435] ? aa_sock_msg_perm+0x91/0x160 [ 117.364886][ T6435] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 117.370192][ T6435] ? security_socket_sendmsg+0x87/0xb0 [ 117.375673][ T6435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.380993][ T6435] __sock_sendmsg+0x221/0x270 [ 117.385698][ T6435] __sys_sendto+0x3a4/0x4f0 [ 117.390240][ T6435] ? __pfx___sys_sendto+0x10/0x10 [ 117.395396][ T6435] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 117.401429][ T6435] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 117.407792][ T6435] __x64_sys_sendto+0xde/0x100 [ 117.412587][ T6435] do_syscall_64+0xf3/0x230 [ 117.417111][ T6435] ? clear_bhb_loop+0x35/0x90 [ 117.421840][ T6435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.427766][ T6435] RIP: 0033:0x7fc2a4f779f9 [ 117.432821][ T6435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.452466][ T6435] RSP: 002b:00007fc2a5d10038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 117.460920][ T6435] RAX: ffffffffffffffda RBX: 00007fc2a5105f80 RCX: 00007fc2a4f779f9 [ 117.468909][ T6435] RDX: 0000000000000078 RSI: 0000000020000080 RDI: 0000000000000008 [ 117.476896][ T6435] RBP: 00007fc2a5d10090 R08: 0000000000000000 R09: 0a00000000000000 [ 117.484879][ T6435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.492881][ T6435] R13: 0000000000000000 R14: 00007fc2a5105f80 R15: 00007ffe2b59ca68 [ 117.500919][ T6435] [ 117.859516][ T6458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.941122][ T6452] netlink: 'syz.0.308': attribute type 5 has an invalid length. [ 118.135625][ T6463] vlan4: entered promiscuous mode [ 118.148534][ T6463] gretap0: entered promiscuous mode [ 118.169063][ T6463] vlan4: entered allmulticast mode [ 118.174253][ T6463] gretap0: entered allmulticast mode [ 118.223553][ T6463] gretap0: left allmulticast mode [ 118.228661][ T6463] gretap0: left promiscuous mode [ 118.408095][ T6480] IPVS: set_ctl: invalid protocol: 33 100.1.1.2:20004 [ 118.666296][ T6492] __nla_validate_parse: 7 callbacks suppressed [ 118.666318][ T6492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.318'. [ 118.704070][ T6492] nbd: couldn't find device at index 0 [ 119.182754][ T6514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.323'. [ 119.248618][ T6521] vlan2: entered allmulticast mode [ 119.275412][ T6521] bridge0: port 1(vlan2) entered blocking state [ 119.305628][ T6521] bridge0: port 1(vlan2) entered disabled state [ 119.327362][ T6534] netlink: 32 bytes leftover after parsing attributes in process `syz.2.323'. [ 119.509785][ T6542] netlink: 'syz.3.328': attribute type 4 has an invalid length. [ 119.887902][ T6555] netlink: 'syz.2.330': attribute type 10 has an invalid length. [ 119.951631][ T6555] team0: Port device netdevsim0 added [ 120.006734][ T6537] netlink: 'syz.3.328': attribute type 4 has an invalid length. [ 120.240689][ T6563] xt_TCPMSS: Only works on TCP SYN packets [ 120.269384][ T6563] netlink: 12 bytes leftover after parsing attributes in process `syz.4.333'. [ 120.297129][ T6564] netlink: 12 bytes leftover after parsing attributes in process `syz.4.333'. [ 120.612269][ T6571] netlink: 184 bytes leftover after parsing attributes in process `syz.1.335'. [ 120.629422][ T6597] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.338'. [ 121.040329][ T6611] netlink: 40 bytes leftover after parsing attributes in process `syz.1.343'. [ 121.200184][ T6625] netlink: 40 bytes leftover after parsing attributes in process `syz.3.342'. [ 121.293814][ T6629] netlink: 28 bytes leftover after parsing attributes in process `syz.4.344'. [ 122.288299][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 122.332153][ T6661] bond0: entered promiscuous mode [ 122.360147][ T6661] bond_slave_0: entered promiscuous mode [ 122.387525][ T6661] bond_slave_1: entered promiscuous mode [ 122.603666][ T6672] batman_adv: batadv0: Adding interface: wlan1 [ 122.630619][ T6672] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.668830][ T6672] batman_adv: batadv0: Interface activated: wlan1 [ 122.887900][ T6684] netlink: 'syz.2.359': attribute type 1 has an invalid length. [ 122.925993][ T6684] netlink: 'syz.2.359': attribute type 1 has an invalid length. [ 122.954142][ T6685] netlink: 'syz.2.359': attribute type 1 has an invalid length. [ 122.992522][ T6685] netlink: 'syz.2.359': attribute type 1 has an invalid length. [ 123.321620][ T6698] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20001 [ 123.920775][ T6721] xt_socket: unknown flags 0x4 [ 124.208292][ T6738] __nla_validate_parse: 4 callbacks suppressed [ 124.208317][ T6738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.372'. [ 124.522024][ T6749] netlink: 'syz.2.375': attribute type 12 has an invalid length. [ 124.547675][ T6749] netlink: 137124 bytes leftover after parsing attributes in process `syz.2.375'. [ 124.697226][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 124.742833][ T6758] af_packet: tpacket_rcv: packet too big, clamped from 32840 to 3952. macoff=96 [ 124.859350][ T6760] netlink: 16 bytes leftover after parsing attributes in process `syz.0.378'. [ 125.589785][ T6791] netlink: 64 bytes leftover after parsing attributes in process `syz.3.388'. [ 125.622510][ T6792] netlink: 148 bytes leftover after parsing attributes in process `syz.1.389'. [ 125.853467][ T6799] veth0_macvtap: left promiscuous mode [ 125.934212][ T6809] netlink: 32 bytes leftover after parsing attributes in process `syz.2.392'. [ 126.193446][ T6815] syzkaller0: entered allmulticast mode [ 126.524419][ T6823] pimreg: entered allmulticast mode [ 126.533309][ T6823] pimreg: left allmulticast mode [ 126.814752][ T6836] xt_TCPMSS: Only works on TCP SYN packets [ 126.949517][ T6840] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 127.110846][ T6848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.405'. [ 127.676769][ T6872] netlink: 52 bytes leftover after parsing attributes in process `syz.0.412'. [ 127.743071][ T6875] ip6t_srh: unknown srh invflags 4000 [ 127.993254][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 128.040706][ T6882] xt_TCPMSS: Only works on TCP SYN packets [ 128.199135][ T6885] sctp: [Deprecated]: syz.3.416 (pid 6885) Use of struct sctp_assoc_value in delayed_ack socket option. [ 128.199135][ T6885] Use struct sctp_sack_info instead [ 128.277522][ T6890] ------------[ cut here ]------------ [ 128.283492][ T6890] WARNING: CPU: 0 PID: 6890 at kernel/workqueue.c:2259 __queue_work+0xcd3/0xf50 [ 128.292580][ T6890] Modules linked in: [ 128.296508][ T6890] CPU: 0 UID: 0 PID: 6890 Comm: syz.4.417 Not tainted 6.11.0-rc1-syzkaller-00300-ge66f33bdf0c3 #0 [ 128.307221][ T6890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 128.317485][ T6890] RIP: 0010:__queue_work+0xcd3/0xf50 [ 128.322799][ T6890] Code: ff e8 11 84 36 00 90 0f 0b 90 e9 1e fd ff ff e8 03 84 36 00 eb 13 e8 fc 83 36 00 eb 0c e8 f5 83 36 00 eb 05 e8 ee 83 36 00 90 <0f> 0b 90 48 83 c4 60 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 128.342427][ T6890] RSP: 0018:ffffc9000cdd7b48 EFLAGS: 00010093 [ 128.348512][ T6890] RAX: ffffffff815ce274 RBX: ffff88805ba01e00 RCX: ffff88805ba01e00 [ 128.356500][ T6890] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 128.364486][ T6890] RBP: 0000000000000000 R08: ffffffff815cd6d4 R09: 0000000000000000 [ 128.372471][ T6890] R10: ffffc9000cdd7c20 R11: fffff520019baf85 R12: ffff88802bad3000 [ 128.380461][ T6890] R13: ffff88802bad31c0 R14: dffffc0000000000 R15: 0000000000000008 [ 128.388447][ T6890] FS: 0000555575227500(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 128.397388][ T6890] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.403988][ T6890] CR2: 00007f81128c7d58 CR3: 000000002be6e000 CR4: 00000000003506f0 [ 128.411977][ T6890] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 128.419960][ T6890] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 128.427942][ T6890] Call Trace: [ 128.431231][ T6890] [ 128.434174][ T6890] ? __warn+0x163/0x4e0 [ 128.438346][ T6890] ? __queue_work+0xcd3/0xf50 [ 128.443065][ T6890] ? report_bug+0x2b3/0x500 [ 128.447600][ T6890] ? __queue_work+0xcd3/0xf50 [ 128.452331][ T6890] ? handle_bug+0x3e/0x70 [ 128.456694][ T6890] ? exc_invalid_op+0x1a/0x50 [ 128.461403][ T6890] ? asm_exc_invalid_op+0x1a/0x20 [ 128.466462][ T6890] ? __queue_work+0x124/0xf50 [ 128.471193][ T6890] ? __queue_work+0xcc4/0xf50 [ 128.475897][ T6890] ? __queue_work+0xcd3/0xf50 [ 128.480685][ T6890] ? __queue_work+0xcc4/0xf50 [ 128.485397][ T6890] ? __pfx_lock_release+0x10/0x10 [ 128.490480][ T6890] queue_work_on+0x1c2/0x380 [ 128.495104][ T6890] ? __pfx_queue_work_on+0x10/0x10 [ 128.500238][ T6890] ? pppol2tp_sock_to_session+0x511/0x640 [ 128.505983][ T6890] ? pppol2tp_sock_to_session+0x7f/0x640 [ 128.511640][ T6890] ? __pfx_pppol2tp_sock_to_session+0x10/0x10 [ 128.517741][ T6890] ? kfree+0x149/0x360 [ 128.521832][ T6890] pppol2tp_release+0x163/0x230 [ 128.526712][ T6890] sock_close+0xbc/0x240 [ 128.530975][ T6890] ? __pfx_sock_close+0x10/0x10 [ 128.535849][ T6890] __fput+0x24a/0x8a0 [ 128.539864][ T6890] task_work_run+0x24f/0x310 [ 128.544479][ T6890] ? __pfx_task_work_run+0x10/0x10 [ 128.549610][ T6890] ? syscall_exit_to_user_mode+0xa3/0x370 [ 128.555351][ T6890] syscall_exit_to_user_mode+0x168/0x370 [ 128.561013][ T6890] do_syscall_64+0x100/0x230 [ 128.565633][ T6890] ? clear_bhb_loop+0x35/0x90 [ 128.570331][ T6890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.576339][ T6890] RIP: 0033:0x7f7aa41779f9 [ 128.580770][ T6890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.600394][ T6890] RSP: 002b:00007ffd15b100d8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 128.608852][ T6890] RAX: 0000000000000000 RBX: 000000000001f4de RCX: 00007f7aa41779f9 [ 128.616889][ T6890] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 128.624880][ T6890] RBP: 00007ffd15b101b0 R08: 0000000000000001 R09: 00007ffd15b103bf [ 128.632871][ T6890] R10: 00007f7aa4000000 R11: 0000000000000246 R12: 0000000000000032 [ 128.640874][ T6890] R13: 00007ffd15b101d0 R14: 00007ffd15b101f0 R15: ffffffffffffffff [ 128.648889][ T6890] [ 128.651941][ T6890] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 128.659252][ T6890] CPU: 0 UID: 0 PID: 6890 Comm: syz.4.417 Not tainted 6.11.0-rc1-syzkaller-00300-ge66f33bdf0c3 #0 [ 128.669910][ T6890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 128.679982][ T6890] Call Trace: [ 128.683270][ T6890] [ 128.686211][ T6890] dump_stack_lvl+0x241/0x360 [ 128.690918][ T6890] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.696134][ T6890] ? __pfx__printk+0x10/0x10 [ 128.700745][ T6890] ? vscnprintf+0x5d/0x90 [ 128.705096][ T6890] panic+0x349/0x860 [ 128.709009][ T6890] ? __warn+0x172/0x4e0 [ 128.713174][ T6890] ? __pfx_panic+0x10/0x10 [ 128.717622][ T6890] __warn+0x346/0x4e0 [ 128.721705][ T6890] ? __queue_work+0xcd3/0xf50 [ 128.726431][ T6890] report_bug+0x2b3/0x500 [ 128.730777][ T6890] ? __queue_work+0xcd3/0xf50 [ 128.735483][ T6890] handle_bug+0x3e/0x70 [ 128.739658][ T6890] exc_invalid_op+0x1a/0x50 [ 128.744181][ T6890] asm_exc_invalid_op+0x1a/0x20 [ 128.749052][ T6890] RIP: 0010:__queue_work+0xcd3/0xf50 [ 128.754363][ T6890] Code: ff e8 11 84 36 00 90 0f 0b 90 e9 1e fd ff ff e8 03 84 36 00 eb 13 e8 fc 83 36 00 eb 0c e8 f5 83 36 00 eb 05 e8 ee 83 36 00 90 <0f> 0b 90 48 83 c4 60 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 128.773988][ T6890] RSP: 0018:ffffc9000cdd7b48 EFLAGS: 00010093 [ 128.780075][ T6890] RAX: ffffffff815ce274 RBX: ffff88805ba01e00 RCX: ffff88805ba01e00 [ 128.788060][ T6890] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 128.796043][ T6890] RBP: 0000000000000000 R08: ffffffff815cd6d4 R09: 0000000000000000 [ 128.804027][ T6890] R10: ffffc9000cdd7c20 R11: fffff520019baf85 R12: ffff88802bad3000 [ 128.812014][ T6890] R13: ffff88802bad31c0 R14: dffffc0000000000 R15: 0000000000000008 [ 128.820089][ T6890] ? __queue_work+0x124/0xf50 [ 128.824808][ T6890] ? __queue_work+0xcc4/0xf50 [ 128.829509][ T6890] ? __queue_work+0xcc4/0xf50 [ 128.834208][ T6890] ? __pfx_lock_release+0x10/0x10 [ 128.839350][ T6890] queue_work_on+0x1c2/0x380 [ 128.843960][ T6890] ? __pfx_queue_work_on+0x10/0x10 [ 128.849089][ T6890] ? pppol2tp_sock_to_session+0x511/0x640 [ 128.854840][ T6890] ? pppol2tp_sock_to_session+0x7f/0x640 [ 128.860506][ T6890] ? __pfx_pppol2tp_sock_to_session+0x10/0x10 [ 128.866598][ T6890] ? kfree+0x149/0x360 [ 128.870699][ T6890] pppol2tp_release+0x163/0x230 [ 128.875581][ T6890] sock_close+0xbc/0x240 [ 128.879850][ T6890] ? __pfx_sock_close+0x10/0x10 [ 128.884730][ T6890] __fput+0x24a/0x8a0 [ 128.888737][ T6890] task_work_run+0x24f/0x310 [ 128.893349][ T6890] ? __pfx_task_work_run+0x10/0x10 [ 128.898504][ T6890] ? syscall_exit_to_user_mode+0xa3/0x370 [ 128.904255][ T6890] syscall_exit_to_user_mode+0x168/0x370 [ 128.909910][ T6890] do_syscall_64+0x100/0x230 [ 128.914519][ T6890] ? clear_bhb_loop+0x35/0x90 [ 128.919210][ T6890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.925151][ T6890] RIP: 0033:0x7f7aa41779f9 [ 128.929579][ T6890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.949218][ T6890] RSP: 002b:00007ffd15b100d8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 128.957654][ T6890] RAX: 0000000000000000 RBX: 000000000001f4de RCX: 00007f7aa41779f9 [ 128.965643][ T6890] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 128.973628][ T6890] RBP: 00007ffd15b101b0 R08: 0000000000000001 R09: 00007ffd15b103bf [ 128.981616][ T6890] R10: 00007f7aa4000000 R11: 0000000000000246 R12: 0000000000000032 [ 128.989603][ T6890] R13: 00007ffd15b101d0 R14: 00007ffd15b101f0 R15: ffffffffffffffff [ 128.997608][ T6890] [ 129.001014][ T6890] Kernel Offset: disabled [ 129.005417][ T6890] Rebooting in 86400 seconds..