last executing test programs: 2m41.256738275s ago: executing program 2 (id=1336): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e1e, @multicast1}]}, &(0x7f0000000180)=0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x7e3bfe4fa73db39f}, 0x18}}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x5}]}}]}, 0x3c}}, 0x24000000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={r6, 0x7}, 0x8) r7 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$inet6_udp_int(r7, 0x6b, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'team_slave_0\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="f88b221a0100000000003d0000004600004000000000008490788583b8bdac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba000000907800090b6f00050200000000000000000002d58838068b91000000"], 0x4e) pipe(&(0x7f0000000080)={0xffffffffffffffff}) readv(r10, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r11, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@cgroup=r10, 0xffffffffffffffff, 0xfe2103ccd102d050, 0x8, 0x0, @void, @value=r11}, 0x20) 2m40.314724973s ago: executing program 2 (id=1351): r0 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x24, r4, 0x18fe2a01ed25d92f, 0x2, 0x0, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_SUBVOL_CREATE(r7, 0x5000940e, &(0x7f00000010c0)={{r2}, "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"}) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0600000004000000ff0f0000070000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000cbd9e6bc6ff2fde12a9cb496295cc793dea8d04addb5a4768f6d8e4514d966688753549fcbaa813aeb726906041318dbee700db88f1aa02459dc754ff51c38f473f1ab48f75942f5650356cb13799cd45be337d38e6146108f24f27982a046c0845c72a282092d355697b23b78e24807bb387fcf86debe0e387abf89f375cf4382094c87a3b4cae65a33f735c60a1b4bf2b2166684c09a7095d6798c47c2", @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x10, &(0x7f00000006c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_MSG_GETOBJ_RESET(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="34000000150a0104000008fb008644c25feeb90000020000060800034000000007000001007379d77a73797a0d1365cfc867af956db03a4322b7a3fbc7b78113158e6eabaf39aaecf25fd75f20b49019e35327d0ce3b43a0ca8b4c"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x8004) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37de6c8a68769c38, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2m39.960612881s ago: executing program 4 (id=1358): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x38, r1, 0x1, 0xfffffffd, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x38}}, 0x20040010) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r2}, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r4, 0x10d, 0x9b, &(0x7f0000000000), &(0x7f0000000080)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="0100"]) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r9, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@sndrcv={0x30, 0x84, 0x1, {0xd5, 0x6, 0x8, 0xff, 0x8, 0x1, 0x1}}, @sndinfo={0x20, 0x84, 0x2, {0x3ff, 0x8003, 0x1, 0x7ff}}], 0x50}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYRES64], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000003, @void, @value}, 0x94) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x1c, 0x20, 0x9, 0x2, 0x25dfdbff, {0x4}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 2m39.639020801s ago: executing program 4 (id=1361): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) r0 = socket$igmp6(0xa, 0x3, 0x2) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @none}, 0x0, 0x80000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200142c00fe000000000000000000ffff00", @ANYRES32=0x41424344], 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r1, &(0x7f0000001880), 0x0, 0x48) socket(0x200000000000011, 0x4000000000080002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x840000000002, 0x3, 0x100) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xf4240}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe, 0x0, &(0x7f0000001780)="000000000000000002b2138373ef", 0x0, 0x10003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r5, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r4], 0x40c}}, 0x0) 2m39.437928768s ago: executing program 4 (id=1363): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x11) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000002060108000000000000000000000000140007800800114000000000058b3848dc908e62b60005000a000000050005000000000005000400030000000900020073797a310000000011000300686173683a6e65742c6e657400000000"], 0x60}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r3, 0x1) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000000), 0x4) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300050d000000000000000000000002000800080000005b0000000000000005000600000000000a0000005ce3809400000000fe8000000000000000000000000000bb00000000000000000200010000000000ff00090000000000020013000000000009a07000ff340000"], 0x68}, 0x1, 0x7}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r5) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r7, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f0000000300)=0xc) syz_open_procfs$namespace(r8, &(0x7f0000000240)='ns/time\x00') sendmsg$rds(r7, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r7, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) connect$can_bcm(r6, &(0x7f0000000000), 0x10) readv(r6, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/108, 0x6c}, {0x0}], 0x2) sendmsg$can_bcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=0x2710], 0x80}}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) 2m39.367911289s ago: executing program 2 (id=1364): socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt(0xffffffffffffffff, 0xff, 0x9, &(0x7f00000002c0)=""/42, &(0x7f0000000300)=0x2a) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x48400) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000640)="50eab642bf632c5cde2c2827b6b0f95a7e02e4c01968105ea31a5397f228b4aeb94841e6689f", 0x26}], 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe47) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 2m39.144109371s ago: executing program 2 (id=1367): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000c00)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr=0x64010100, @in=@dev={0xac, 0x14, 0x14, 0x3f}}, {@in=@private=0xa010101, 0x0, 0x32}, @in6=@mcast2, {0x1a00, 0x0, 0xfffffffffffeffff, 0x0, 0x4}, {}, {0x0, 0x2}, 0x70bd2d, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) 2m39.00718655s ago: executing program 2 (id=1369): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095", @ANYRES16=r3, @ANYRES64=r1, @ANYRES32=r0, @ANYBLOB="6dadf53d0836d87055023635f1bd68fe076d4d3665f04fe6aa5c8561666a9431e63a455da666d99b2fd98f2481f3ef1d248c2faa4744bf072013b94a96369d5967c2149ad80c6e1e4506490e938aa9e0571b451c67a2d2309e4bc0ad87a1019eced93da916bc44195b65ca0339c05dace20104c55ea615a9"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r4, &(0x7f00000004c0)='W', 0x1, 0x40050, &(0x7f0000000100)={0xa, 0x0, 0xfffffffd, @remote, 0x8}, 0x1c) (fail_nth: 58) 2m38.827136824s ago: executing program 2 (id=1373): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000000000711096000000000066700000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x2dc0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$SIOCSIFHWADDR(r4, 0x89f0, &(0x7f0000000900)={'syz_tun\x00', @remote}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.freeze\x00', 0x0, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000001600)={'hsr0\x00', 0x8}) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, 0x0, 0x0) tee(r7, 0xffffffffffffffff, 0x661b, 0x6) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='pmap_register\x00', r7, 0x0, 0x1}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ppoll(&(0x7f0000000040)=[{r3, 0xe264}], 0x1, 0x0, &(0x7f0000000080)={[0x8000000000000001]}, 0x8) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a00)={0x100, r2, 0xe701ac47a3d23ccd, 0x0, 0x2, {}, [@NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93UK\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~=\xe5\xdc\x90\a\xe7M\x9c<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}]}, 0x100}, 0x1, 0x0, 0x0, 0x20084880}, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f0000000200)='u', 0x1, 0x20000840, &(0x7f0000000040)={0xa, 0x0, 0x7, @local, 0x13}, 0x1c) setsockopt$inet6_int(r8, 0x29, 0x3a, &(0x7f0000000000)=0x8, 0x4) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x1d, r2, 0x511, 0x0, 0xfffffffe, {0x5}}, 0x14}}, 0xe004810) 2m38.397007453s ago: executing program 4 (id=1381): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r0, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1, 0x28000000}, 0x1c, 0x0}}], 0x1, 0x0) 2m38.219600787s ago: executing program 4 (id=1384): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000ffe00400002800600010000000000340003800c00010000000000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r2, @ANYBLOB="080003"], 0x80}}, 0x0) 2m38.039500173s ago: executing program 4 (id=1387): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r3 = socket$key(0xf, 0x3, 0x2) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbfb, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x10) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="020d000018000000000000000000000005000600000000000a00000000000000fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000800120002000200000000000000000010002b00020300000200000000000000fe880000000000000000000000000001fc0100000000000000000000000000000400040000000000000000000000000000000000000000000000000000000000254e5bb3358d8c09d14fcaec40a9abf1f6dbd6b6761340ddf30d"], 0xc0}}, 0x0) unshare(0x20000400) (async) socket(0x2, 0x80805, 0x0) (async) unshare(0x48060600) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) (async) listen(r6, 0xa1) accept4$bt_l2cap(r6, 0x0, 0x0, 0x0) (async) shutdown(r6, 0x1) (async) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f0000000240), 0x4) (async) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x28, 0x7, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000) 2m23.356942367s ago: executing program 32 (id=1373): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000000000711096000000000066700000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x2dc0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$SIOCSIFHWADDR(r4, 0x89f0, &(0x7f0000000900)={'syz_tun\x00', @remote}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.freeze\x00', 0x0, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000001600)={'hsr0\x00', 0x8}) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, 0x0, 0x0) tee(r7, 0xffffffffffffffff, 0x661b, 0x6) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='pmap_register\x00', r7, 0x0, 0x1}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ppoll(&(0x7f0000000040)=[{r3, 0xe264}], 0x1, 0x0, &(0x7f0000000080)={[0x8000000000000001]}, 0x8) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a00)={0x100, r2, 0xe701ac47a3d23ccd, 0x0, 0x2, {}, [@NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93UK\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~=\xe5\xdc\x90\a\xe7M\x9c<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}]}, 0x100}, 0x1, 0x0, 0x0, 0x20084880}, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f0000000200)='u', 0x1, 0x20000840, &(0x7f0000000040)={0xa, 0x0, 0x7, @local, 0x13}, 0x1c) setsockopt$inet6_int(r8, 0x29, 0x3a, &(0x7f0000000000)=0x8, 0x4) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x1d, r2, 0x511, 0x0, 0xfffffffe, {0x5}}, 0x14}}, 0xe004810) 2m22.780545014s ago: executing program 33 (id=1387): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r3 = socket$key(0xf, 0x3, 0x2) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbfb, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x10) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="020d000018000000000000000000000005000600000000000a00000000000000fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000800120002000200000000000000000010002b00020300000200000000000000fe880000000000000000000000000001fc0100000000000000000000000000000400040000000000000000000000000000000000000000000000000000000000254e5bb3358d8c09d14fcaec40a9abf1f6dbd6b6761340ddf30d"], 0xc0}}, 0x0) unshare(0x20000400) (async) socket(0x2, 0x80805, 0x0) (async) unshare(0x48060600) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) (async) listen(r6, 0xa1) accept4$bt_l2cap(r6, 0x0, 0x0, 0x0) (async) shutdown(r6, 0x1) (async) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f0000000240), 0x4) (async) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x28, 0x7, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000) 1m31.027288258s ago: executing program 6 (id=1799): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xffffff1f, 0x1, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}]}}}]}, 0x44}}, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_emit_ethernet(0x109, &(0x7f00000001c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @val={@val={0x88a8, 0x3, 0x0, 0x1}, {0x8100, 0x5, 0x0, 0x1}}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0xcb, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100, 0x87, 0x0, [], "bdf708f1081eb4a4be178566d67a6d5dcd6784deac6a19bee227d005c34a0aea27be8ce6ce1edf18a7533d7685861ecd510c84ac17f4f873323a7d9b7e337bff9d638ecebf4208447464ff04b839069432fad3fae1aa329acea6c50a4ab0298dff9dc2cbad866244fd3fdfeb03ca4a488b5c7529d058117af231b1ae0d911a13215fd735cb2cba"}, {}, {}, {}, {0x8, 0x22eb, 0x2, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}}}}}}}}}, 0x0) 1m30.886771318s ago: executing program 6 (id=1801): r0 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x24, r4, 0x18fe2a01ed25d92f, 0x2, 0x0, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$BTRFS_IOC_SUBVOL_CREATE(r7, 0x5000940e, &(0x7f00000010c0)={{r2}, "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"}) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0600000004000000ff0f0000070000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000cbd9e6bc6ff2fde12a9cb496295cc793dea8d04addb5a4768f6d8e4514d966688753549fcbaa813aeb726906041318dbee700db88f1aa02459dc754ff51c38f473f1ab48f75942f5650356cb13799cd45be337d38e6146108f24f27982a046c0845c72a282092d355697b23b78e24807bb387fcf86debe0e387abf89f375cf4382094c87a3b4cae65a33f735c60a1b4bf2b2166684c09a7095d6798c47c2", @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="34000000150a0104000008fb008644c25feeb90000020000060800034000000007000001007379d77a73797a0d1365cfc867af956db03a4322b7a3fbc7b78113158e6eabaf39aaecf25fd75f20b49019e35327d0ce3b43a0ca8b4c"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x8004) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61158c000000000061134c0000000006bfa00000000000000705000008004ef02d3501000000000095000000000000006916000000000000bf67000000000000350605000fff07206706000004000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9d0cc7d3b4814261bdb94a050000a28a404be266df76965947c73c00c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b540dcfc7ad0500c4063b3b8754c0686cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e567238809000000000000000ae2fb494059bba8e3b680324a188090eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb40000000000000000000000000040007abf9c20d89cbc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eb29000000000000003cc3aa39ee4b1386bab561cda886fa64ffffff7f473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59801fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d00000000d3114dbc7e2bf2402a75fd7a5573336004088000000000000000fb38c7f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf73400000000000000cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca8710d5c617df01f82a73f6bd61d1f5b2a443faa9bda0577383dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea90000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8a10300004d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c39e9d8547c666b6764a3c7dd62a94eee45881441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a365b5b11df7216652b5703f31e078ecdefe8e6bfc45a9980a7a8de863e3477dd47d0f11611ca92d89641a183c8f629f17cfc28fde209a793d9c0cdde3bb3f82670d33396982988b9f5207a732908fdf1506f307ccae47a69319ee2242272e4f7ceb7a40e49a21ce6405af3ecb3381bf0668749c81fc6c2d97e68a693e3e622af52e572f4fa7b20d5c72cf5ff8016461130a46803de45029489921a48bd7688dd593e4a3e9803263ecbd8ae8570293508ebe5fabc1842cbc01ae8fabbf41820c31b7bb83a3439d4540f839ed5c23828a33d7645baa1ec32bb7aa8a786bb0997ccf6bba0a2cf6ef2157a63974d5e525a3f3f7f993ea9e82732ccc2e12c631012175d5d474bef818bdf8f27a7e563684a225dee6ca5f5ff18a89ac6c627ff0e0e4769b6fbcfc847b20960704a4b13e962333bddb966de8bcade6f6bd3915a580ddec2e1bd88fbfdb749789cdc946822212f1cbacb03ba8d3e51e48ccdae20a43bf79ca0131b830620a97877242989e78dfec1d6df5f97ca5cddece50d0cae5d6eabbc1913aa3660e0b00000000000000000000004000bc16b71cb118d93461aa2914d6e454ef05c41beab7382787ba46b68c8d8b35da9fb58b259b4447b59c667ddcac0bb2d066eb0579be84bdca8ed5d693411b7e5b21efaceddacef03daa9772f2715b5613ae0d88f8d109e36f8b8871b646d9ebbcc25d527ad3f828c92cb6597f82ed4d496a519007781be0c7cac07fc508a585f415ef81a887475286df80fb6ff9c6524d0e22d50f88ca15545bc688063b04eb8e0248aca60b9983dd5966216499ccfc0551f6e0323859ae64f55e4d496a695f8e6382aa714b92f95dcfd0b456d9ce7a24f736e4009ef64230e8f83f8283a4cc5f178d4698b94ccd8d0e0e3e2e35e1a7ac0cb3ee52013e8c2802d2f89b3f708fb53c17c3e4fbe0326ee510c4317b5f5f1eb34ca8441c23755acfc469909b16fba134de01d484c1b380622d37"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37de6c8a68769c38, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1m29.931370136s ago: executing program 6 (id=1805): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000001e00431b000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0002000000000000"], 0x20}}, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000080)="ff020400020000010000000000000000000000c4", 0x14) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r3}, 0x38) socket$kcm(0x2, 0xa, 0x2) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000000000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000028f05d7360056a8ee85cf06748f60a9f3ebeed7c"], 0x20}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r5, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r4) 1m28.030370799s ago: executing program 6 (id=1808): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r1) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0d0128bd7000fbdbdf253100000005003500060000000500b275dcc8000045003300000000000500330005000001"], 0x34}, 0x1, 0x0, 0x0, 0x200040c1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=ANY=[@ANYBLOB="900000001000370400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8b0404000000fc00700012800b00010067656e657665000060000280050004000100000014000700000000000000000000000800000000010800010002000000050009000100000005000c00010000000500080000000000050003003f00000005000d"], 0x90}}, 0x0) recvmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000d00)=""/45, 0x2d}, {&(0x7f0000000600)=""/216, 0xd8}, {&(0x7f0000000180)=""/146, 0x92}, {&(0x7f00000003c0)=""/214, 0xd6}, {&(0x7f0000003ac0)=""/4119, 0x1017}, {&(0x7f0000000700)=""/245, 0xf5}, {&(0x7f0000000800)=""/173, 0xad}, {&(0x7f0000000d80)=""/241, 0xf1}], 0x8}, 0x2020) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000023c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@ipv4_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x1, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x3, 0x8, 0x1, 0xc, 0x8}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = accept4(r4, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000847fff)='\x00', 0x1, 0x0, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="1d100000120091ef"], 0xfe33) 1m27.227392311s ago: executing program 6 (id=1814): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xb, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe5ff, 0x0, 0x0, 0x0, 0x8001}, [@printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m27.112230144s ago: executing program 6 (id=1816): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002dc0)=ANY=[@ANYRES16, @ANYBLOB="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"], 0x128}, 0x40c0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x89f0, &(0x7f0000000900)={'syz_tun\x00', @remote}) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.freeze\x00', 0x0, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000001600)={'hsr0\x00', 0x8}) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$IP_VS_SO_SET_STOPDAEMON(r8, 0x0, 0x48c, 0x0, 0x0) tee(r10, 0xffffffffffffffff, 0x661b, 0x6) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='pmap_register\x00', r10, 0x0, 0x1}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ppoll(&(0x7f0000000040)=[{r6, 0xe264}], 0x1, 0x0, &(0x7f0000000080)={[0x8000000000000001]}, 0x8) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r14, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r13, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r16, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYRES8=r7, @ANYRES64=r3, @ANYRES64=r12, @ANYRES8=r10], 0x128}, 0x0) recvmsg(r15, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) 1m12.034122695s ago: executing program 34 (id=1816): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002dc0)=ANY=[@ANYRES16, @ANYBLOB="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"], 0x128}, 0x40c0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x89f0, &(0x7f0000000900)={'syz_tun\x00', @remote}) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.freeze\x00', 0x0, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000001600)={'hsr0\x00', 0x8}) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$IP_VS_SO_SET_STOPDAEMON(r8, 0x0, 0x48c, 0x0, 0x0) tee(r10, 0xffffffffffffffff, 0x661b, 0x6) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='pmap_register\x00', r10, 0x0, 0x1}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ppoll(&(0x7f0000000040)=[{r6, 0xe264}], 0x1, 0x0, &(0x7f0000000080)={[0x8000000000000001]}, 0x8) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r14, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r13, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r16, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYRES8=r7, @ANYRES64=r3, @ANYRES64=r12, @ANYRES8=r10], 0x128}, 0x0) recvmsg(r15, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) 38.423491135s ago: executing program 0 (id=2413): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@allocspi={0x1dc, 0x16, 0x1, 0x0, 0x0, {{{@in6=@loopback, @in=@private=0xa010101}, {@in=@dev, 0x0, 0x6c}, @in6=@mcast2, {}, {0xff7f000000000000}}, 0x0, 0x7fff}, [@sa={0xe4, 0x6, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4e20, 0x1, 0x4e20, 0x8, 0xa, 0xa0, 0xe0, 0x3c, 0x0, 0xee00}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d3}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, {0x0, 0x4, 0x2, 0x1, 0xd, 0x80000000, 0x4, 0xffff}, {0x7, 0x2, 0xa65, 0x3}, {0x5, 0x3, 0x2}, 0x70bd26, 0x0, 0x2, 0x2, 0x1, 0x30}}]}, 0x1dc}}, 0x0) 38.317078693s ago: executing program 0 (id=2416): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x9, &(0x7f0000000600)=[{0x20, 0x0, 0x8, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff032}, {0x6, 0x0, 0x0, 0x8000000}, {0x6, 0x0, 0x9}, {0x2, 0x4, 0x40, 0x3}, {0x0, 0x7, 0x8c, 0x1}, {0x7, 0xff, 0x7, 0x63}, {0xff, 0x1, 0x1, 0x1}, {0xfff0, 0x6, 0x6, 0x8}]}, 0x10) (async) sendmmsg$inet(r0, &(0x7f00000005c0)=[{{0x0, 0x543, &(0x7f0000000280)=[{&(0x7f00000000c0)="a214df15", 0x33fe0}], 0x1}}], 0x1, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x8002}, 0x2048090) r4 = socket$inet(0x2, 0x1, 0x0) shutdown(r4, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="200000000a1403090000000000000000080001"], 0x20}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="002adc5dda47360b8a444aa096423d190fe7a4a68e8e6c3c9becc6875a955b626a59d023daa1b781974052f65bad8a965e928433bdb5453e935876f70edef3ba4e9be8f093d7374471604e4705fe40f2fdc922c60dfba665c0e19f93b743e0bdf867342449318e3c845f875044cf8e3068369a6c12bb8c381d34ccf1400a56b9844e5550b410722592be4a", @ANYRES16=r7, @ANYBLOB="010000000000000000001c0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000005e000b0000000000"], 0x3c}}, 0x20000800) (async) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x16, 0x0, &(0x7f0000002300)) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000005060101000000000000000909000378f84bb131000092f62e50310600000096d67c89becc19000005001400000000000900020073797a300000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x24008004}, 0x890) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) (async, rerun: 64) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFULNL_MSG_CONFIG(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000001040168b800000000000000000004000500010001"], 0x1c}}, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r11}, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r12 = socket(0x840000000002, 0x3, 0xff) connect$inet(r12, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) (async) sendmmsg$inet(r12, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) (async) close(r10) (async) recvmmsg(r4, &(0x7f00000066c0), 0xa0d, 0xf0, 0x0) 38.058044539s ago: executing program 0 (id=2419): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001890e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}}, 0x0) 37.891504068s ago: executing program 0 (id=2421): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000c80)={{{@in=@remote, @in6=@loopback, 0x0, 0x3, 0x4e20, 0x0, 0xa, 0x10, 0x20, 0x1d, 0x0, 0xee01}, {0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x3}, 0x3, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@local, 0x4, 0x32}, 0x0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2, 0xf7ffff7f}, 0x1c) 37.727508587s ago: executing program 0 (id=2424): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newsa={0x138, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in6=@private1}, {@in=@dev, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x0, 0x0, 0x1c000000}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 37.601478912s ago: executing program 0 (id=2427): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}], 0x8) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44}, [@IFLA_IFNAME={0x14, 0x3, 'sit0\x00'}, @IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x200080d0}, 0x4) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='xprt_reserve\x00', r4, 0x0, 0x1}, 0x18) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 28.775993618s ago: executing program 1 (id=2549): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) getsockopt$MRT(r0, 0x0, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r6, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x110, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x80ffffff, 0xffffffff, 0x7}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2d8) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r10, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[], 0x1c}}, 0x880) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) (async) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000a80)={0x0, @in6={{0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}}, &(0x7f00000001c0)=0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000b40)={r12, @in={{0x2, 0x4e22, @multicast1}}, 0x2, 0x8, 0x80000000, 0x7, 0x87, 0xd, 0x3}, &(0x7f0000000300)=0x9c) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r8, 0x0, 0x2}, 0x18) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)) (async) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x38, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0xfffffffc}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 26.618874092s ago: executing program 1 (id=2555): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x8012, r0, 0x22b14000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) r1 = socket$inet(0x2, 0x3, 0x2) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000504c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000c080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = socket$igmp(0x2, 0x3, 0x2) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) (async) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @loopback, @local}, 0xc) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = socket$inet6(0x10, 0x2, 0xfffffffa) sendmsg(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00090008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c553", 0x40}], 0x1}, 0x4040044) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) close(r1) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010080f5823c3a99af0cde000000", @ANYRES32=r9], 0x20}}, 0x20008040) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) close(0x3) (async) r10 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r11 = socket$inet(0x2b, 0x2, 0x3) setsockopt$IP_VS_SO_SET_TIMEOUT(r11, 0x0, 0x48a, &(0x7f0000000040)={0xc, 0xfffffffc, 0xffffffff}, 0xc) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x18}}, 0x0) 26.28360305s ago: executing program 1 (id=2562): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, &(0x7f00000000c0)="43d91eec3a0be9775079f651a1f2ea880c92e2b443517d1ed91471c06a5c678c0fb9048c96e83e3f9098581a6a2072bfe1f778207d3f0df4620092038ca8133cc1b4cc75bfa0db149e3dda149627fd2ce092e061daf0f98ee24a1c9e4eede7", &(0x7f0000000140)=""/74, 0x4}, 0x20) socket$nl_route(0x10, 0x3, 0x0) socket$qrtr(0x2a, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000040)={0x84}, 0x8) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r1, 0x58}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r3, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x8d0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) r4 = socket(0x23, 0x5, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r7, &(0x7f00000001c0)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x100, 0x1}, 0xe) close(r7) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000340)={r5, r5, 0x8, 0x1, &(0x7f0000000400)="e6", 0x9, 0x1, 0x7c0, 0x58, 0x8b, 0x2, 0x7, 'syz1\x00'}) listen(r4, 0x0) connect$pppl2tp(r4, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="1800000076000d0b00400000000000000300000000000000d8187d1d34d214abe609c69b7a3451bd49710d4ade8f112d16f509f49167038afe42ec13fb6ec6e9d262264d23166dfdb3678046821fb2db7007f6eb4f4217b56fe7c84b34e9bfb0660664beb78becb4eeb420e5b6ada9613eec89be3b7a6271e1b7de1c8140ffe0bd31"], 0x18}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 26.07144041s ago: executing program 1 (id=2565): socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611228000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 25.815703871s ago: executing program 1 (id=2569): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004a00), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r4, @ANYBLOB="0c009900000000000000000005005300010000001400040077"], 0x60}}, 0xa00) 25.698710366s ago: executing program 1 (id=2571): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000140)={@dev, 0x0}, &(0x7f0000000180)=0x14) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r1, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0xd, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e000000850000000700000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="0000090000980500000000000800", 0x0, 0x7fffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f00000009c0)={0x270, r5, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x168, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_MASK={0x69, 0x5, "c18093fe33e4f55bde0b510f88fa0efbbc53bd09b64f845cf0c7573aed29830bb39f6ef6444e751ef0c3676fe6c63924c7ae01e187ef34e23f99dfd41d491ec073ac163cb079cfd40ca9dd700d11011620c08cfd8f762e7316aca278f46acdd3c473c9ee91"}, @ETHTOOL_A_BITSET_VALUE={0x87, 0x4, "11c7b3130edcf8745b3745560400b0b8941e1258d456eca2d57c86312707786ecbbd567583bfbb5d49eabf6b7b968d3dbeac866904bbc4f887c7c6b170a691293216e1caafd710c6f6e88e275b594ddd44434d3484e275ee3d8e77256c1e5473295488ea050c092ea67457c5581e8e1d4914297a8cf48b50f01e0f60a90911d71ebbd3"}, @ETHTOOL_A_BITSET_BITS={0x68, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8b4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'filter\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[.\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0xb4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xb0, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'mangle\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'mangle\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '-#(!~^$/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x40000}, 0x810) r6 = epoll_create(0x400) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000500)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000000105000d0000000000000002000000240002801400018008000100e000000108000200ca0000010c0002800500010000000000"], 0x38}}, 0x0) write$cgroup_int(r8, &(0x7f00000000c0)=0x4, 0x12) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r10, 0x0, 0xb9b}, 0x18) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)=ANY=[@ANYBLOB="1c0000002c0001000000000000000000040000800800188002ac0f"], 0x1c}], 0x1}, 0x0) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) setsockopt$ARPT_SO_SET_REPLACE(r12, 0x0, 0x60, &(0x7f0000000540)={'filter\x00', 0x7, 0x4, 0x418, 0x110, 0x110, 0x0, 0x330, 0x330, 0x330, 0x4, &(0x7f0000000080), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={0xac, 0x14, 0x14, 0x27}, @rand_addr=0x64010101, 0x2, 0xfffffffe}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x18}, 0x4}}}, {{@arp={@rand_addr=0x64010100, @multicast1, 0x0, 0x0, 0x4, 0x8, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x9, 0x37, 0x1, 0xc, 0x3ff, 0x1, 'wlan1\x00', 'ip6gretap0\x00', {0xff}, {}, 0x0, 0x200}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x6, 0x7fffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) 22.592897549s ago: executing program 35 (id=2427): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}], 0x8) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44}, [@IFLA_IFNAME={0x14, 0x3, 'sit0\x00'}, @IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x200080d0}, 0x4) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='xprt_reserve\x00', r4, 0x0, 0x1}, 0x18) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 14.80102801s ago: executing program 8 (id=2680): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0}, 0x0) 14.670136428s ago: executing program 8 (id=2683): bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000050000006912100000005de4d5bb71e7981b000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 14.562050268s ago: executing program 8 (id=2685): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$inet6_dccp(0xa, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)=@generic={0x0, 0xffffffffffffffff, 0x2000000}, 0x18) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x400}, 0x8094) r2 = socket$inet(0x2, 0x4000000805, 0x0) listen(r2, 0x5) sendmmsg(r2, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000008400000005"], 0x18}}], 0x2, 0x844) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = getpid() ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000340)=r4) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@enum={0x8}]}, {0x0, [0x30, 0x5f, 0x2e, 0x30, 0x5f, 0x71, 0x30, 0x61]}}, 0x0, 0x2e, 0x0, 0x1, 0x1, 0x0, @void, @value}, 0x28) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r6], 0x90}}, 0x0) 14.353948182s ago: executing program 8 (id=2688): socket$packet(0x11, 0x3, 0x300) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x2, @loopback}, 0x10) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @local}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000b00000007000000890b040a0101027f00000100000000001c000000000300000000000008"], 0x40}, 0x20000000) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000140)}, {&(0x7f0000000540)="0b8b61a9d3983220d21a6c51b2595f671ffd4f674d81bec0e74d44fc1f87c6699a37d7dc912a573f5160648d2dc6dcb9b7fadbfa5f6d0b77afb8e72fc808ca522704d3a40c10a4ec42cef49e0f14cfed658cd906fbfbd5662ad2d46f866d5822", 0x60}, {&(0x7f0000000700)="ecb0cf337e24fac56e2538eeef46cfc55416975a2b339dc2fd50692d3a8701efab83f5d5522b4d66e05b95861dbd39ec103f21789acad70354be14337dee47726ee004957151164ff869fd080c8aba3cbbb98dc6833516bd27cea00e2bcf832865128a661ee2d8bb45952d584728fc7b3d9031f3fca7780d3345a6386a1380b311cbf7dcfcc6f0cc62cef4971d77e32d4df628932e98b716b22833c4f753ae66f24ad52ad704929d72860c28223013a4e9e1f1d0457b2ced", 0xb8}, {&(0x7f0000000340)="88b1b408f4505cceda1a52bd9275c1cee323958beab018ed3fcfbda5a40856fff0e5775f3964edba0dffc9d6d5781f0cd36e643553f83c877d4abcf0197bdc9e0420107e5ce648500ee9d4e1d6f9b70f882178e1d16aedb5ac18916125c173da0679e525", 0x64}, {&(0x7f0000000880)="f3800fa39c041d1b847639be7e710c9d84b36d726fd1c0c270e96d7301800d1474a8eb421e917e4356d41fe994c2f77cbe4d1c995b1457fe265375b93d0921e88a50b1ecd43d26e80ac566f640c663150d78beb087b3b94a4abfe1f4595f787d80ddb07bd31da39d13", 0x69}], 0x5}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)}], 0x1}}], 0x2, 0x7c9ce320e12db95) socket$nl_route(0x10, 0x3, 0x0) 14.038695009s ago: executing program 8 (id=2691): socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x18}}}}}, 0x36) socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt(0xffffffffffffffff, 0xff, 0x9, &(0x7f00000002c0)=""/42, &(0x7f0000000300)=0x2a) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x48400) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000640)="50eab642bf632c5cde2c2827b6b0f95a7e02e4c01968105ea31a5397f228b4aeb94841e6689f", 0x26}], 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe47) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 13.777384553s ago: executing program 8 (id=2695): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}], 0x1c) shutdown(r1, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000085000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_request\x00', r4, 0x0, 0x5}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000240)=[{}, {}], 0x2, 0x2, &(0x7f00000002c0)={[0x10000]}, 0x8) 12.263036196s ago: executing program 3 (id=2709): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000050000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 12.127472866s ago: executing program 3 (id=2711): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r0, 0x0, 0xc, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a2", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 12.101912731s ago: executing program 3 (id=2713): r0 = socket$kcm(0x10, 0x2, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000), 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000080)={r2, 0xfffffffffffffffb, 0x7, 0xc5c}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0xd, 0x10, &(0x7f0000000440)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffc0}]}, &(0x7f0000000100)='GPL\x00', 0x6, 0xfe, &(0x7f0000000580)=""/254, 0x0, 0x2f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x6c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x5c, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz0\x00'}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz1\x00'}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz1\x00'}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xc4}}, 0x0) socket$kcm(0x10, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r7, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r7, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/237, 0xed, 0x0, 0x0}, &(0x7f0000000340)=0x40) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00', 0x0, 0x18}, 0x18) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 10.627591755s ago: executing program 36 (id=2571): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000140)={@dev, 0x0}, &(0x7f0000000180)=0x14) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r1, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0xd, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e000000850000000700000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="0000090000980500000000000800", 0x0, 0x7fffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f00000009c0)={0x270, r5, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x168, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_MASK={0x69, 0x5, "c18093fe33e4f55bde0b510f88fa0efbbc53bd09b64f845cf0c7573aed29830bb39f6ef6444e751ef0c3676fe6c63924c7ae01e187ef34e23f99dfd41d491ec073ac163cb079cfd40ca9dd700d11011620c08cfd8f762e7316aca278f46acdd3c473c9ee91"}, @ETHTOOL_A_BITSET_VALUE={0x87, 0x4, "11c7b3130edcf8745b3745560400b0b8941e1258d456eca2d57c86312707786ecbbd567583bfbb5d49eabf6b7b968d3dbeac866904bbc4f887c7c6b170a691293216e1caafd710c6f6e88e275b594ddd44434d3484e275ee3d8e77256c1e5473295488ea050c092ea67457c5581e8e1d4914297a8cf48b50f01e0f60a90911d71ebbd3"}, @ETHTOOL_A_BITSET_BITS={0x68, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8b4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'filter\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[.\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0xb4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xb0, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'mangle\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'mangle\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '-#(!~^$/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x40000}, 0x810) r6 = epoll_create(0x400) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000500)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000000105000d0000000000000002000000240002801400018008000100e000000108000200ca0000010c0002800500010000000000"], 0x38}}, 0x0) write$cgroup_int(r8, &(0x7f00000000c0)=0x4, 0x12) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r10, 0x0, 0xb9b}, 0x18) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)=ANY=[@ANYBLOB="1c0000002c0001000000000000000000040000800800188002ac0f"], 0x1c}], 0x1}, 0x0) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) setsockopt$ARPT_SO_SET_REPLACE(r12, 0x0, 0x60, &(0x7f0000000540)={'filter\x00', 0x7, 0x4, 0x418, 0x110, 0x110, 0x0, 0x330, 0x330, 0x330, 0x4, &(0x7f0000000080), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={0xac, 0x14, 0x14, 0x27}, @rand_addr=0x64010101, 0x2, 0xfffffffe}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x18}, 0x4}}}, {{@arp={@rand_addr=0x64010100, @multicast1, 0x0, 0x0, 0x4, 0x8, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x9, 0x37, 0x1, 0xc, 0x3ff, 0x1, 'wlan1\x00', 'ip6gretap0\x00', {0xff}, {}, 0x0, 0x200}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x6, 0x7fffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) 4.551809539s ago: executing program 7 (id=2756): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket(0x2, 0x80805, 0x0) pipe(&(0x7f0000000280)) socket(0x23, 0x80805, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x300000000000000}, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x7, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) socket$nl_route(0x10, 0x3, 0x0) 3.564317607s ago: executing program 7 (id=2761): socket$igmp6(0xa, 0x3, 0x2) socket(0x23, 0xa, 0x4) socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600a0100002c2b0000000000000000000000000000000000fe8000000000000000000000000000aa3a0202"], 0x0) 3.372463976s ago: executing program 7 (id=2763): r0 = socket$netlink(0x10, 0x3, 0x4) socket$inet6(0xa, 0x3, 0x7) (async) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab00070000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000000224e0000", 0x58}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) r1 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="6112a000000000006113620000000000bf2000000000000007000000080000003d0301000000000095000000000000006916750000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f3d2401000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9755ba08508460b603daf5a7d1dbdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a6538b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c51231422bb8fab4d4d897db2c544c0ec50b8eac8c63d2b1cd06a39702bd547f5ebaa6954f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ffa78b02af242f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564b8f8a621483fb2a5ff221e0d831d64759d17b8c59d0f2b06e7f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d545741fbbbea3e47b1750f272980087b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x9, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffff8}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r2}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_MODULUS={0x8}, @NFTA_HASH_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd3}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx2\x00'}, 0x58) (async) r6 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="f25b8dae6b54a364edf6fe2ee3cff7f8fe602358fec998f72ea305518b8351d7", 0x20}, {&(0x7f0000000380)="eae8caf9bd036773a5bbc4eeb20262a28184c77f6fda93f78db2bf341bb0a6d01b", 0x21}], 0x2}, 0x4000804) 3.220661069s ago: executing program 7 (id=2765): unshare(0x32030c00) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x200000010, &(0x7f0000000000)=0x6, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000000b00)=[{{&(0x7f0000000540)=@abs, 0x6e, &(0x7f0000000840)=[{&(0x7f00000006c0)=""/218, 0xda}, {&(0x7f00000005c0)=""/105, 0x69}, {&(0x7f0000000640)=""/48, 0x30}, {&(0x7f00000007c0)=""/115, 0x73}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/41, 0x29}], 0x6, &(0x7f0000000b80)}}, {{&(0x7f00000009c0)=@abs, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000a40)=""/153, 0x99}], 0x1, &(0x7f00000003c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}], 0x2, 0x2001, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f0000000240)=@getqdisc={0x3c, 0x26, 0x10, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xd, 0x4}, {0x0, 0xfff3}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}}, 0x800) sendto$unix(r1, &(0x7f0000000240)="001494fa7a", 0x5, 0x4040081, 0x0, 0x0) recvfrom$unix(r2, 0x0, 0x0, 0x10102, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x9, 0x1, 0x100) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x400448e3, &(0x7f0000000100)={0x0, 0x4000, '\x00', 0x2}) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f00000001c0)=0x220, 0x4) r8 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r8, &(0x7f0000001600)={&(0x7f0000000680)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @multicast1}}}], 0x20}, 0x8000) close(r8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="58000000100001040000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010027656e65766500001400028008000100"], 0x58}}, 0x2000000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1600000000000000080000000000010000200000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000000000d3f43ffd77638b5e50340280a8d2ff784c2b3429b7be2e815b90f3cb59df5890ec7efeb195742f6db9f0138f916c60d7db5f523a2f93a189a426ec1b9f5ef40ccb5ec40b2e296e4c0ddbe19ebd046d4a6e23d036751885bdccc6b6af4cd040f0e736ff", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r9, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.089020023s ago: executing program 5 (id=2766): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) epoll_create1(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) ppoll(&(0x7f0000000080)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x54, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}]}, 0x54}, 0x1, 0x0, 0x900}, 0x4004) 2.977647135s ago: executing program 3 (id=2719): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x11) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r3, 0x1) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f00000002c0)=0x400, 0x4) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000000), 0x4) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300050d000000000000000000000002000800080000005b0000000000000005000600000000000a0000005ce3809400000000fe8000000000000000000000000000bb00000000000000000200010000000000ff00090000000000020013000000000009a07000ff340000"], 0x68}, 0x1, 0x7}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r5) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r7, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f0000000300)=0xc) syz_open_procfs$namespace(r8, &(0x7f0000000240)='ns/time\x00') sendmsg$rds(r7, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r7, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) connect$can_bcm(r6, &(0x7f0000000000), 0x10) readv(r6, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/108, 0x6c}, {0x0}], 0x2) sendmsg$can_bcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=0x2710], 0x80}}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) 2.143366889s ago: executing program 5 (id=2767): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000050000000060a010400000000000000000100000008000b400000000034000480300001800e000100627974656f726465720000001c0002800800024000000000080005400000000009000140000000001400000011"], 0xc4}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="34020000", @ANYRES16=r2, @ANYBLOB="050000000000000000003f00000008000300", @ANYRES32=r3, @ANYBLOB="6c005e80080003000300000008000200a609000008000600c0dc0000080009000500000008000700980100002000"], 0x234}}, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r4 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfff1, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x0, 0x40, 0x4, 0x7, 0x7, 0x7, 0x8, 0x3}}]}}]}, 0x44}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x4801, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000380)=""/8, 0x8, 0x60, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) 2.124250144s ago: executing program 3 (id=2768): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x9, 0x4, 0x4, 0x7ff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x21000, 0x0, @void, @value, @void, @value}, 0x48) 2.038644025s ago: executing program 9 (id=2725): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa0028000}) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000000)={'nr0\x00', {0x2, 0x4e22, @rand_addr=0x64010100}}) 1.931291332s ago: executing program 3 (id=2769): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a300000000008004100736977001400330076697274067769666930000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000854}, 0x0) unshare(0x22020400) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001100)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000280)={r1, 0x1}, 0x15a7c26725d2644) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r2, 0x10c, 0x9, &(0x7f0000000040), &(0x7f0000001880)=0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r4, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="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", 0x129}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x11, 0x29, 0x2}}, @ip_tos_u8={{0x11}}], 0x48}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf6990f5518c98c0d0bf7c8a961657cb74751a0e703359d661c038f7217816e0b51118c1135de47e97a8f869025217bd6823e36b9aadcd827943508817fa5e08d76289e7a860256f49987dfe59e829f94ac9d9c2ee1d744c38c1b68b53b666f59cbff38b109fb09b33e7f85e04278e7e2cca241affb61674f910cfe43214aa3d4fdff7796af404006e6dc5cef6a1be"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000600850000009e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 1.910544688s ago: executing program 9 (id=2770): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x12}, 0x0) 1.906848435s ago: executing program 7 (id=2771): socket$igmp6(0xa, 0x3, 0x2) socket(0x23, 0xa, 0x4) socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600a0100002c2b0000000000000000000000000000000000fe8000000000000000000000000000aa3a0202"], 0x0) 1.746904259s ago: executing program 9 (id=2772): sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x1000c000) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r4 = socket(0x10, 0x3, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r7 = socket$unix(0x1, 0x5, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x40) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xdc}, @TCA_ROUTE4_IIF={0x8, 0x4, r8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f00000000c0)={r0, r0, 0x206, 0x0, 0x0, 0x2, 0x72, 0x8, 0x3, 0x801, 0x0, 0x8, 'syz1\x00'}) (async) r9 = socket$kcm(0x2, 0x1, 0x84) (async) r10 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) write$tun(r10, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) (async) setsockopt$sock_attach_bpf(r9, 0x84, 0x9, 0x0, 0x0) (async) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000280)={0x2, &(0x7f0000001240)=[{@none}, {@none}]}) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061105900000000007b012e00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 32) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r11, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000600)={0x210, r12, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x4c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x81}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_SEC_DEVKEY={0x194, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x50, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}]}, @NL802154_DEVKEY_ATTR_ID={0x74, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x800}, @NL802154_DEVKEY_ATTR_ID={0x70, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}]}, @NL802154_DEVKEY_ATTR_ID={0x40, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1fffe0}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.722904366s ago: executing program 7 (id=2773): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x14) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x800000010d, 0x2, &(0x7f0000000080)="922b22c06d1ff7de1259c2df5ae341dbac30653a130057a4cddc7c7e153f6c8fa49896613e0dbe5e8183be97ea9486821fa12ed926f35a8b42e55079654448773f4dff0000000000000000", 0x13) getsockopt$inet_int(r3, 0x10d, 0x2, &(0x7f0000000200), &(0x7f0000000280)=0x1c) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000005142106"], 0x20}, 0x1, 0x0, 0x0, 0x40c5}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r4, 0x210c}, {r8, 0x4468}, {r4}], 0x3, 0x0, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r9) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SIOCSIFHWADDR(r9, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @random="ffffff8d00"}) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x14, r10, 0x1}, 0x14}}, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x2004811}, 0x40000) syz_init_net_socket$rose(0xb, 0x5, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_TBF={0x30}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000800)=""/182, &(0x7f0000000400)=0xb6) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0xe000000}, 0x0) 1.234737231s ago: executing program 5 (id=2774): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x10, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9d39, 0x0, 0x0, 0x0, 0x10000}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfff8, 0x4000}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfff0, 0x1000000}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x66, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.099443278s ago: executing program 5 (id=2775): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket(0x2, 0x80805, 0x0) pipe(&(0x7f0000000280)) socket(0x23, 0x80805, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x300}, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x7, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) socket$nl_route(0x10, 0x3, 0x0) 172.379675ms ago: executing program 5 (id=2776): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map, 0xffffffffffffffff, 0x13, 0x2000, 0xffffffffffffffff, @value}, 0x20) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f00000003c0)=0x401, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000c0005006c000000000000000c0002000000000000000000040007800c00080000000000000000000800010000007fff4400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r4, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYBLOB="06"], 0x90}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, 0x0, 0x0) 0s ago: executing program 5 (id=2777): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x0, 0xfffff, 0x0, @void, @value}, 0x28) kernel console output (not intermixed with test programs): ode 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 242.313894][T10918] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 242.323434][T10918] 41359 total pagecache pages [ 242.328120][T10918] 0 pages in swap cache [ 242.335254][T10918] Free swap = 124996kB [ 242.339426][T10918] Total swap = 124996kB [ 242.344687][T10918] 2097051 pages RAM [ 242.348519][T10918] 0 pages HighMem/MovableOnly [ 242.353450][T10918] 427485 pages reserved [ 242.357611][T10918] 0 pages cma reserved [ 242.383676][T10928] bond_slave_0: entered promiscuous mode [ 242.389454][T10928] bond_slave_1: entered promiscuous mode [ 242.395213][T10928] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 242.421672][T10928] macsec1: entered promiscuous mode [ 242.427191][T10928] bond0: entered promiscuous mode [ 242.444788][T10928] macsec1: entered allmulticast mode [ 242.450402][T10928] bond0: entered allmulticast mode [ 242.464250][T10928] bond_slave_0: entered allmulticast mode [ 242.470122][T10928] bond_slave_1: entered allmulticast mode [ 242.481804][T10928] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 242.496351][T10928] bond0: left allmulticast mode [ 242.501442][T10928] bond_slave_0: left allmulticast mode [ 242.507065][T10928] bond_slave_1: left allmulticast mode [ 242.512817][T10928] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 242.519893][T10928] bond0: left promiscuous mode [ 242.525377][T10928] bond_slave_0: left promiscuous mode [ 242.530877][T10928] bond_slave_1: left promiscuous mode [ 242.536447][T10928] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 242.569075][T10940] netlink: 'syz.5.1682': attribute type 4 has an invalid length. [ 242.577657][T10959] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1684'. [ 242.590597][T10945] tipc: Enabling of bearer <Þ|i³:æ> rejected, media not registered [ 242.607248][T10952] netlink: 4093 bytes leftover after parsing attributes in process `syz.1.1681'. [ 242.622058][T10941] netlink: 4093 bytes leftover after parsing attributes in process `syz.1.1681'. [ 243.016840][T10974] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.051403][T10977] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1692'. [ 243.061750][T10980] netlink: 'syz.3.1689': attribute type 11 has an invalid length. [ 243.089114][T10981] netlink: 'syz.6.1693': attribute type 10 has an invalid length. [ 243.143684][T10981] veth0_vlan: left promiscuous mode [ 243.174697][T10981] veth0_vlan: entered promiscuous mode [ 243.185407][T10981] team0: Device veth0_vlan failed to register rx_handler [ 243.273998][T10984] netlink: 'syz.1.1694': attribute type 4 has an invalid length. [ 243.690364][T11007] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 243.848901][T11012] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1704'. [ 243.862504][T11012] syz_tun: entered promiscuous mode [ 243.872490][T11012] erspan0: entered promiscuous mode [ 243.878632][T11012] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 243.888805][T11012] Cannot create hsr debugfs directory [ 244.113916][T11025] vlan2: entered promiscuous mode [ 244.118992][T11025] vlan0: entered promiscuous mode [ 244.136448][T11025] vlan0: left promiscuous mode [ 244.717464][T11041] netlink: 'syz.3.1715': attribute type 4 has an invalid length. [ 245.258610][T11058] __nla_validate_parse: 3 callbacks suppressed [ 245.258627][T11058] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1721'. [ 245.274251][T11058] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1721'. [ 245.298587][T11058] team0: entered promiscuous mode [ 245.314618][T11058] team_slave_0: entered promiscuous mode [ 245.320538][T11058] team_slave_1: entered promiscuous mode [ 245.332625][T11058] bridge0: entered promiscuous mode [ 245.338477][T11058] debugfs: Directory 'hsr2' with parent 'hsr' already present! [ 245.346370][T11058] Cannot create hsr debugfs directory [ 245.429208][T11067] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 245.452964][T11067] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 245.463457][T11067] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 245.550186][T11073] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 245.768762][T11078] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1728'. [ 246.182495][T11088] netlink: 'syz.1.1732': attribute type 4 has an invalid length. [ 246.797897][T11121] FAULT_INJECTION: forcing a failure. [ 246.797897][T11121] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.829014][T11121] CPU: 1 UID: 0 PID: 11121 Comm: syz.6.1742 Not tainted 6.13.0-syzkaller-09685-gc2933b2befe2 #0 [ 246.829041][T11121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 246.829051][T11121] Call Trace: [ 246.829057][T11121] [ 246.829064][T11121] dump_stack_lvl+0x241/0x360 [ 246.829090][T11121] ? __pfx_dump_stack_lvl+0x10/0x10 [ 246.829108][T11121] ? __pfx__printk+0x10/0x10 [ 246.829140][T11121] ? __pfx_lock_release+0x10/0x10 [ 246.829170][T11121] should_fail_ex+0x40a/0x550 [ 246.829193][T11121] _copy_from_user+0x2d/0xb0 [ 246.829211][T11121] copy_msghdr_from_user+0xae/0x680 [ 246.829231][T11121] ? __pfx___might_resched+0x10/0x10 [ 246.829253][T11121] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 246.829278][T11121] ? __sys_sendmmsg+0x392/0x720 [ 246.829301][T11121] ? __might_fault+0xaa/0x120 [ 246.829325][T11121] __sys_sendmmsg+0x32b/0x720 [ 246.829359][T11121] ? __pfx___sys_sendmmsg+0x10/0x10 [ 246.829394][T11121] ? __pfx_lock_release+0x10/0x10 [ 246.829412][T11121] ? kstrtouint_from_user+0x128/0x190 [ 246.829455][T11121] ? ksys_write+0x22a/0x2b0 [ 246.829476][T11121] ? __pfx_lock_release+0x10/0x10 [ 246.829502][T11121] ? sb_end_write+0xe9/0x1c0 [ 246.829520][T11121] ? vfs_write+0x7fa/0xd10 [ 246.829540][T11121] ? __mutex_unlock_slowpath+0x227/0x800 [ 246.829585][T11121] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 246.829608][T11121] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 246.829629][T11121] ? do_syscall_64+0x100/0x230 [ 246.829651][T11121] __x64_sys_sendmmsg+0xa0/0xb0 [ 246.829675][T11121] do_syscall_64+0xf3/0x230 [ 246.829695][T11121] ? clear_bhb_loop+0x35/0x90 [ 246.829719][T11121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.829739][T11121] RIP: 0033:0x7f76df98cda9 [ 246.829754][T11121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.829768][T11121] RSP: 002b:00007f76e0858038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 246.829787][T11121] RAX: ffffffffffffffda RBX: 00007f76dfba5fa0 RCX: 00007f76df98cda9 [ 246.829799][T11121] RDX: 0000000000000299 RSI: 0000000020003dc0 RDI: 0000000000000006 [ 246.829809][T11121] RBP: 00007f76e0858090 R08: 0000000000000000 R09: 0000000000000000 [ 246.829820][T11121] R10: 000000000000effd R11: 0000000000000246 R12: 0000000000000002 [ 246.829830][T11121] R13: 0000000000000000 R14: 00007f76dfba5fa0 R15: 00007ffc21205888 [ 246.829856][T11121] [ 247.287575][T11132] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1748'. [ 247.291329][T11130] lo speed is unknown, defaulting to 1000 [ 247.611156][T11141] FAULT_INJECTION: forcing a failure. [ 247.611156][T11141] name failslab, interval 1, probability 0, space 0, times 0 [ 247.652111][T11141] CPU: 1 UID: 0 PID: 11141 Comm: syz.0.1750 Not tainted 6.13.0-syzkaller-09685-gc2933b2befe2 #0 [ 247.652137][T11141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 247.652146][T11141] Call Trace: [ 247.652153][T11141] [ 247.652160][T11141] dump_stack_lvl+0x241/0x360 [ 247.652186][T11141] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.652204][T11141] ? __pfx__printk+0x10/0x10 [ 247.652241][T11141] should_fail_ex+0x40a/0x550 [ 247.652265][T11141] should_failslab+0xac/0x100 [ 247.652290][T11141] __kmalloc_cache_noprof+0x70/0x390 [ 247.652308][T11141] ? sctp_add_bind_addr+0x89/0x3a0 [ 247.652331][T11141] sctp_add_bind_addr+0x89/0x3a0 [ 247.652352][T11141] sctp_copy_local_addr_list+0x311/0x500 [ 247.652373][T11141] ? sctp_copy_local_addr_list+0xab/0x500 [ 247.652391][T11141] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 247.652406][T11141] ? sctp_association_new+0x17c6/0x2400 [ 247.652428][T11141] ? sctp_v6_is_any+0x60/0x70 [ 247.652456][T11141] sctp_bind_addr_copy+0xad/0x3b0 [ 247.652473][T11141] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 247.652499][T11141] sctp_connect_new_asoc+0x2f3/0x6c0 [ 247.652523][T11141] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 247.652541][T11141] ? sctp_sendmsg+0xbb9/0x3520 [ 247.652567][T11141] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 247.652585][T11141] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 247.652607][T11141] sctp_sendmsg+0x219a/0x3520 [ 247.652646][T11141] ? __pfx_sctp_sendmsg+0x10/0x10 [ 247.652671][T11141] ? __pfx_aa_sk_perm+0x10/0x10 [ 247.652697][T11141] ? inet_sendmsg+0x330/0x390 [ 247.652719][T11141] __sock_sendmsg+0x1a6/0x270 [ 247.652746][T11141] __sys_sendto+0x363/0x4c0 [ 247.652774][T11141] ? __pfx___sys_sendto+0x10/0x10 [ 247.652806][T11141] ? __fget_files+0x2a/0x410 [ 247.652835][T11141] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 247.652859][T11141] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 247.652887][T11141] __x64_sys_sendto+0xde/0x100 [ 247.652912][T11141] do_syscall_64+0xf3/0x230 [ 247.652933][T11141] ? clear_bhb_loop+0x35/0x90 [ 247.652957][T11141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.652976][T11141] RIP: 0033:0x7f05d818cda9 [ 247.652992][T11141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.653005][T11141] RSP: 002b:00007f05d9034038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 247.653024][T11141] RAX: ffffffffffffffda RBX: 00007f05d83a5fa0 RCX: 00007f05d818cda9 [ 247.653035][T11141] RDX: 000000000000fd77 RSI: 0000000020000100 RDI: 0000000000000003 [ 247.653046][T11141] RBP: 00007f05d9034090 R08: 0000000020000140 R09: 000000000000001c [ 247.653064][T11141] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 247.653074][T11141] R13: 0000000000000000 R14: 00007f05d83a5fa0 R15: 00007ffcd1751e48 [ 247.653103][T11141] [ 247.995426][T11144] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1751'. [ 248.008817][T11144] vlan2: entered allmulticast mode [ 248.052022][T11144] batadv0: entered allmulticast mode [ 248.098461][T11144] batadv0: left allmulticast mode [ 248.179485][T11152] FAULT_INJECTION: forcing a failure. [ 248.179485][T11152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.207356][T11152] CPU: 0 UID: 0 PID: 11152 Comm: syz.3.1754 Not tainted 6.13.0-syzkaller-09685-gc2933b2befe2 #0 [ 248.207382][T11152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 248.207391][T11152] Call Trace: [ 248.207397][T11152] [ 248.207403][T11152] dump_stack_lvl+0x241/0x360 [ 248.207426][T11152] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.207442][T11152] ? __pfx__printk+0x10/0x10 [ 248.207459][T11152] ? btf_parse_struct_metas+0x729/0x13a0 [ 248.207480][T11152] ? __kmalloc_cache_noprof+0x243/0x390 [ 248.207503][T11152] should_fail_ex+0x40a/0x550 [ 248.207525][T11152] _copy_to_user+0x31/0xb0 [ 248.207541][T11152] finalize_log+0xed/0x250 [ 248.207560][T11152] ? __pfx_finalize_log+0x10/0x10 [ 248.207577][T11152] ? btf_check_type_tags+0x6aa/0x6b0 [ 248.207602][T11152] btf_new_fd+0x9cd/0xd30 [ 248.207628][T11152] ? __pfx_btf_new_fd+0x10/0x10 [ 248.207649][T11152] ? bpf_btf_load+0xcf/0x1a0 [ 248.207668][T11152] __sys_bpf+0x6ef/0x810 [ 248.207688][T11152] ? __pfx___sys_bpf+0x10/0x10 [ 248.207716][T11152] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 248.207739][T11152] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 248.207776][T11152] ? do_syscall_64+0x100/0x230 [ 248.207798][T11152] __x64_sys_bpf+0x7c/0x90 [ 248.207814][T11152] do_syscall_64+0xf3/0x230 [ 248.207833][T11152] ? clear_bhb_loop+0x35/0x90 [ 248.207853][T11152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.207871][T11152] RIP: 0033:0x7fc349f8cda9 [ 248.207885][T11152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.207896][T11152] RSP: 002b:00007fc347df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 248.207913][T11152] RAX: ffffffffffffffda RBX: 00007fc34a1a5fa0 RCX: 00007fc349f8cda9 [ 248.207925][T11152] RDX: 0000000000000028 RSI: 00000000200002c0 RDI: 0000000000000012 [ 248.207935][T11152] RBP: 00007fc347df6090 R08: 0000000000000000 R09: 0000000000000000 [ 248.207944][T11152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 248.207954][T11152] R13: 0000000000000001 R14: 00007fc34a1a5fa0 R15: 00007ffd94f39ba8 [ 248.207979][T11152] [ 248.282008][T11147] lo speed is unknown, defaulting to 1000 [ 248.305277][T11148] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744071562067969) [ 248.506676][T11148] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 248.659720][T11162] netlink: 900 bytes leftover after parsing attributes in process `syz.6.1758'. [ 248.835175][T11168] sctp: [Deprecated]: syz.3.1759 (pid 11168) Use of int in max_burst socket option deprecated. [ 248.835175][T11168] Use struct sctp_assoc_value instead [ 249.144107][T11181] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1765'. [ 249.171697][T11181] mac80211_hwsim hwsim18 wlan0: entered promiscuous mode [ 249.181043][T11181] macsec1: entered allmulticast mode [ 249.208160][T11181] mac80211_hwsim hwsim18 wlan0: entered allmulticast mode [ 249.234978][T11181] mac80211_hwsim hwsim18 wlan0: left allmulticast mode [ 249.242595][T11181] mac80211_hwsim hwsim18 wlan0: left promiscuous mode [ 249.376685][T11181] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1765'. [ 249.386024][T11181] netlink: 'syz.5.1765': attribute type 1 has an invalid length. [ 249.755973][T11198] sctp: [Deprecated]: syz.0.1771 (pid 11198) Use of int in max_burst socket option. [ 249.755973][T11198] Use struct sctp_assoc_value instead [ 250.225515][T11216] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1778'. [ 250.289444][T11219] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1779'. [ 250.449832][T11230] sch_tbf: peakrate 64 is lower than or equals to rate 9416279242649327955 ! [ 250.472862][T11230] macvlan2: entered promiscuous mode [ 250.478280][T11230] bond0: entered promiscuous mode [ 250.489729][T11230] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 250.501437][T11232] netlink: 'syz.1.1784': attribute type 4 has an invalid length. [ 250.621720][T11200] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 250.889701][T11251] FAULT_INJECTION: forcing a failure. [ 250.889701][T11251] name failslab, interval 1, probability 0, space 0, times 0 [ 250.903589][T11251] CPU: 0 UID: 0 PID: 11251 Comm: syz.5.1790 Not tainted 6.13.0-syzkaller-09685-gc2933b2befe2 #0 [ 250.903613][T11251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 250.903623][T11251] Call Trace: [ 250.903630][T11251] [ 250.903637][T11251] dump_stack_lvl+0x241/0x360 [ 250.903662][T11251] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.903680][T11251] ? __pfx__printk+0x10/0x10 [ 250.903706][T11251] ? __kmalloc_noprof+0xb5/0x4c0 [ 250.903724][T11251] ? __pfx___might_resched+0x10/0x10 [ 250.903749][T11251] should_fail_ex+0x40a/0x550 [ 250.903773][T11251] should_failslab+0xac/0x100 [ 250.903807][T11251] __kmalloc_noprof+0xdd/0x4c0 [ 250.903823][T11251] ? sock_kmalloc+0xd7/0x160 [ 250.903838][T11251] ? do_raw_spin_unlock+0x13c/0x8b0 [ 250.903860][T11251] sock_kmalloc+0xd7/0x160 [ 250.903879][T11251] hash_recvmsg+0x287/0x7d0 [ 250.903902][T11251] ? __pfx_hash_recvmsg+0x10/0x10 [ 250.903922][T11251] sock_recvmsg_nosec+0x18e/0x1d0 [ 250.903945][T11251] ____sys_recvmsg+0x3cd/0x480 [ 250.903971][T11251] ? __pfx_____sys_recvmsg+0x10/0x10 [ 250.903999][T11251] ? do_recvmmsg+0x44e/0xab0 [ 250.904015][T11251] ? __might_fault+0xaa/0x120 [ 250.904040][T11251] do_recvmmsg+0x426/0xab0 [ 250.904068][T11251] ? __pfx_do_recvmmsg+0x10/0x10 [ 250.904104][T11251] ? ksys_write+0x22a/0x2b0 [ 250.904124][T11251] ? __pfx_lock_release+0x10/0x10 [ 250.904151][T11251] ? sb_end_write+0xe9/0x1c0 [ 250.904169][T11251] ? vfs_write+0x7fa/0xd10 [ 250.904190][T11251] ? __mutex_unlock_slowpath+0x227/0x800 [ 250.904221][T11251] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 250.904239][T11251] ? __fget_files+0x2a/0x410 [ 250.904273][T11251] __x64_sys_recvmmsg+0x199/0x250 [ 250.904293][T11251] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 250.904312][T11251] ? do_syscall_64+0x100/0x230 [ 250.904334][T11251] ? do_syscall_64+0xb6/0x230 [ 250.904357][T11251] do_syscall_64+0xf3/0x230 [ 250.904375][T11251] ? clear_bhb_loop+0x35/0x90 [ 250.904400][T11251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.904419][T11251] RIP: 0033:0x7f1886d8cda9 [ 250.904434][T11251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.904448][T11251] RSP: 002b:00007f1887ccf038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 250.904466][T11251] RAX: ffffffffffffffda RBX: 00007f1886fa5fa0 RCX: 00007f1886d8cda9 [ 250.904478][T11251] RDX: 0000000000000600 RSI: 0000000020003700 RDI: 0000000000000004 [ 250.904488][T11251] RBP: 00007f1887ccf090 R08: 0000000000000000 R09: 0000000000000000 [ 250.904498][T11251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 250.904509][T11251] R13: 0000000000000000 R14: 00007f1886fa5fa0 R15: 00007ffc001f0268 [ 250.904535][T11251] [ 251.645511][T11272] netlink: 'syz.5.1800': attribute type 1 has an invalid length. [ 251.665037][T11272] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1800'. [ 251.786536][T11275] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1796'. [ 251.888594][T11280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.012213][T11300] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1806'. [ 253.021833][T11300] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1806'. [ 254.474486][T11288] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 254.491065][T11288] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 254.499511][T11288] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 254.653313][T11304] netlink: 'syz.3.1807': attribute type 4 has an invalid length. [ 254.681583][T11306] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1808'. [ 255.105604][T11320] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1813'. [ 255.151997][T11322] netlink: 4093 bytes leftover after parsing attributes in process `syz.6.1808'. [ 255.192197][T11314] netlink: 4093 bytes leftover after parsing attributes in process `syz.6.1808'. [ 255.223347][T11328] batadv1: entered allmulticast mode [ 255.229949][T11328] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 255.903343][T11346] bond0: entered allmulticast mode [ 255.928002][T11346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1819'. [ 255.974749][T11346] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1819'. [ 256.163794][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.229740][T11359] netlink: 'syz.5.1825': attribute type 4 has an invalid length. [ 256.332856][T11364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1828'. [ 256.682375][T11371] lo speed is unknown, defaulting to 1000 [ 257.035735][T11387] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1836'. [ 257.312770][T11398] netlink: 'syz.3.1840': attribute type 4 has an invalid length. [ 257.716496][T11407] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1843'. [ 257.851900][T11401] lo speed is unknown, defaulting to 1000 [ 258.132912][T11424] FAULT_INJECTION: forcing a failure. [ 258.132912][T11424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.161817][T11424] CPU: 1 UID: 0 PID: 11424 Comm: syz.1.1850 Not tainted 6.13.0-syzkaller-09685-gc2933b2befe2 #0 [ 258.161844][T11424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 258.161855][T11424] Call Trace: [ 258.161861][T11424] [ 258.161868][T11424] dump_stack_lvl+0x241/0x360 [ 258.161895][T11424] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.161912][T11424] ? __pfx__printk+0x10/0x10 [ 258.161937][T11424] ? __pfx_lock_release+0x10/0x10 [ 258.161968][T11424] should_fail_ex+0x40a/0x550 [ 258.161991][T11424] _copy_from_user+0x2d/0xb0 [ 258.162008][T11424] copy_msghdr_from_user+0xae/0x680 [ 258.162029][T11424] ? __pfx___might_resched+0x10/0x10 [ 258.162052][T11424] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 258.162076][T11424] ? do_recvmmsg+0x44e/0xab0 [ 258.162092][T11424] ? __might_fault+0xaa/0x120 [ 258.162117][T11424] do_recvmmsg+0x3bd/0xab0 [ 258.162144][T11424] ? __pfx_do_recvmmsg+0x10/0x10 [ 258.162181][T11424] ? ksys_write+0x22a/0x2b0 [ 258.162201][T11424] ? __pfx_lock_release+0x10/0x10 [ 258.162227][T11424] ? sb_end_write+0xe9/0x1c0 [ 258.162244][T11424] ? vfs_write+0x7fa/0xd10 [ 258.162266][T11424] ? __mutex_unlock_slowpath+0x227/0x800 [ 258.162296][T11424] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 258.162315][T11424] ? __fget_files+0x2a/0x410 [ 258.162345][T11424] __x64_sys_recvmmsg+0x199/0x250 [ 258.162365][T11424] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 258.162383][T11424] ? do_syscall_64+0x100/0x230 [ 258.162406][T11424] ? do_syscall_64+0xb6/0x230 [ 258.162427][T11424] do_syscall_64+0xf3/0x230 [ 258.162447][T11424] ? clear_bhb_loop+0x35/0x90 [ 258.162469][T11424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.162489][T11424] RIP: 0033:0x7f39abd8cda9 [ 258.162504][T11424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.162517][T11424] RSP: 002b:00007f39acc0c038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 258.162535][T11424] RAX: ffffffffffffffda RBX: 00007f39abfa5fa0 RCX: 00007f39abd8cda9 [ 258.162547][T11424] RDX: 0000000000000600 RSI: 0000000020003700 RDI: 0000000000000004 [ 258.162558][T11424] RBP: 00007f39acc0c090 R08: 0000000000000000 R09: 0000000000000000 [ 258.162568][T11424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 258.162578][T11424] R13: 0000000000000000 R14: 00007f39abfa5fa0 R15: 00007ffc51600e88 [ 258.162604][T11424] [ 258.426805][T11421] x_tables: duplicate underflow at hook 3 [ 258.841196][T11439] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1855'. [ 258.866994][T11445] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 259.089282][T11449] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1860'. [ 259.221833][T11452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.275418][T11449] syzkaller0: entered promiscuous mode [ 259.281974][T11449] syzkaller0: entered allmulticast mode [ 259.320488][T11456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1862'. [ 259.371993][T11456] syzkaller0: entered promiscuous mode [ 259.377595][T11456] syzkaller0: entered allmulticast mode [ 260.583598][T11473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.273606][T11476] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1870'. [ 261.688441][T11483] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1873'. [ 263.630667][T11481] bond_slave_0: entered promiscuous mode [ 263.636454][T11481] bond_slave_1: entered promiscuous mode [ 263.648838][T11481] macsec1: entered promiscuous mode [ 263.660785][T11481] bond0: entered promiscuous mode [ 263.666270][T11481] macsec1: entered allmulticast mode [ 263.694642][T11481] bond0: entered allmulticast mode [ 263.695550][T11500] netlink: 'syz.1.1875': attribute type 10 has an invalid length. [ 263.703334][T11481] bond_slave_0: entered allmulticast mode [ 263.730898][T11481] bond_slave_1: entered allmulticast mode [ 263.739822][T11481] bond0: left allmulticast mode [ 263.745165][T11481] bond_slave_0: left allmulticast mode [ 263.751006][T11481] bond_slave_1: left allmulticast mode [ 263.765373][T11481] bond0: left promiscuous mode [ 263.776939][T11481] bond_slave_0: left promiscuous mode [ 263.782445][T11481] bond_slave_1: left promiscuous mode [ 263.827599][T11494] tipc: Enabling of bearer rejected, failed to enable media [ 263.838354][T11500] veth0_vlan: left promiscuous mode [ 263.854668][T11500] veth0_vlan: entered promiscuous mode [ 263.863008][T11500] team0: Device veth0_vlan failed to register rx_handler [ 264.126214][T11517] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 264.138043][T11514] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1882'. [ 264.148282][T11514] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1882'. [ 264.159405][T11517] xt_HMARK: spi-set and port-set can't be combined [ 264.168630][T11511] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 264.171079][T11514] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1882'. [ 264.211751][T11514] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1882'. [ 264.277178][T11521] vlan2: entered allmulticast mode [ 264.294159][T11522] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1885'. [ 264.303302][T11521] macvlan0: entered allmulticast mode [ 264.308732][T11521] veth1_vlan: entered allmulticast mode [ 264.322303][T11521] macvlan0: left allmulticast mode [ 264.327599][T11521] veth1_vlan: left allmulticast mode [ 264.493079][T11533] rdma_rxe: rxe_newlink: failed to add lo [ 265.050095][T11554] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1893'. [ 265.103707][T11554] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1893'. [ 265.211560][T11555] rdma_rxe: rxe_newlink: failed to add lo [ 265.262780][T11558] openvswitch: netlink: IP tunnel dst address not specified [ 265.500493][T11568] netlink: 'syz.0.1899': attribute type 11 has an invalid length. [ 265.565250][T11570] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 265.574142][T11570] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 265.583045][T11570] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 265.956026][T11579] FAULT_INJECTION: forcing a failure. [ 265.956026][T11579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.000278][T11579] CPU: 0 UID: 0 PID: 11579 Comm: syz.5.1904 Not tainted 6.13.0-syzkaller-09685-gc2933b2befe2 #0 [ 266.000305][T11579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 266.000316][T11579] Call Trace: [ 266.000322][T11579] [ 266.000329][T11579] dump_stack_lvl+0x241/0x360 [ 266.000354][T11579] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.000372][T11579] ? __pfx__printk+0x10/0x10 [ 266.000398][T11579] ? __pfx_lock_release+0x10/0x10 [ 266.000427][T11579] should_fail_ex+0x40a/0x550 [ 266.000450][T11579] _copy_from_user+0x2d/0xb0 [ 266.000468][T11579] copy_msghdr_from_user+0xae/0x680 [ 266.000489][T11579] ? __pfx___might_resched+0x10/0x10 [ 266.000511][T11579] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 266.000536][T11579] ? __sys_sendmmsg+0x392/0x720 [ 266.000558][T11579] ? __might_fault+0xaa/0x120 [ 266.000584][T11579] __sys_sendmmsg+0x32b/0x720 [ 266.000618][T11579] ? __pfx___sys_sendmmsg+0x10/0x10 [ 266.000652][T11579] ? __pfx_lock_release+0x10/0x10 [ 266.000670][T11579] ? kstrtouint_from_user+0x128/0x190 [ 266.000717][T11579] ? ksys_write+0x22a/0x2b0 [ 266.000735][T11579] ? __pfx_lock_release+0x10/0x10 [ 266.000760][T11579] ? sb_end_write+0xe9/0x1c0 [ 266.000776][T11579] ? vfs_write+0x7fa/0xd10 [ 266.000796][T11579] ? __mutex_unlock_slowpath+0x227/0x800 [ 266.000839][T11579] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 266.000862][T11579] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 266.000883][T11579] ? do_syscall_64+0x100/0x230 [ 266.000906][T11579] __x64_sys_sendmmsg+0xa0/0xb0 [ 266.000931][T11579] do_syscall_64+0xf3/0x230 [ 266.000959][T11579] ? clear_bhb_loop+0x35/0x90 [ 266.000982][T11579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.001002][T11579] RIP: 0033:0x7f1886d8cda9 [ 266.001016][T11579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.001030][T11579] RSP: 002b:00007f1887ccf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 266.001047][T11579] RAX: ffffffffffffffda RBX: 00007f1886fa5fa0 RCX: 00007f1886d8cda9 [ 266.001059][T11579] RDX: 0000000000000299 RSI: 0000000020003dc0 RDI: 0000000000000006 [ 266.001068][T11579] RBP: 00007f1887ccf090 R08: 0000000000000000 R09: 0000000000000000 [ 266.001077][T11579] R10: 000000000000effd R11: 0000000000000246 R12: 0000000000000002 [ 266.001087][T11579] R13: 0000000000000000 R14: 00007f1886fa5fa0 R15: 00007ffc001f0268 [ 266.001111][T11579] [ 266.422214][T11590] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1905'. [ 266.528646][T11596] netlink: 332 bytes leftover after parsing attributes in process `syz.5.1909'. [ 266.543308][T11598] netlink: 'syz.0.1911': attribute type 10 has an invalid length. [ 266.549423][T11596] netlink: 'syz.5.1909': attribute type 3 has an invalid length. [ 266.559185][T11596] netlink: 'syz.5.1909': attribute type 3 has an invalid length. [ 266.569055][T11598] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1911'. [ 266.569599][T11594] netlink: 'syz.1.1910': attribute type 4 has an invalid length. [ 266.594591][T11596] batman_adv: batadv: cannot create tp meter kthread [ 267.088640][T11614] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1916'. [ 267.386608][T11633] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1924'. [ 267.396336][T11633] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (71) [ 267.556369][T11639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.639249][T11639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.704872][T11644] siw: device registration error -23 [ 268.067682][T11656] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1935'. [ 268.605060][T11686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1943'. [ 268.608833][T11681] lo speed is unknown, defaulting to 1000 [ 268.721180][T11686] 8021q: adding VLAN 0 to HW filter on device bond2 [ 268.839765][T11689] syzkaller1: entered promiscuous mode [ 268.845804][T11689] syzkaller1: entered allmulticast mode [ 269.670309][T11715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1954'. [ 269.767324][T11717] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.037826][T11729] netlink: 'syz.1.1960': attribute type 4 has an invalid length. [ 270.066041][T11731] bond_slave_0: entered promiscuous mode [ 270.071886][T11731] bond_slave_1: entered promiscuous mode [ 270.077554][T11731] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 270.086161][T11731] macsec1: entered promiscuous mode [ 270.091593][T11731] bond0: entered promiscuous mode [ 270.097125][T11731] macsec1: entered allmulticast mode [ 270.102689][T11731] bond0: entered allmulticast mode [ 270.107818][T11731] bond_slave_0: entered allmulticast mode [ 270.113968][T11731] bond_slave_1: entered allmulticast mode [ 270.119914][T11731] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 270.130585][T11731] bond0: left allmulticast mode [ 270.135557][T11731] bond_slave_0: left allmulticast mode [ 270.142597][T11731] bond_slave_1: left allmulticast mode [ 270.148080][T11731] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 270.156440][T11731] bond0: left promiscuous mode [ 270.162321][T11731] bond_slave_0: left promiscuous mode [ 270.167762][T11731] bond_slave_1: left promiscuous mode [ 270.173246][T11731] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 270.487114][T11738] netlink: 'syz.1.1965': attribute type 1 has an invalid length. [ 270.812296][T11753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1971'. [ 270.850620][T11753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1971'. [ 271.029153][ T5841] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 271.038971][ T5841] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 271.058012][ T5841] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 271.068784][ T5841] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 271.081432][ T5841] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 271.091290][ T5841] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 271.192269][T11771] netlink: 'syz.3.1976': attribute type 10 has an invalid length. [ 271.211847][T11765] lo speed is unknown, defaulting to 1000 [ 271.229937][T11771] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.269118][T11771] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.276580][T11771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.305360][T11771] team0: Device bridge0 failed to register rx_handler [ 271.320183][T11771] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.440023][T11782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.469955][T11785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1982'. [ 271.534351][T11785] vlan2: entered allmulticast mode [ 271.539652][T11785] gretap0: entered allmulticast mode [ 271.547179][T11785] gretap0: left allmulticast mode [ 271.584288][T11787] netlink: 'syz.0.1983': attribute type 10 has an invalid length. [ 271.600469][T11787] veth0_vlan: left promiscuous mode [ 271.615287][T11787] veth0_vlan: entered promiscuous mode [ 271.643558][T11787] team0: Device veth0_vlan failed to register rx_handler [ 271.757002][T11765] chnl_net:caif_netlink_parms(): no params data found [ 271.834241][T11797] netlink: 1296 bytes leftover after parsing attributes in process `syz.1.1986'. [ 271.854010][T11797] openvswitch: netlink: Flow key attr not present in new flow. [ 271.920493][T11765] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.945338][T11803] FAULT_INJECTION: forcing a failure. [ 271.945338][T11803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.958835][T11803] CPU: 1 UID: 0 PID: 11803 Comm: syz.1.1988 Not tainted 6.13.0-syzkaller-09685-gc2933b2befe2 #0 [ 271.958858][T11803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 271.958867][T11803] Call Trace: [ 271.958873][T11803] [ 271.958880][T11803] dump_stack_lvl+0x241/0x360 [ 271.958904][T11803] ? __pfx_dump_stack_lvl+0x10/0x10 [ 271.958920][T11803] ? __pfx__printk+0x10/0x10 [ 271.958949][T11765] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.958949][T11803] ? snprintf+0xda/0x120 [ 271.958968][T11803] should_fail_ex+0x40a/0x550 [ 271.958988][T11803] _copy_to_user+0x31/0xb0 [ 271.959005][T11803] simple_read_from_buffer+0xca/0x150 [ 271.959033][T11803] proc_fail_nth_read+0x1e9/0x250 [ 271.959060][T11803] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 271.959085][T11803] ? rw_verify_area+0x243/0x630 [ 271.959103][T11803] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 271.959127][T11803] vfs_read+0x1f8/0xb40 [ 271.959148][T11803] ? fdget_pos+0x254/0x320 [ 271.959167][T11803] ? __pfx___mutex_lock+0x10/0x10 [ 271.959186][T11803] ? __pfx_vfs_read+0x10/0x10 [ 271.959209][T11803] ? __fget_files+0x2a/0x410 [ 271.959227][T11803] ? __fget_files+0x395/0x410 [ 271.959243][T11803] ? __fget_files+0x2a/0x410 [ 271.959268][T11803] ksys_read+0x18f/0x2b0 [ 271.959289][T11803] ? __pfx_ksys_read+0x10/0x10 [ 271.959310][T11803] ? do_syscall_64+0x100/0x230 [ 271.959331][T11803] ? do_syscall_64+0xb6/0x230 [ 271.959353][T11803] do_syscall_64+0xf3/0x230 [ 271.959372][T11803] ? clear_bhb_loop+0x35/0x90 [ 271.959395][T11803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.959415][T11803] RIP: 0033:0x7f39abd8b7bc [ 271.959430][T11803] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 271.959442][T11803] RSP: 002b:00007f39acc0c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 271.959460][T11803] RAX: ffffffffffffffda RBX: 00007f39abfa5fa0 RCX: 00007f39abd8b7bc [ 271.959472][T11803] RDX: 000000000000000f RSI: 00007f39acc0c0a0 RDI: 0000000000000003 [ 271.959482][T11803] RBP: 00007f39acc0c090 R08: 0000000000000000 R09: 0000000000000000 [ 271.959491][T11803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 271.959501][T11803] R13: 0000000000000001 R14: 00007f39abfa5fa0 R15: 00007ffc51600e88 [ 271.959527][T11803] [ 272.218965][T11765] bridge_slave_0: entered allmulticast mode [ 272.237688][T11765] bridge_slave_0: entered promiscuous mode [ 272.263164][T11813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1993'. [ 272.311216][T11765] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.318342][T11765] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.351159][T11765] bridge_slave_1: entered allmulticast mode [ 272.375497][T11765] bridge_slave_1: entered promiscuous mode [ 272.442236][T11765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.476867][T11765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.514809][T11826] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1998'. [ 272.620336][T11828] vlan4: entered promiscuous mode [ 272.629555][T11832] netlink: 'syz.5.2001': attribute type 11 has an invalid length. [ 272.636921][T11828] vlan0: entered promiscuous mode [ 272.665743][T11828] vlan0: left promiscuous mode [ 272.779199][T11765] team0: Port device team_slave_0 added [ 272.817036][T11765] team0: Port device team_slave_1 added [ 272.950180][T11840] tipc: Started in network mode [ 272.955759][T11840] tipc: Node identity , cluster identity 4711 [ 272.972743][T11847] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2008'. [ 272.986675][T11840] tipc: Failed to set node id, please configure manually [ 272.995759][T11840] tipc: Enabling of bearer rejected, failed to enable media [ 273.062679][T11765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.069709][T11765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.116560][T11849] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2008'. [ 273.126912][ T5832] Bluetooth: hci7: command tx timeout [ 273.137291][T11765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.207719][T11765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.225447][T11765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.276100][T11765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.395425][T11765] hsr_slave_0: entered promiscuous mode [ 273.411716][T11765] hsr_slave_1: entered promiscuous mode [ 273.418834][T11765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.450857][T11765] Cannot create hsr debugfs directory [ 273.709711][T11879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2018'. [ 273.741154][T11879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2018'. [ 273.756736][T11882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2020'. [ 273.820270][T11765] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 273.874873][T11765] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 273.904582][T11765] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 273.916805][T11890] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2022'. [ 273.930566][T11765] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 273.954557][T11890] vlan2: entered promiscuous mode [ 273.961378][T11890] vlan0: entered promiscuous mode [ 273.979934][T11890] vlan0: left promiscuous mode [ 274.132881][T11900] netem: unknown loss type 0 [ 274.138043][T11900] netem: change failed [ 274.187913][T11903] tipc: Started in network mode [ 274.201338][T11903] tipc: Node identity ac141412, cluster identity 4711 [ 274.215979][T11903] tipc: Enabling of bearer rejected, failed to enable media [ 274.298842][T11765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.347383][T11765] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.395648][ T7956] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.402842][ T7956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.445070][ T7961] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.452454][ T7961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.480116][T11914] netlink: 'syz.0.2031': attribute type 10 has an invalid length. [ 274.490016][T11913] netlink: 'syz.3.2032': attribute type 1 has an invalid length. [ 274.511490][T11914] veth0_vlan: left promiscuous mode [ 274.532012][T11914] veth0_vlan: entered promiscuous mode [ 274.539338][T11914] team0: Device veth0_vlan failed to register rx_handler [ 274.713101][T11918] lo speed is unknown, defaulting to 1000 [ 275.072802][T11765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.201279][ T5832] Bluetooth: hci7: command tx timeout [ 275.542504][T11765] veth0_vlan: entered promiscuous mode [ 275.565333][T11765] veth1_vlan: entered promiscuous mode [ 275.673851][T11765] veth0_macvtap: entered promiscuous mode [ 275.703765][T11765] veth1_macvtap: entered promiscuous mode [ 275.753235][T11959] netlink: 'syz.5.2047': attribute type 5 has an invalid length. [ 275.801930][T11765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.839075][T11765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.849974][T11765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.860985][T11765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.871417][T11765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.890805][T11765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.903979][T11765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.973889][T11966] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.981402][T11966] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.284536][T11966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.299811][T11966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.406402][T11966] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.416080][T11966] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.425765][T11966] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.435095][T11966] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.478508][T11966] batadv1: left allmulticast mode [ 276.488703][T11765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.516218][T11765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.535073][T11765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.546025][T11765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.557670][T11765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.642042][T11918] lo speed is unknown, defaulting to 1000 [ 276.663097][T11765] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.686116][T11974] __nla_validate_parse: 3 callbacks suppressed [ 276.686132][T11974] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2051'. [ 276.710958][T11765] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.719685][T11765] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.740429][T11765] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.749914][T11974] nbd: nbd0 already in use [ 276.765711][T11974] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2051'. [ 276.911093][T10664] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.940828][T10664] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.017146][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.034264][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.281679][ T5832] Bluetooth: hci7: command tx timeout [ 277.436399][T12001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2059'. [ 277.505557][T12001] vlan4: entered allmulticast mode [ 277.531007][T12001] gretap0: entered allmulticast mode [ 277.571970][T12003] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2061'. [ 277.575402][T12001] gretap0: left allmulticast mode [ 278.216486][T12013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2065'. [ 278.248611][T12008] FAULT_INJECTION: forcing a failure. [ 278.248611][T12008] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 278.321657][T12008] CPU: 0 UID: 0 PID: 12008 Comm: syz.7.2063 Not tainted 6.13.0-syzkaller-09685-gc2933b2befe2 #0 [ 278.321684][T12008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 278.321693][T12008] Call Trace: [ 278.321700][T12008] [ 278.321708][T12008] dump_stack_lvl+0x241/0x360 [ 278.321736][T12008] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.321753][T12008] ? __pfx__printk+0x10/0x10 [ 278.321789][T12008] should_fail_ex+0x40a/0x550 [ 278.321813][T12008] prepare_alloc_pages+0x1da/0x5b0 [ 278.321844][T12008] __alloc_frozen_pages_noprof+0x16f/0x710 [ 278.321868][T12008] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 278.321891][T12008] ? validate_chain+0x11e/0x5920 [ 278.321915][T12008] ? __pfx_validate_chain+0x10/0x10 [ 278.321935][T12008] alloc_pages_mpol+0x311/0x660 [ 278.321959][T12008] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 278.321980][T12008] ? __pfx_validate_chain+0x10/0x10 [ 278.322000][T12008] alloc_pages_noprof+0x121/0x190 [ 278.322021][T12008] pte_alloc_one+0x24/0x160 [ 278.322044][T12008] __pte_alloc+0x79/0x220 [ 278.322070][T12008] ? __pfx___pte_alloc+0x10/0x10 [ 278.322096][T12008] ? __lock_acquire+0x1397/0x2100 [ 278.322123][T12008] __handle_mm_fault+0x5ea0/0x70f0 [ 278.322139][T12008] ? mark_lock+0x9a/0x360 [ 278.322184][T12008] ? __pfx___handle_mm_fault+0x10/0x10 [ 278.322224][T12008] ? mt_find+0x2a9/0x920 [ 278.322245][T12008] ? __pfx_lock_release+0x10/0x10 [ 278.322278][T12008] ? mt_find+0x2a9/0x920 [ 278.322299][T12008] ? mt_find+0x6c8/0x920 [ 278.322319][T12008] ? mt_find+0x2a9/0x920 [ 278.322363][T12008] ? __pfx___might_resched+0x10/0x10 [ 278.322386][T12008] handle_mm_fault+0x3e5/0x8d0 [ 278.322416][T12008] __get_user_pages+0x1a92/0x4140 [ 278.322477][T12008] ? __pfx___get_user_pages+0x10/0x10 [ 278.322500][T12008] ? __pfx_down_read_killable+0x10/0x10 [ 278.322525][T12008] ? __lock_acquire+0x1397/0x2100 [ 278.322561][T12008] __gup_longterm_locked+0xe64/0x17f0 [ 278.322595][T12008] ? mark_lock+0x9a/0x360 [ 278.322628][T12008] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 278.322648][T12008] ? __pfx___gup_longterm_locked+0x10/0x10 [ 278.322669][T12008] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 278.322689][T12008] ? sanity_check_pinned_pages+0x11b9/0x12a0 [ 278.322713][T12008] ? gup_fast_fallback+0x207e/0x29c0 [ 278.322735][T12008] gup_fast_fallback+0x2266/0x29c0 [ 278.322789][T12008] ? __pfx_gup_fast_fallback+0x10/0x10 [ 278.322818][T12008] ? __asan_memset+0x23/0x50 [ 278.322838][T12008] ? sha256_transform_blocks+0x2e24/0x2e80 [ 278.322879][T12008] ? is_valid_gup_args+0x124/0x200 [ 278.322902][T12008] pin_user_pages_fast+0xcc/0x160 [ 278.322926][T12008] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 278.322958][T12008] iov_iter_extract_pages+0x3bb/0x5c0 [ 278.322984][T12008] extract_iter_to_sg+0xea6/0x2650 [ 278.323021][T12008] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 278.323044][T12008] ? unpin_user_page+0xe0/0x1e0 [ 278.323061][T12008] ? __pfx_unpin_user_page+0x10/0x10 [ 278.323078][T12008] ? __local_bh_enable_ip+0x168/0x200 [ 278.323099][T12008] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 278.323116][T12008] ? do_raw_spin_unlock+0x13c/0x8b0 [ 278.323139][T12008] ? __asan_memset+0x23/0x50 [ 278.323161][T12008] hash_sendmsg+0x513/0x1110 [ 278.323203][T12008] ? __pfx_hash_sendmsg+0x10/0x10 [ 278.323218][T12008] __sock_sendmsg+0x221/0x270 [ 278.323241][T12008] ____sys_sendmsg+0x52a/0x7e0 [ 278.323272][T12008] ? __pfx_____sys_sendmsg+0x10/0x10 [ 278.323292][T12008] ? __fget_files+0x2a/0x410 [ 278.323313][T12008] ? __fget_files+0x2a/0x410 [ 278.323340][T12008] __sys_sendmsg+0x269/0x350 [ 278.323369][T12008] ? __pfx___sys_sendmsg+0x10/0x10 [ 278.323405][T12008] ? do_sys_openat2+0x17a/0x1d0 [ 278.323453][T12008] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 278.323475][T12008] ? do_syscall_64+0x100/0x230 [ 278.323498][T12008] ? do_syscall_64+0xb6/0x230 [ 278.323520][T12008] do_syscall_64+0xf3/0x230 [ 278.323539][T12008] ? clear_bhb_loop+0x35/0x90 [ 278.323563][T12008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.323582][T12008] RIP: 0033:0x7ff673d8cda9 [ 278.323598][T12008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.323619][T12008] RSP: 002b:00007ff674bb0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.323638][T12008] RAX: ffffffffffffffda RBX: 00007ff673fa5fa0 RCX: 00007ff673d8cda9 [ 278.323650][T12008] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000004 [ 278.323661][T12008] RBP: 00007ff674bb0090 R08: 0000000000000000 R09: 0000000000000000 [ 278.323671][T12008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 278.323681][T12008] R13: 0000000000000000 R14: 00007ff673fa5fa0 R15: 00007fffd39e8b48 [ 278.323710][T12008] [ 278.415301][T12013] vlan4: entered allmulticast mode [ 278.558997][T12025] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2067'. [ 278.999874][T12036] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2071'. [ 279.017465][T12036] netlink: 'syz.1.2071': attribute type 6 has an invalid length. [ 279.041659][T12036] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2071'. [ 279.192858][T12043] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2075'. [ 279.361098][ T5832] Bluetooth: hci7: command tx timeout [ 279.568784][T12065] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2083'. [ 280.406947][T12096] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 280.634676][T12106] netlink: 'syz.5.2098': attribute type 4 has an invalid length. [ 281.167301][T12117] 8021q: adding VLAN 0 to HW filter on device bond3 [ 281.369824][T12141] vlan4: entered allmulticast mode [ 281.384045][T12141] bond0: entered allmulticast mode [ 281.685131][T12161] syz_tun: entered promiscuous mode [ 281.691647][T12161] erspan0: entered promiscuous mode [ 281.697878][T12161] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 281.707609][T12161] Cannot create hsr debugfs directory [ 281.713209][T12161] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network [ 281.742368][T12163] __nla_validate_parse: 5 callbacks suppressed [ 281.742386][T12163] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2117'. [ 281.793444][T12165] netlink: 'syz.0.2119': attribute type 4 has an invalid length. [ 282.045551][T12170] netlink: 260 bytes leftover after parsing attributes in process `syz.5.2121'. [ 282.054920][T12170] netlink: 260 bytes leftover after parsing attributes in process `syz.5.2121'. [ 282.675640][T12212] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2136'. [ 282.746515][T12215] netlink: 'syz.7.2138': attribute type 4 has an invalid length. [ 283.002340][T12225] netlink: 4093 bytes leftover after parsing attributes in process `syz.3.2136'. [ 283.071360][T12218] netlink: 4093 bytes leftover after parsing attributes in process `syz.3.2136'. [ 283.243199][T12240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2144'. [ 283.253307][T12242] lo speed is unknown, defaulting to 1000 [ 283.271196][T12240] vlan4: entered promiscuous mode [ 283.764992][T12262] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2151'. [ 283.774324][T12262] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2151'. [ 284.208941][T12280] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2160'. [ 285.066536][T12296] lo speed is unknown, defaulting to 1000 [ 285.283026][T12299] 8021q: adding VLAN 0 to HW filter on device bond3 [ 285.972729][T12327] openvswitch: netlink: IP tunnel dst address not specified [ 286.044032][T12333] netlink: 'syz.3.2176': attribute type 11 has an invalid length. [ 286.327248][T12342] bond_slave_0: entered promiscuous mode [ 286.333023][T12342] bond_slave_1: entered promiscuous mode [ 286.371054][T12342] macsec1: entered promiscuous mode [ 286.376569][T12342] bond0: entered promiscuous mode [ 286.397317][T12342] macsec1: entered allmulticast mode [ 286.406972][T12342] bond0: entered allmulticast mode [ 286.425010][T12342] bond_slave_0: entered allmulticast mode [ 286.440924][T12342] bond_slave_1: entered allmulticast mode [ 286.462834][T12342] bond0: left allmulticast mode [ 286.478508][T12342] bond_slave_0: left allmulticast mode [ 286.492705][T12342] bond_slave_1: left allmulticast mode [ 286.498302][T12342] bond0: left promiscuous mode [ 286.511354][T12342] bond_slave_0: left promiscuous mode [ 286.516856][T12342] bond_slave_1: left promiscuous mode [ 286.867806][T12356] __nla_validate_parse: 5 callbacks suppressed [ 286.867823][T12356] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2186'. [ 287.035423][T12365] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.167217][T12367] lo speed is unknown, defaulting to 1000 [ 287.491883][T12381] tipc: Enabling of bearer rejected, failed to enable media [ 287.531329][T12379] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2194'. [ 287.558775][T12379] syzkaller1: entered promiscuous mode [ 287.564383][T12379] syzkaller1: entered allmulticast mode [ 287.591300][T12383] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2196'. [ 288.406772][T12397] bond1 (unregistering): Released all slaves [ 288.499081][T12370] lo speed is unknown, defaulting to 1000 [ 288.521353][T12370] lo speed is unknown, defaulting to 1000 [ 288.537688][T12370] lo speed is unknown, defaulting to 1000 [ 288.554766][T12370] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 288.579256][T12370] lo speed is unknown, defaulting to 1000 [ 288.592551][T12370] lo speed is unknown, defaulting to 1000 [ 288.599455][T12370] lo speed is unknown, defaulting to 1000 [ 288.606524][T12370] lo speed is unknown, defaulting to 1000 [ 288.642721][T12370] lo speed is unknown, defaulting to 1000 [ 288.660629][T12370] lo speed is unknown, defaulting to 1000 [ 288.683170][T12370] lo speed is unknown, defaulting to 1000 [ 288.705823][T12370] lo speed is unknown, defaulting to 1000 [ 288.719097][T12418] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2207'. [ 288.743948][T12370] lo speed is unknown, defaulting to 1000 [ 288.768802][T12418] vlan2: entered allmulticast mode [ 289.012509][T12428] netlink: 'syz.5.2209': attribute type 4 has an invalid length. [ 289.052977][T12426] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2210'. [ 289.106008][T12434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2211'. [ 289.119853][T12434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2211'. [ 289.515600][T12447] ipt_REJECT: TCP_RESET invalid for non-tcp [ 289.587393][T12447] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2216'. [ 289.699282][T12454] tipc: Started in network mode [ 289.721150][T12454] tipc: Node identity , cluster identity 4711 [ 289.741095][T12454] tipc: Failed to set node id, please configure manually [ 289.763820][T12454] tipc: Enabling of bearer rejected, failed to enable media [ 289.852613][T12456] netlink: 'syz.3.2220': attribute type 10 has an invalid length. [ 289.856081][T12462] netlink: 'syz.5.2222': attribute type 10 has an invalid length. [ 289.891468][T12462] veth0_vlan: left promiscuous mode [ 289.920616][T12462] veth0_vlan: entered promiscuous mode [ 289.931894][T12457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2220'. [ 289.950414][T12462] team0: Device veth0_vlan failed to register rx_handler [ 289.970643][T12459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2220'. [ 289.999466][T12459] bridge_slave_1: left allmulticast mode [ 290.027236][T12459] bridge_slave_1: left promiscuous mode [ 290.039974][T12459] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.126004][T12459] bridge0 (unregistering): left promiscuous mode [ 290.232492][T12465] lo speed is unknown, defaulting to 1000 [ 290.381611][T12480] FAULT_INJECTION: forcing a failure. [ 290.381611][T12480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.471946][T12480] CPU: 1 UID: 0 PID: 12480 Comm: syz.0.2227 Not tainted 6.13.0-syzkaller-09685-gc2933b2befe2 #0 [ 290.471975][T12480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 290.471985][T12480] Call Trace: [ 290.471991][T12480] [ 290.471999][T12480] dump_stack_lvl+0x241/0x360 [ 290.472026][T12480] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.472043][T12480] ? __pfx__printk+0x10/0x10 [ 290.472067][T12480] ? ip_mroute_setsockopt+0x15b/0x1190 [ 290.472096][T12480] should_fail_ex+0x40a/0x550 [ 290.472118][T12480] _copy_from_user+0x2d/0xb0 [ 290.472136][T12480] copy_from_sockptr+0x62/0xa0 [ 290.472156][T12480] ip_mroute_setsockopt+0x77a/0x1190 [ 290.472187][T12480] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 290.472227][T12480] do_ip_setsockopt+0x129f/0x3cd0 [ 290.472255][T12480] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 290.472278][T12480] ? aa_sk_perm+0x96d/0xab0 [ 290.472305][T12480] ? __pfx_aa_sk_perm+0x10/0x10 [ 290.472332][T12480] ip_setsockopt+0x63/0x100 [ 290.472351][T12480] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 290.472371][T12480] do_sock_setsockopt+0x3af/0x720 [ 290.472400][T12480] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 290.472426][T12480] ? __fget_files+0x395/0x410 [ 290.472443][T12480] ? __fget_files+0x2a/0x410 [ 290.472469][T12480] __x64_sys_setsockopt+0x1ee/0x280 [ 290.472498][T12480] do_syscall_64+0xf3/0x230 [ 290.472518][T12480] ? clear_bhb_loop+0x35/0x90 [ 290.472541][T12480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.472561][T12480] RIP: 0033:0x7f05d818cda9 [ 290.472576][T12480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.472589][T12480] RSP: 002b:00007f05d9034038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 290.472607][T12480] RAX: ffffffffffffffda RBX: 00007f05d83a5fa0 RCX: 00007f05d818cda9 [ 290.472619][T12480] RDX: 00000000000000d4 RSI: 0000000000000000 RDI: 0000000000000004 [ 290.472629][T12480] RBP: 00007f05d9034090 R08: 0000000000000004 R09: 0000000000000000 [ 290.472645][T12480] R10: 0000000020000140 R11: 0000000000000246 R12: 0000000000000001 [ 290.472655][T12480] R13: 0000000000000000 R14: 00007f05d83a5fa0 R15: 00007ffcd1751e48 [ 290.472683][T12480] [ 290.736876][T12465] lo speed is unknown, defaulting to 1000 [ 290.855656][T12497] FAULT_INJECTION: forcing a failure. [ 290.855656][T12497] name failslab, interval 1, probability 0, space 0, times 0 [ 290.871256][T12497] CPU: 1 UID: 0 PID: 12497 Comm: syz.3.2236 Not tainted 6.13.0-syzkaller-09685-gc2933b2befe2 #0 [ 290.871281][T12497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 290.871291][T12497] Call Trace: [ 290.871297][T12497] [ 290.871303][T12497] dump_stack_lvl+0x241/0x360 [ 290.871327][T12497] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.871344][T12497] ? __pfx__printk+0x10/0x10 [ 290.871397][T12497] should_fail_ex+0x40a/0x550 [ 290.871421][T12497] should_failslab+0xac/0x100 [ 290.871447][T12497] __kmalloc_cache_noprof+0x70/0x390 [ 290.871463][T12497] ? sctp_add_bind_addr+0x89/0x3a0 [ 290.871484][T12497] sctp_add_bind_addr+0x89/0x3a0 [ 290.871503][T12497] sctp_copy_local_addr_list+0x311/0x500 [ 290.871522][T12497] ? sctp_copy_local_addr_list+0xab/0x500 [ 290.871539][T12497] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 290.871554][T12497] ? sctp_association_new+0x17c6/0x2400 [ 290.871574][T12497] ? sctp_v6_is_any+0x60/0x70 [ 290.871600][T12497] sctp_bind_addr_copy+0xad/0x3b0 [ 290.871617][T12497] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 290.871641][T12497] sctp_connect_new_asoc+0x2f3/0x6c0 [ 290.871664][T12497] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 290.871681][T12497] ? sctp_sendmsg+0xbb9/0x3520 [ 290.871706][T12497] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 290.871723][T12497] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 290.871745][T12497] sctp_sendmsg+0x219a/0x3520 [ 290.871782][T12497] ? __pfx_sctp_sendmsg+0x10/0x10 [ 290.871808][T12497] ? __pfx_aa_sk_perm+0x10/0x10 [ 290.871833][T12497] ? inet_sendmsg+0x330/0x390 [ 290.871855][T12497] __sock_sendmsg+0x1a6/0x270 [ 290.871877][T12497] __sys_sendto+0x363/0x4c0 [ 290.871905][T12497] ? __pfx___sys_sendto+0x10/0x10 [ 290.871939][T12497] ? __fget_files+0x2a/0x410 [ 290.871966][T12497] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 290.871990][T12497] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 290.872018][T12497] __x64_sys_sendto+0xde/0x100 [ 290.872042][T12497] do_syscall_64+0xf3/0x230 [ 290.872063][T12497] ? clear_bhb_loop+0x35/0x90 [ 290.872086][T12497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.872106][T12497] RIP: 0033:0x7fc349f8cda9 [ 290.872121][T12497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.872134][T12497] RSP: 002b:00007fc347df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 290.872153][T12497] RAX: ffffffffffffffda RBX: 00007fc34a1a5fa0 RCX: 00007fc349f8cda9 [ 290.872166][T12497] RDX: 000000000000fd77 RSI: 0000000020000100 RDI: 0000000000000003 [ 290.872175][T12497] RBP: 00007fc347df6090 R08: 0000000020000140 R09: 000000000000001c [ 290.872185][T12497] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 290.872195][T12497] R13: 0000000000000000 R14: 00007fc34a1a5fa0 R15: 00007ffd94f39ba8 [ 290.872220][T12497] [ 291.517571][T12514] netlink: 'syz.3.2240': attribute type 1 has an invalid length. [ 291.729216][T12518] openvswitch: netlink: IP tunnel dst address not specified [ 291.834140][T12520] netlink: 'syz.7.2244': attribute type 11 has an invalid length. [ 291.858391][T12522] FAULT_INJECTION: forcing a failure. [ 291.858391][T12522] name failslab, interval 1, probability 0, space 0, times 0 [ 291.902164][T12522] CPU: 1 UID: 0 PID: 12522 Comm: syz.0.2245 Not tainted 6.13.0-syzkaller-09685-gc2933b2befe2 #0 [ 291.902196][T12522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 291.902205][T12522] Call Trace: [ 291.902213][T12522] [ 291.902220][T12522] dump_stack_lvl+0x241/0x360 [ 291.902245][T12522] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.902264][T12522] ? __pfx__printk+0x10/0x10 [ 291.902289][T12522] ? __kmalloc_cache_noprof+0x48/0x390 [ 291.902308][T12522] ? __pfx___might_resched+0x10/0x10 [ 291.902332][T12522] should_fail_ex+0x40a/0x550 [ 291.902356][T12522] should_failslab+0xac/0x100 [ 291.902381][T12522] __kmalloc_cache_noprof+0x70/0x390 [ 291.902398][T12522] ? genl_start+0x1cb/0x6d0 [ 291.902422][T12522] genl_start+0x1cb/0x6d0 [ 291.902449][T12522] __netlink_dump_start+0x45c/0x790 [ 291.902489][T12522] genl_rcv_msg+0x88c/0xec0 [ 291.902517][T12522] ? __pfx_genl_rcv_msg+0x10/0x10 [ 291.902542][T12522] ? __pfx_genl_start+0x10/0x10 [ 291.902558][T12522] ? __pfx_genl_dumpit+0x10/0x10 [ 291.902575][T12522] ? __pfx_genl_done+0x10/0x10 [ 291.902611][T12522] ? __pfx_lock_acquire+0x10/0x10 [ 291.902632][T12522] ? __pfx_smc_nl_get_sys_info+0x10/0x10 [ 291.902654][T12522] ? __pfx___might_resched+0x10/0x10 [ 291.902684][T12522] netlink_rcv_skb+0x1e3/0x430 [ 291.902707][T12522] ? __pfx_genl_rcv_msg+0x10/0x10 [ 291.902728][T12522] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 291.902764][T12522] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 291.902802][T12522] genl_rcv+0x28/0x40 [ 291.902818][T12522] netlink_unicast+0x7f6/0x990 [ 291.902848][T12522] ? __pfx_netlink_unicast+0x10/0x10 [ 291.902867][T12522] ? __virt_addr_valid+0x45f/0x530 [ 291.902888][T12522] ? __phys_addr_symbol+0x2f/0x70 [ 291.902905][T12522] ? __check_object_size+0x47a/0x730 [ 291.902934][T12522] netlink_sendmsg+0x8e4/0xcb0 [ 291.902969][T12522] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.902996][T12522] ? aa_sock_msg_perm+0x91/0x160 [ 291.903023][T12522] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.903043][T12522] __sock_sendmsg+0x221/0x270 [ 291.903067][T12522] ____sys_sendmsg+0x52a/0x7e0 [ 291.903099][T12522] ? __pfx_____sys_sendmsg+0x10/0x10 [ 291.903119][T12522] ? __fget_files+0x2a/0x410 [ 291.903140][T12522] ? __fget_files+0x2a/0x410 [ 291.903167][T12522] __sys_sendmsg+0x269/0x350 [ 291.903195][T12522] ? __pfx___sys_sendmsg+0x10/0x10 [ 291.903232][T12522] ? do_sys_openat2+0x17a/0x1d0 [ 291.903280][T12522] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 291.903303][T12522] ? do_syscall_64+0x100/0x230 [ 291.903326][T12522] ? do_syscall_64+0xb6/0x230 [ 291.903349][T12522] do_syscall_64+0xf3/0x230 [ 291.903368][T12522] ? clear_bhb_loop+0x35/0x90 [ 291.903392][T12522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.903412][T12522] RIP: 0033:0x7f05d818cda9 [ 291.903428][T12522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.903441][T12522] RSP: 002b:00007f05d9034038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 291.903460][T12522] RAX: ffffffffffffffda RBX: 00007f05d83a5fa0 RCX: 00007f05d818cda9 [ 291.903472][T12522] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000005 [ 291.903488][T12522] RBP: 00007f05d9034090 R08: 0000000000000000 R09: 0000000000000000 [ 291.903498][T12522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.903508][T12522] R13: 0000000000000000 R14: 00007f05d83a5fa0 R15: 00007ffcd1751e48 [ 291.903538][T12522] [ 292.520889][T12533] bridge0: port 1(syz_tun) entered blocking state [ 292.528420][T12536] __nla_validate_parse: 4 callbacks suppressed [ 292.528436][T12536] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2250'. [ 292.576382][T12533] bridge0: port 1(syz_tun) entered disabled state [ 292.583105][T12533] syz_tun: entered allmulticast mode [ 292.589654][T12533] syz_tun: entered promiscuous mode [ 292.856978][T12544] bond_slave_0: entered promiscuous mode [ 292.862754][T12544] bond_slave_1: entered promiscuous mode [ 292.868485][T12544] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 292.886912][T12544] macsec1: entered promiscuous mode [ 292.897155][T12544] bond0: entered promiscuous mode [ 292.909113][T12544] macsec1: entered allmulticast mode [ 292.926986][T12551] openvswitch: netlink: Flow actions attr not present in new flow. [ 292.927401][T12544] bond0: entered allmulticast mode [ 292.962337][T12544] bond_slave_0: entered allmulticast mode [ 292.974998][T12544] bond_slave_1: entered allmulticast mode [ 292.985594][T12544] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 292.999713][T12544] bond0: left allmulticast mode [ 293.011794][T12544] bond_slave_0: left allmulticast mode [ 293.017580][T12544] bond_slave_1: left allmulticast mode [ 293.025392][T12544] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 293.032850][T12544] bond0: left promiscuous mode [ 293.041586][T12544] bond_slave_0: left promiscuous mode [ 293.047115][T12544] bond_slave_1: left promiscuous mode [ 293.052597][T12544] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 293.091498][T12550] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.100302][T12550] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.110425][T12550] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.119658][T12550] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.371450][T12569] netlink: 6084 bytes leftover after parsing attributes in process `syz.7.2261'. [ 293.381115][T12569] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2261'. [ 293.391809][T12569] netlink: 6084 bytes leftover after parsing attributes in process `syz.7.2261'. [ 293.783719][T12584] FAULT_INJECTION: forcing a failure. [ 293.783719][T12584] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.806206][T12584] CPU: 0 UID: 0 PID: 12584 Comm: syz.5.2268 Not tainted 6.13.0-syzkaller-09685-gc2933b2befe2 #0 [ 293.806232][T12584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 293.806242][T12584] Call Trace: [ 293.806248][T12584] [ 293.806255][T12584] dump_stack_lvl+0x241/0x360 [ 293.806279][T12584] ? __pfx_dump_stack_lvl+0x10/0x10 [ 293.806296][T12584] ? __pfx__printk+0x10/0x10 [ 293.806327][T12584] ? __pfx_lock_release+0x10/0x10 [ 293.806355][T12584] should_fail_ex+0x40a/0x550 [ 293.806378][T12584] _copy_from_iter+0x1e9/0x1c20 [ 293.806400][T12584] ? __virt_addr_valid+0x183/0x530 [ 293.806432][T12584] ? __alloc_skb+0x28f/0x440 [ 293.806453][T12584] ? __pfx__copy_from_iter+0x10/0x10 [ 293.806476][T12584] ? __virt_addr_valid+0x183/0x530 [ 293.806496][T12584] ? __virt_addr_valid+0x183/0x530 [ 293.806516][T12584] ? __virt_addr_valid+0x45f/0x530 [ 293.806537][T12584] ? __phys_addr_symbol+0x2f/0x70 [ 293.806558][T12584] ? __check_object_size+0x47a/0x730 [ 293.806586][T12584] netlink_sendmsg+0x73d/0xcb0 [ 293.806621][T12584] ? __pfx_netlink_sendmsg+0x10/0x10 [ 293.806648][T12584] ? aa_sock_msg_perm+0x91/0x160 [ 293.806674][T12584] ? __pfx_netlink_sendmsg+0x10/0x10 [ 293.806694][T12584] __sock_sendmsg+0x221/0x270 [ 293.806717][T12584] ____sys_sendmsg+0x52a/0x7e0 [ 293.806748][T12584] ? __pfx_____sys_sendmsg+0x10/0x10 [ 293.806769][T12584] ? __fget_files+0x2a/0x410 [ 293.806789][T12584] ? __fget_files+0x2a/0x410 [ 293.806828][T12584] __sys_sendmsg+0x269/0x350 [ 293.806855][T12584] ? __pfx___sys_sendmsg+0x10/0x10 [ 293.806906][T12584] ? do_sys_openat2+0x17a/0x1d0 [ 293.806949][T12584] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 293.806972][T12584] ? do_syscall_64+0x100/0x230 [ 293.806995][T12584] ? do_syscall_64+0xb6/0x230 [ 293.807018][T12584] do_syscall_64+0xf3/0x230 [ 293.807037][T12584] ? clear_bhb_loop+0x35/0x90 [ 293.807061][T12584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.807081][T12584] RIP: 0033:0x7f1886d8cda9 [ 293.807096][T12584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.807110][T12584] RSP: 002b:00007f1887ccf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 293.807133][T12584] RAX: ffffffffffffffda RBX: 00007f1886fa5fa0 RCX: 00007f1886d8cda9 [ 293.807145][T12584] RDX: 0000000000000000 RSI: 0000000020000880 RDI: 0000000000000003 [ 293.807155][T12584] RBP: 00007f1887ccf090 R08: 0000000000000000 R09: 0000000000000000 [ 293.807165][T12584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.807176][T12584] R13: 0000000000000000 R14: 00007f1886fa5fa0 R15: 00007ffc001f0268 [ 293.807202][T12584] [ 294.091067][T12588] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2269'. [ 294.407641][T12602] tipc: Started in network mode [ 294.421333][T12600] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2273'. [ 294.431250][T12602] tipc: Node identity , cluster identity 4711 [ 294.447050][T12602] tipc: Failed to set node id, please configure manually [ 294.465278][T12602] tipc: Enabling of bearer rejected, failed to enable media [ 294.491888][T12607] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2278'. [ 294.617498][T12612] netlink: 4093 bytes leftover after parsing attributes in process `syz.7.2278'. [ 294.737826][T12607] netlink: 4093 bytes leftover after parsing attributes in process `syz.7.2278'. [ 294.802339][ T5841] Bluetooth: hci7: command 0x0405 tx timeout [ 294.960015][T12627] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2283'. [ 295.647477][T12647] siw: device registration error -23 [ 295.791779][T12639] IPv6: Can't replace route, no match found [ 295.831950][T12638] lo speed is unknown, defaulting to 1000 [ 296.137854][T12638] lo speed is unknown, defaulting to 1000 [ 296.934058][T12702] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.176197][T12711] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 297.526061][T12735] vlan2: entered promiscuous mode [ 297.551692][T12735] vlan0: entered promiscuous mode [ 297.575596][T12735] vlan0: left promiscuous mode [ 297.674808][T12730] __nla_validate_parse: 5 callbacks suppressed [ 297.674827][T12730] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2312'. [ 297.694003][T12739] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2319'. [ 298.012185][T12751] netlink: 'syz.5.2323': attribute type 10 has an invalid length. [ 298.021229][T12751] veth0_vlan: left promiscuous mode [ 298.029418][T12751] veth0_vlan: entered promiscuous mode [ 298.052935][T12751] team0: Device veth0_vlan failed to register rx_handler [ 298.329113][T12760] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2325'. [ 298.343077][T12760] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2325'. [ 298.497941][T12765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2327'. [ 298.518614][T12765] vlan4: entered allmulticast mode [ 298.615176][T12769] ip6tnl1: entered allmulticast mode [ 298.765347][T12776] ieee802154 phy1 wpan1: encryption failed: -22 [ 298.959872][T12787] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2337'. [ 298.978940][T12788] netlink: 'syz.7.2338': attribute type 4 has an invalid length. [ 298.989078][T12789] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2336'. [ 299.007677][T12789] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2336'. [ 299.206160][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 299.278330][T12791] lo speed is unknown, defaulting to 1000 [ 299.452763][T12791] lo speed is unknown, defaulting to 1000 [ 300.138812][T12814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2346'. [ 300.173693][T12814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2346'. [ 300.408427][T12828] vlan5: entered allmulticast mode [ 300.562469][T12839] Cannot find add_set index 0 as target [ 300.573459][T12837] geneve4: entered promiscuous mode [ 300.588574][T12837] geneve4: entered allmulticast mode [ 300.672983][T12842] sctp: [Deprecated]: syz.5.2355 (pid 12842) Use of int in maxseg socket option. [ 300.672983][T12842] Use struct sctp_assoc_value instead [ 300.976137][T12863] wireguard0: entered promiscuous mode [ 300.983079][T12863] wireguard0: entered allmulticast mode [ 301.074245][T12866] IPv6: sit1: Disabled Multicast RS [ 301.424976][ T5832] block nbd1: Receive control failed (result -107) [ 301.483605][T12886] netlink: 'syz.1.2373': attribute type 1 has an invalid length. [ 301.498819][T12886] netlink: 'syz.1.2373': attribute type 1 has an invalid length. [ 302.349206][T12925] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 302.639162][T12933] veth0_vlan: left allmulticast mode [ 302.857977][T12937] __nla_validate_parse: 12 callbacks suppressed [ 302.857995][T12937] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2390'. [ 302.894386][T12937] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2390'. [ 303.097026][T12946] netlink: 'syz.5.2394': attribute type 3 has an invalid length. [ 303.129334][T12953] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2396'. [ 303.406350][T12969] netlink: 'syz.1.2402': attribute type 4 has an invalid length. [ 303.482147][T12969] netlink: 'syz.1.2402': attribute type 1 has an invalid length. [ 303.500189][T12969] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2402'. [ 303.692890][T12976] lo speed is unknown, defaulting to 1000 [ 303.732589][T12981] netlink: 6084 bytes leftover after parsing attributes in process `syz.5.2407'. [ 303.751231][T12981] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2407'. [ 303.770930][T12981] netlink: 6084 bytes leftover after parsing attributes in process `syz.5.2407'. [ 303.894976][T12983] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2408'. [ 303.924056][T12983] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2408'. [ 304.203274][T12992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.271084][T12997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.338072][T12976] lo speed is unknown, defaulting to 1000 [ 304.359428][T13002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2416'. [ 305.184314][T13031] lo speed is unknown, defaulting to 1000 [ 305.818632][T13031] lo speed is unknown, defaulting to 1000 [ 306.244845][T13063] netlink: 'syz.3.2437': attribute type 4 has an invalid length. [ 307.333041][T13091] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 307.507691][T13103] lo: entered allmulticast mode [ 307.530928][T13103] lo: left allmulticast mode [ 307.631504][T13112] netlink: 'syz.1.2456': attribute type 10 has an invalid length. [ 307.667345][T13112] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 307.679543][T13112] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 307.700960][T13112] bridge0: port 2(ip6gretap0) entered blocking state [ 307.707894][T13112] bridge0: port 2(ip6gretap0) entered disabled state [ 307.715964][T13112] ip6gretap0: entered allmulticast mode [ 307.745346][T13112] ip6gretap0: entered promiscuous mode [ 307.994468][T13124] __nla_validate_parse: 8 callbacks suppressed [ 307.994487][T13124] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2459'. [ 308.013265][T13124] bridge_slave_1: left allmulticast mode [ 308.019037][T13124] bridge_slave_1: left promiscuous mode [ 308.026645][T13124] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.038777][T13124] bridge_slave_0: left allmulticast mode [ 308.045121][T13124] bridge_slave_0: left promiscuous mode [ 308.051298][T13124] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.245909][T13129] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2463'. [ 308.324840][T13131] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2465'. [ 308.334920][T13131] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2465'. [ 308.441747][T13135] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2466'. [ 308.459074][T13135] vlan4: entered promiscuous mode [ 308.609463][T13144] lo speed is unknown, defaulting to 1000 [ 308.770264][T13123] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 308.781384][T13148] openvswitch: netlink: IP tunnel dst address not specified [ 308.785146][T13149] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2468'. [ 308.827776][T13149] netlink: 'syz.5.2468': attribute type 7 has an invalid length. [ 308.861606][T13149] netlink: 'syz.5.2468': attribute type 8 has an invalid length. [ 308.878387][T13149] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2468'. [ 308.924292][T13144] lo speed is unknown, defaulting to 1000 [ 308.980609][T13155] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2473'. [ 309.044810][T13155] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2473'. [ 309.221554][T13163] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2476'. [ 309.275038][T13165] pimreg: entered allmulticast mode [ 309.295233][T13165] pimreg: left allmulticast mode [ 309.603923][T13178] netlink: 'syz.3.2482': attribute type 21 has an invalid length. [ 309.734786][T13187] vlan2: entered allmulticast mode [ 309.739955][T13187] macvlan0: entered allmulticast mode [ 309.780185][T13187] macvlan0: left allmulticast mode [ 309.951946][T13196] netlink: 'syz.1.2488': attribute type 11 has an invalid length. [ 310.125825][T13204] macsec1: entered promiscuous mode [ 310.131593][T13204] bond0: entered promiscuous mode [ 310.136647][T13204] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 310.144799][T13204] macsec1: entered allmulticast mode [ 310.178207][T13204] bond0: left promiscuous mode [ 310.183405][T13204] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 311.530205][T13264] delete_channel: no stack [ 311.599641][T13264] delete_channel: no stack [ 311.611781][T13264] delete_channel: no stack [ 311.621874][T13264] delete_channel: no stack [ 311.631116][T13264] delete_channel: no stack [ 311.635994][T13264] delete_channel: no stack [ 311.661172][T13264] delete_channel: no stack [ 311.665756][T13264] delete_channel: no stack [ 311.674938][T13264] delete_channel: no stack [ 311.679516][T13264] delete_channel: no stack [ 311.721028][T13264] delete_channel: no stack [ 311.725634][T13264] delete_channel: no stack [ 311.730202][T13264] delete_channel: no stack [ 311.758437][T13264] delete_channel: no stack [ 311.763648][T13264] delete_channel: no stack [ 311.768228][T13264] delete_channel: no stack [ 311.779580][T13264] delete_channel: no stack [ 311.801931][T13264] delete_channel: no stack [ 311.806919][T13264] delete_channel: no stack [ 311.814034][T13264] delete_channel: no stack [ 311.819325][T13264] delete_channel: no stack [ 311.824210][T13264] delete_channel: no stack [ 311.828777][T13264] delete_channel: no stack [ 311.833681][T13264] delete_channel: no stack [ 311.838321][T13264] delete_channel: no stack [ 311.845808][T13264] delete_channel: no stack [ 311.851839][T13264] delete_channel: no stack [ 311.857052][T13264] delete_channel: no stack [ 311.871195][T13264] delete_channel: no stack [ 311.879538][T13285] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input6 [ 311.881049][T13264] delete_channel: no stack [ 311.910348][T13264] delete_channel: no stack [ 311.972054][T13264] delete_channel: no stack [ 312.025633][T13264] delete_channel: no stack [ 312.035872][T13264] delete_channel: no stack [ 312.046039][T13264] delete_channel: no stack [ 312.059685][T13264] delete_channel: no stack [ 312.065799][T13264] delete_channel: no stack [ 312.080590][T13264] delete_channel: no stack [ 312.087822][T13264] delete_channel: no stack [ 312.095877][T13264] delete_channel: no stack [ 312.100446][T13264] delete_channel: no stack [ 312.125730][T13264] delete_channel: no stack [ 312.130334][T13264] delete_channel: no stack [ 312.157498][T13264] delete_channel: no stack [ 312.171150][T13264] delete_channel: no stack [ 312.175754][T13264] delete_channel: no stack [ 312.190563][T13264] delete_channel: no stack [ 312.196976][T13264] delete_channel: no stack [ 312.202311][T13264] delete_channel: no stack [ 312.207509][T13264] delete_channel: no stack [ 312.229535][T13264] delete_channel: no stack [ 312.237671][T13264] delete_channel: no stack [ 312.254496][T13264] delete_channel: no stack [ 312.259245][T13264] delete_channel: no stack [ 312.275201][T13264] delete_channel: no stack [ 312.282548][T13264] delete_channel: no stack [ 312.287655][T13264] delete_channel: no stack [ 312.305668][T13264] delete_channel: no stack [ 312.310376][T13264] delete_channel: no stack [ 312.315359][T13264] delete_channel: no stack [ 312.370940][T13264] delete_channel: no stack [ 312.376283][T13264] delete_channel: no stack [ 312.441016][T13264] delete_channel: no stack [ 312.445688][T13264] delete_channel: no stack [ 312.450368][T13264] delete_channel: no stack [ 312.537129][T13313] netlink: 'syz.7.2526': attribute type 11 has an invalid length. [ 313.213734][T13353] netlink: 'syz.7.2538': attribute type 21 has an invalid length. [ 313.323160][T13357] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 313.532816][T13369] __nla_validate_parse: 18 callbacks suppressed [ 313.532835][T13369] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2544'. [ 313.674522][T13369] syzkaller0: entered promiscuous mode [ 313.680045][T13369] syzkaller0: entered allmulticast mode [ 313.697830][T13377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2546'. [ 313.720683][T13381] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2548'. [ 313.764355][ T5879] lo speed is unknown, defaulting to 1000 [ 315.990893][T13403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2554'. [ 316.000641][T13403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2554'. [ 316.055187][T13404] syz_tun (unregistering): left allmulticast mode [ 316.073715][T13404] syz_tun (unregistering): left promiscuous mode [ 316.080150][T13404] bridge0: port 1(syz_tun) entered disabled state [ 316.157468][T13416] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 316.273452][T13422] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2560'. [ 316.288444][T13422] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2560'. [ 316.320684][T13422] team0: entered promiscuous mode [ 316.332733][T13422] team_slave_0: entered promiscuous mode [ 316.368598][T13428] x_tables: duplicate underflow at hook 1 [ 316.376548][T13422] team_slave_1: entered promiscuous mode [ 316.384394][T13422] bridge0: entered promiscuous mode [ 316.393854][T13422] debugfs: Directory 'hsr2' with parent 'hsr' already present! [ 316.401707][T13422] Cannot create hsr debugfs directory [ 316.416982][T13422] hsr2: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 316.427346][T13422] hsr2: Slave B (bridge0) is not up; please bring it up to get a fully working HSR network [ 316.513200][T13435] FAULT_INJECTION: forcing a failure. [ 316.513200][T13435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 316.527039][T13435] CPU: 0 UID: 0 PID: 13435 Comm: syz.3.2564 Not tainted 6.13.0-syzkaller-09685-gc2933b2befe2 #0 [ 316.527062][T13435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 316.527084][T13435] Call Trace: [ 316.527091][T13435] [ 316.527098][T13435] dump_stack_lvl+0x241/0x360 [ 316.527122][T13435] ? __pfx_dump_stack_lvl+0x10/0x10 [ 316.527140][T13435] ? __pfx__printk+0x10/0x10 [ 316.527165][T13435] ? __pfx_lock_release+0x10/0x10 [ 316.527195][T13435] should_fail_ex+0x40a/0x550 [ 316.527217][T13435] _copy_from_user+0x2d/0xb0 [ 316.527234][T13435] __sys_bpf+0x1a4/0x810 [ 316.527254][T13435] ? __pfx___sys_bpf+0x10/0x10 [ 316.527286][T13435] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 316.527309][T13435] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 316.527331][T13435] ? do_syscall_64+0x100/0x230 [ 316.527356][T13435] __x64_sys_bpf+0x7c/0x90 [ 316.527373][T13435] do_syscall_64+0xf3/0x230 [ 316.527393][T13435] ? clear_bhb_loop+0x35/0x90 [ 316.527417][T13435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.527437][T13435] RIP: 0033:0x7fc349f8cda9 [ 316.527452][T13435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.527465][T13435] RSP: 002b:00007fc347df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 316.527483][T13435] RAX: ffffffffffffffda RBX: 00007fc34a1a5fa0 RCX: 00007fc349f8cda9 [ 316.527496][T13435] RDX: 0000000000000070 RSI: 00000000200000c0 RDI: 0000000000000005 [ 316.527507][T13435] RBP: 00007fc347df6090 R08: 0000000000000000 R09: 0000000000000000 [ 316.527517][T13435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.527527][T13435] R13: 0000000000000000 R14: 00007fc34a1a5fa0 R15: 00007ffd94f39ba8 [ 316.527554][T13435] [ 316.808410][T13446] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2569'. [ 317.196081][T13461] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 317.606714][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.960079][T13486] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2580'. [ 318.081058][T13497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2583'. [ 318.089978][T13497] netlink: 'syz.3.2583': attribute type 2 has an invalid length. [ 318.105670][T13490] netlink: 'syz.3.2583': attribute type 1 has an invalid length. [ 318.138583][T13500] netlink: 'syz.5.2585': attribute type 4 has an invalid length. [ 318.689867][T13518] __nla_validate_parse: 2 callbacks suppressed [ 318.689885][T13518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2588'. [ 318.753212][T13520] netlink: 'syz.5.2590': attribute type 2 has an invalid length. [ 318.786060][T13520] : entered promiscuous mode [ 319.260973][T13540] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 319.283932][T13509] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 319.633107][T13552] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2602'. [ 320.061358][T13570] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 320.083804][T13568] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2607'. [ 320.111884][T13568] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2607'. [ 320.136315][T13568] netlink: 46 bytes leftover after parsing attributes in process `syz.7.2607'. [ 320.344954][T13580] lo speed is unknown, defaulting to 1000 [ 320.715879][T13589] netlink: 'syz.7.2612': attribute type 4 has an invalid length. [ 320.761923][ T5841] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 320.784149][ T5841] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 320.793133][ T5841] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 320.802738][ T5841] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 320.812710][ T5841] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 320.820007][ T5841] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 321.008231][T13580] lo speed is unknown, defaulting to 1000 [ 321.131864][T13588] lo speed is unknown, defaulting to 1000 [ 321.136545][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.149104][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.176940][T13599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.451909][T13588] lo speed is unknown, defaulting to 1000 [ 321.866238][T13588] chnl_net:caif_netlink_parms(): no params data found [ 322.016773][T13588] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.029170][T13588] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.037014][T13588] bridge_slave_0: entered allmulticast mode [ 322.044437][T13588] bridge_slave_0: entered promiscuous mode [ 322.054035][T13588] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.061701][T13588] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.068992][T13588] bridge_slave_1: entered allmulticast mode [ 322.076606][T13588] bridge_slave_1: entered promiscuous mode [ 322.093904][T13622] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2622'. [ 322.110205][T13622] ipvlan2: entered promiscuous mode [ 322.190510][T13588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.213527][T13588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.283102][T13588] team0: Port device team_slave_0 added [ 322.308492][T13588] team0: Port device team_slave_1 added [ 322.377365][T13588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.384860][T13588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.414073][T13588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.430552][T13588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.437844][T13588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.464599][T13588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.626705][T13638] bond_slave_0: entered promiscuous mode [ 322.632489][T13638] bond_slave_1: entered promiscuous mode [ 322.652279][T13638] macsec1: entered promiscuous mode [ 322.660464][T13638] bond0: entered promiscuous mode [ 322.666170][T13638] macsec1: entered allmulticast mode [ 322.671715][T13638] bond0: entered allmulticast mode [ 322.676967][T13638] bond_slave_0: entered allmulticast mode [ 322.683075][T13638] bond_slave_1: entered allmulticast mode [ 322.761788][T13638] bond0: left allmulticast mode [ 322.766751][T13638] bond_slave_0: left allmulticast mode [ 322.772473][T13638] bond_slave_1: left allmulticast mode [ 322.811349][T13638] bond0: left promiscuous mode [ 322.816652][T13638] bond_slave_0: left promiscuous mode [ 322.823536][T13638] bond_slave_1: left promiscuous mode [ 322.880999][ T5843] Bluetooth: hci8: command tx timeout [ 322.958626][T13588] hsr_slave_0: entered promiscuous mode [ 322.972966][T13588] hsr_slave_1: entered promiscuous mode [ 323.006631][T13588] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 323.022194][T13588] Cannot create hsr debugfs directory [ 323.056529][T13647] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2631'. [ 323.170046][T13647] 8021q: adding VLAN 0 to HW filter on device bond1 [ 323.375546][T13588] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 323.396357][T13659] geneve3: entered promiscuous mode [ 323.401826][T13659] geneve3: entered allmulticast mode [ 323.532128][T13588] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 323.555105][T13588] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 323.573864][T13588] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 323.682483][T13666] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 323.705367][T13588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.719722][T13666] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2637'. [ 323.737519][T13666] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2637'. [ 323.819227][T13588] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.831091][ T5879] IPVS: starting estimator thread 0... [ 323.852786][T10662] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.859932][T10662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.901047][T10662] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.908211][T10662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.950413][T13675] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2640'. [ 323.959807][T13671] IPVS: using max 20 ests per chain, 48000 per kthread [ 324.026129][T13679] netlink: 4093 bytes leftover after parsing attributes in process `syz.5.2640'. [ 324.037580][T13675] netlink: 4093 bytes leftover after parsing attributes in process `syz.5.2640'. [ 324.143656][T13588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.371200][T13588] veth0_vlan: entered promiscuous mode [ 324.382752][T13588] veth1_vlan: entered promiscuous mode [ 324.409993][T13588] veth0_macvtap: entered promiscuous mode [ 324.419037][T13588] veth1_macvtap: entered promiscuous mode [ 324.441148][T13588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.458756][T13588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.468715][T13588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.480331][T13588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.491951][T13588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.502971][T13588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.514678][T13588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.530555][T13588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.541850][T13588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.551884][T13588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.564194][T13588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.574549][T13588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.594541][T13588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.606634][T13588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.622564][T13588] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.632196][T13588] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.641702][T13588] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.650533][T13588] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.804692][ T7961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.812114][ T5843] Bluetooth: hci5: command 0x0406 tx timeout [ 324.819795][T10030] Bluetooth: hci6: command 0x0406 tx timeout [ 324.832458][ T7961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.889088][ T7952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.912442][ T7952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.982304][ T5841] Bluetooth: hci8: command tx timeout [ 325.266849][T13715] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 325.402081][T13720] netlink: 860 bytes leftover after parsing attributes in process `syz.8.2652'. [ 325.430670][T13722] netlink: 'syz.7.2654': attribute type 4 has an invalid length. [ 326.117395][T13742] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2660'. [ 326.221313][T13745] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 326.435388][T13757] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2665'. [ 326.462450][T13757] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2665'. [ 326.736619][T13770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2671'. [ 327.051816][ T5841] Bluetooth: hci8: command tx timeout [ 327.321811][T13785] FAULT_INJECTION: forcing a failure. [ 327.321811][T13785] name failslab, interval 1, probability 0, space 0, times 0 [ 327.334557][T13785] CPU: 1 UID: 0 PID: 13785 Comm: syz.7.2676 Not tainted 6.13.0-syzkaller-09685-gc2933b2befe2 #0 [ 327.334580][T13785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 327.334590][T13785] Call Trace: [ 327.334596][T13785] [ 327.334603][T13785] dump_stack_lvl+0x241/0x360 [ 327.334628][T13785] ? __pfx_dump_stack_lvl+0x10/0x10 [ 327.334645][T13785] ? __pfx__printk+0x10/0x10 [ 327.334681][T13785] should_fail_ex+0x40a/0x550 [ 327.334705][T13785] should_failslab+0xac/0x100 [ 327.334731][T13785] ? skb_clone+0x20c/0x390 [ 327.334745][T13785] kmem_cache_alloc_noprof+0x70/0x380 [ 327.334769][T13785] skb_clone+0x20c/0x390 [ 327.334788][T13785] packet_rcv+0x633/0x14b0 [ 327.334811][T13785] ? __pfx_packet_rcv_fanout+0x10/0x10 [ 327.334832][T13785] __netif_receive_skb_core+0x1057/0x4540 [ 327.334878][T13785] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 327.334903][T13785] ? mark_lock+0x9a/0x360 [ 327.334956][T13785] __netif_receive_skb+0x12f/0x650 [ 327.334977][T13785] ? __pfx_lock_acquire+0x10/0x10 [ 327.334995][T13785] ? kasan_save_track+0x51/0x80 [ 327.335015][T13785] ? __pfx___netif_receive_skb+0x10/0x10 [ 327.335032][T13785] ? build_skb+0x52/0x2a0 [ 327.335051][T13785] ? tun_get_user+0x2173/0x48a0 [ 327.335071][T13785] ? tun_chr_write_iter+0x10d/0x1f0 [ 327.335092][T13785] ? do_syscall_64+0xf3/0x230 [ 327.335111][T13785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.335131][T13785] ? tun_rx_batched+0x160/0x8f0 [ 327.335152][T13785] ? __pfx_lockdep_softirqs_off+0x10/0x10 [ 327.335178][T13785] ? netif_receive_skb+0x131/0x890 [ 327.335195][T13785] ? netif_receive_skb+0x131/0x890 [ 327.335214][T13785] netif_receive_skb+0x1e8/0x890 [ 327.335233][T13785] ? tun_rx_batched+0x160/0x8f0 [ 327.335254][T13785] ? __pfx_netif_receive_skb+0x10/0x10 [ 327.335282][T13785] ? tun_rx_batched+0x160/0x8f0 [ 327.335302][T13785] tun_rx_batched+0x1b7/0x8f0 [ 327.335324][T13785] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 327.335349][T13785] ? __pfx_lock_acquire+0x10/0x10 [ 327.335370][T13785] ? __pfx_tun_rx_batched+0x10/0x10 [ 327.335411][T13785] tun_get_user+0x30cc/0x48a0 [ 327.335432][T13785] ? tun_get_user+0x2bba/0x48a0 [ 327.335452][T13785] ? tun_get_user+0x875/0x48a0 [ 327.335493][T13785] ? __pfx_tun_get_user+0x10/0x10 [ 327.335538][T13785] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 327.335559][T13785] ? tun_get+0x1e/0x2f0 [ 327.335579][T13785] ? __pfx_lock_release+0x10/0x10 [ 327.335615][T13785] ? tun_get+0x1e/0x2f0 [ 327.335634][T13785] ? tun_get+0x27d/0x2f0 [ 327.335656][T13785] tun_chr_write_iter+0x10d/0x1f0 [ 327.335682][T13785] vfs_write+0xacf/0xd10 [ 327.335705][T13785] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 327.335729][T13785] ? __pfx_vfs_write+0x10/0x10 [ 327.335746][T13785] ? do_sys_openat2+0x17a/0x1d0 [ 327.335767][T13785] ? __fget_files+0x2a/0x410 [ 327.335788][T13785] ? __fget_files+0x2a/0x410 [ 327.335814][T13785] ksys_write+0x18f/0x2b0 [ 327.335837][T13785] ? __pfx_ksys_write+0x10/0x10 [ 327.335858][T13785] ? do_syscall_64+0x100/0x230 [ 327.335880][T13785] ? do_syscall_64+0xb6/0x230 [ 327.335902][T13785] do_syscall_64+0xf3/0x230 [ 327.335922][T13785] ? clear_bhb_loop+0x35/0x90 [ 327.335946][T13785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.335965][T13785] RIP: 0033:0x7ff673d8b85f [ 327.335980][T13785] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 327.335992][T13785] RSP: 002b:00007ff674bb0000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 327.336009][T13785] RAX: ffffffffffffffda RBX: 00007ff673fa5fa0 RCX: 00007ff673d8b85f [ 327.336020][T13785] RDX: 000000000000006e RSI: 0000000020000280 RDI: 00000000000000c8 [ 327.336028][T13785] RBP: 00007ff674bb0090 R08: 0000000000000000 R09: 0000000000000000 [ 327.336037][T13785] R10: 000000000000006e R11: 0000000000000293 R12: 0000000000000001 [ 327.336046][T13785] R13: 0000000000000000 R14: 00007ff673fa5fa0 R15: 00007fffd39e8b48 [ 327.336073][T13785] [ 327.821213][T13792] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 327.982660][T13805] netlink: 'syz.5.2682': attribute type 10 has an invalid length. [ 328.002564][T13805] veth0_vlan: left promiscuous mode [ 328.011802][T13805] veth0_vlan: entered promiscuous mode [ 328.029475][T13805] team0: Device veth0_vlan failed to register rx_handler [ 328.128306][T13808] veth0: entered promiscuous mode [ 328.134573][T13808] team0: entered promiscuous mode [ 328.139638][T13808] team_slave_0: entered promiscuous mode [ 328.158239][T13808] team_slave_1: entered promiscuous mode [ 328.168801][T13808] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 328.190854][T13808] Cannot create hsr debugfs directory [ 328.706126][T13826] netlink: 'syz.5.2692': attribute type 1 has an invalid length. [ 328.714076][T13826] netlink: 'syz.5.2692': attribute type 4 has an invalid length. [ 328.723895][T13826] __nla_validate_parse: 7 callbacks suppressed [ 328.723913][T13826] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2692'. [ 328.739632][T13826] NCSI netlink: No device for ifindex 458760 [ 328.874702][T13831] netlink: 'syz.5.2694': attribute type 1 has an invalid length. [ 328.955397][T13831] 8021q: adding VLAN 0 to HW filter on device bond3 [ 328.965195][T13831] bond2: (slave bond3): making interface the new active one [ 328.974123][T13831] bond2: (slave bond3): Enslaving as an active interface with an up link [ 329.121944][ T5841] Bluetooth: hci8: command tx timeout [ 329.234999][T13852] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 329.241791][T13849] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.261563][T13849] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.303375][T13856] netlink: 120 bytes leftover after parsing attributes in process `syz.5.2701'. [ 329.325681][T13856] netlink: 120 bytes leftover after parsing attributes in process `syz.5.2701'. [ 329.339039][T13856] netlink: 120 bytes leftover after parsing attributes in process `syz.5.2701'. [ 329.349826][T13856] netlink: 120 bytes leftover after parsing attributes in process `syz.5.2701'. [ 329.395880][T13849] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.406709][T13849] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.484827][T13849] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.495505][T13849] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.575198][T13849] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.587082][T13849] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.673048][T13849] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.683454][T13849] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.700460][T13849] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.721204][T13849] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.750356][T13849] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.762761][T13849] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.818988][T13849] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.843250][T13849] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.560309][T13895] netlink: 860 bytes leftover after parsing attributes in process `syz.5.2712'. [ 330.906943][T13910] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2717'. [ 331.208064][T13915] ipip0: entered promiscuous mode [ 331.308877][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 331.319501][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 331.328816][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 331.337924][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 331.346492][ T5843] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 331.354064][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 331.408711][T13917] lo speed is unknown, defaulting to 1000 [ 331.662692][T13917] lo speed is unknown, defaulting to 1000 [ 332.066676][T13917] chnl_net:caif_netlink_parms(): no params data found [ 332.358525][ T5843] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 332.367442][T13917] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.384795][ T5843] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 332.392897][T13917] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.400017][ T5843] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 332.407655][T13917] bridge_slave_0: entered allmulticast mode [ 332.415782][ T5843] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 332.423342][ T5843] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 332.431462][ T5843] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 332.439884][T13917] bridge_slave_0: entered promiscuous mode [ 332.449717][T13917] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.457007][T13917] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.464314][T13917] bridge_slave_1: entered allmulticast mode [ 332.471529][T13917] bridge_slave_1: entered promiscuous mode [ 332.481479][ T5832] Bluetooth: hci8: command 0x0405 tx timeout [ 332.527717][T13945] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2729'. [ 332.537331][T13945] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2729'. [ 332.560522][T13917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.579617][T13917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.635596][T13917] team0: Port device team_slave_0 added [ 332.642318][T13939] lo speed is unknown, defaulting to 1000 [ 332.645685][T13917] team0: Port device team_slave_1 added [ 332.678387][T13917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.695390][T13917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.731117][T13917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.744438][T13917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.751907][T13917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.807169][T13917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.944447][T13939] lo speed is unknown, defaulting to 1000 [ 332.948589][T13917] hsr_slave_0: entered promiscuous mode [ 333.001941][T13917] hsr_slave_1: entered promiscuous mode [ 333.008126][T13917] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 333.027910][T13917] Cannot create hsr debugfs directory [ 333.250241][T13957] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2733'. [ 333.394872][T13939] chnl_net:caif_netlink_parms(): no params data found [ 333.441307][ T5841] Bluetooth: hci3: command tx timeout [ 333.465717][T13917] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.477355][T13917] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.568637][T13939] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.591738][T13939] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.598969][T13939] bridge_slave_0: entered allmulticast mode [ 333.617456][T13939] bridge_slave_0: entered promiscuous mode [ 333.626917][T13917] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.639974][T13917] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.660482][T13939] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.667690][T13939] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.676273][T13939] bridge_slave_1: entered allmulticast mode [ 333.683690][T13939] bridge_slave_1: entered promiscuous mode [ 333.690240][T13966] netlink: 'syz.7.2735': attribute type 4 has an invalid length. [ 333.702481][T13917] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.716540][T13917] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.888864][T13939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.920388][T13917] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.931011][T13917] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.961539][T13939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.025457][T13939] team0: Port device team_slave_0 added [ 334.033958][T13939] team0: Port device team_slave_1 added [ 334.137623][T13939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.152386][T13939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.180256][T13939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.215518][T13939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.229239][T13939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.244478][T13973] __nla_validate_parse: 3 callbacks suppressed [ 334.244498][T13973] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2738'. [ 334.279056][T13939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.307631][T13975] netlink: 'syz.5.2739': attribute type 4 has an invalid length. [ 334.357128][T13973] Cannot find add_set index 32768 as target [ 334.398732][T13917] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 334.409505][T13917] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 334.483261][ T5841] Bluetooth: hci9: command tx timeout [ 334.629648][T13917] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 334.689203][T13939] hsr_slave_0: entered promiscuous mode [ 334.695961][T13939] hsr_slave_1: entered promiscuous mode [ 334.704280][T13939] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 334.711978][T13939] Cannot create hsr debugfs directory [ 334.717853][T13917] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 334.921556][T13981] syzkaller0: entered promiscuous mode [ 334.927067][T13981] syzkaller0: entered allmulticast mode [ 334.937321][T13981] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci9/hci9:200/input7 [ 335.300124][T13993] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2745'. [ 335.322867][T13993] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 335.347506][T13993] netlink: 25 bytes leftover after parsing attributes in process `syz.5.2745'. [ 335.526500][ T5832] Bluetooth: hci3: command tx timeout [ 336.572493][ T5832] Bluetooth: hci9: command tx timeout [ 337.154296][T13917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.172587][T13996] netlink: 'syz.5.2746': attribute type 1 has an invalid length. [ 337.224665][T13939] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 337.245230][T13939] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 337.264948][T13939] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 337.305730][T13917] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.338738][T13999] 8021q: adding VLAN 0 to HW filter on device bond5 [ 337.349148][T13999] bond4: (slave bond5): making interface the new active one [ 337.357749][T13999] bond4: (slave bond5): Enslaving as an active interface with an up link [ 337.367678][T13939] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 337.391558][T14002] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 337.460562][ T4785] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.467799][ T4785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.495577][ T4785] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.503116][ T4785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.601459][ T5832] Bluetooth: hci3: command tx timeout [ 337.780637][T13939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.824500][T13939] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.855296][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.862490][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.889822][T10664] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.896980][T10664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.066749][T13917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.098753][T14026] netlink: 'syz.5.2755': attribute type 10 has an invalid length. [ 338.140878][T14026] netlink: 55 bytes leftover after parsing attributes in process `syz.5.2755'. [ 338.348328][T13917] veth0_vlan: entered promiscuous mode [ 338.380224][T13917] veth1_vlan: entered promiscuous mode [ 338.398090][T14025] delete_channel: no stack [ 338.427251][T13917] veth0_macvtap: entered promiscuous mode [ 338.437298][T13939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.451449][T13917] veth1_macvtap: entered promiscuous mode [ 338.469062][T13917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.480392][T13917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.511009][T13917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.533317][T13917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.558681][T13917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.578832][T13917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.600858][T13917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.623882][T13917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.641334][ T5832] Bluetooth: hci9: command tx timeout [ 338.649191][T13917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.663425][T14043] batadv_slave_1: entered promiscuous mode [ 338.685390][T13917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.697342][T13917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.707747][T13917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.718534][T13917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.730270][T13917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.753108][T13917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.774605][T13917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.789441][T13917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.801932][T13917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.814020][T13917] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.853024][T13917] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.862408][T13917] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.871696][T13917] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.983571][T14049] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2760'. [ 339.071495][ T4785] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.079398][ T4785] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.177654][T14057] netlink: 'syz.5.2762': attribute type 10 has an invalid length. [ 339.232992][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.260588][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.270239][T13939] veth0_vlan: entered promiscuous mode [ 339.286943][T14061] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2763'. [ 339.316323][T13939] veth1_vlan: entered promiscuous mode [ 339.392182][T13939] veth0_macvtap: entered promiscuous mode [ 339.403658][T13939] veth1_macvtap: entered promiscuous mode [ 339.438395][T13939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.458683][T13939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.469030][T13939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.479975][T13939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.491517][T13939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.502320][T13939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.518219][T13939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.538486][T13939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.549091][T13939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.559929][T13939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.572535][T13939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.596652][T13939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.617929][T13939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.636442][T13939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.653922][T14073] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2766'. [ 339.675954][T13939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.687679][ T5832] Bluetooth: hci3: command tx timeout [ 339.698790][T13939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.751083][T13939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.805166][T13939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.830933][T13939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.870748][T13939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.902257][T13939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.919678][T13939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.973124][T14073] 8021q: adding VLAN 0 to HW filter on device bond6 [ 339.993376][T13939] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.015391][T13939] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.035493][T13939] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.056174][T13939] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.235003][ T7952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.254219][ T7952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.313413][ T7952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.340825][ T7952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.476495][T14083] netlink: 428 bytes leftover after parsing attributes in process `syz.5.2767'. [ 340.721332][ T5832] Bluetooth: hci9: command tx timeout [ 340.758303][T14091] syzkaller0: entered promiscuous mode [ 340.764012][T14091] syzkaller0: entered allmulticast mode [ 340.955943][T14105] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2773'. [ 340.983187][T14100] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci9/hci9:200/input8 [ 341.177525][T14110] rdma_rxe: rxe_newlink: failed to add lo [ 342.520044][T14120] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2776'. [ 342.529520][T14120] nbd: illegal input index -8454144 [ 342.576981][ T30] INFO: task syz.4.1387:9960 blocked for more than 143 seconds. [ 342.587415][ T30] Not tainted 6.13.0-syzkaller-09685-gc2933b2befe2 #0 [ 342.595764][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 342.604783][ T30] task:syz.4.1387 state:D stack:23704 pid:9960 tgid:9958 ppid:5842 task_flags:0x400140 flags:0x00000004 [ 342.617836][ T30] Call Trace: [ 342.621280][ T30] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 342.624232][ T30] __schedule+0x190e/0x4c90 [ 342.628956][ T30] ? __pfx___schedule+0x10/0x10 [ 342.639109][ T30] ? __pfx_lock_release+0x10/0x10 [ 342.647908][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 342.660815][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 342.666748][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 342.688598][ T30] ? schedule+0x90/0x320 [ 342.693346][ T30] schedule+0x14b/0x320 [ 342.697549][ T30] schedule_preempt_disabled+0x13/0x30 [ 342.703906][ T30] __mutex_lock+0x817/0x1010 [ 342.708535][ T30] ? __mutex_lock+0x602/0x1010 [ 342.714029][ T30] ? nfsd_nl_listener_get_doit+0x115/0x5e0 [ 342.719871][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 342.726030][ T30] ? __asan_memset+0x23/0x50 [ 342.730674][ T30] nfsd_nl_listener_get_doit+0x115/0x5e0 [ 342.736649][ T30] ? genl_get_cmd+0x65d/0xbe0 [ 342.741420][ T30] ? genl_family_rcv_msg_attrs_parse+0x140/0x290 [ 342.747955][ T30] genl_rcv_msg+0xb14/0xec0 [ 342.752693][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 342.757763][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 342.764545][ T30] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 342.839070][ T30] ? __pfx___might_resched+0x10/0x10 [ 342.859328][ T30] netlink_rcv_skb+0x1e3/0x430 [ 342.874620][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 342.910863][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 342.916253][ T30] genl_rcv+0x28/0x40 [ 342.920258][ T30] netlink_unicast+0x7f6/0x990 [ 342.940909][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 342.946256][ T30] ? __virt_addr_valid+0x45f/0x530 [ 342.962779][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 342.970724][ T30] ? __check_object_size+0x47a/0x730 [ 342.976058][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 342.980974][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.986290][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 342.991394][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.997733][ T30] __sock_sendmsg+0x221/0x270 [ 343.002694][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 343.007491][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 343.012960][ T30] ? __fget_files+0x2a/0x410 [ 343.017573][ T30] ? __fget_files+0x2a/0x410 [ 343.026467][ T30] __sys_sendmsg+0x269/0x350 [ 343.031189][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 343.036367][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 343.044466][ T30] ? do_syscall_64+0x100/0x230 [ 343.049271][ T30] ? do_syscall_64+0xb6/0x230 [ 343.054136][ T30] do_syscall_64+0xf3/0x230 [ 343.058668][ T30] ? clear_bhb_loop+0x35/0x90 [ 343.064179][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.070099][ T30] RIP: 0033:0x7fe3cd58cda9 [ 343.074628][ T30] RSP: 002b:00007fe3cb3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 343.083257][ T30] RAX: ffffffffffffffda RBX: 00007fe3cd7a6080 RCX: 00007fe3cd58cda9 [ 343.091300][ T30] RDX: 0000000000000010 RSI: 0000000020001540 RDI: 0000000000000006 [ 343.115157][ T30] RBP: 00007fe3cd60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 343.140772][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.148798][ T30] R13: 0000000000000000 R14: 00007fe3cd7a6080 R15: 00007ffd1ffbcfd8 [ 343.170257][ T30] [ 343.176114][ T30] [ 343.176114][ T30] Showing all locks held in the system: [ 343.183930][ T30] 1 lock held by khungtaskd/30: [ 343.189151][ T30] #0: ffffffff8e938760 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 343.225030][ T30] 3 locks held by kworker/u8:7/4785: [ 343.230364][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 343.242289][ T30] #1: ffffc9000f787c60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 343.253379][ T30] #2: ffffffff8fcbf088 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 343.262465][ T30] 2 locks held by getty/5586: [ 343.267142][ T30] #0: ffff888036ca90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 343.277027][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 343.287999][ T30] 3 locks held by kworker/u8:8/7952: [ 343.293366][ T30] #0: ffff88814d488148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 343.306647][ T30] #1: ffffc90003137c60 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 343.319526][ T30] #2: ffffffff8fcbf088 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x10e/0x16a0 [ 343.329218][ T30] 1 lock held by ipvs-e:5:0/9336: [ 343.334437][ T30] #0: ffff8880b873e918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 343.344469][ T30] 2 locks held by syz.2.1373/9931: [ 343.349576][ T30] #0: ffffffff8fd22d30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 343.357831][ T30] #1: ffffffff8ec04408 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 343.370290][ T30] 2 locks held by syz.4.1387/9960: [ 343.375678][ T30] #0: ffffffff8fd22d30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 343.384371][ T30] #1: ffffffff8ec04408 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x115/0x5e0 [ 343.394571][ T30] 1 lock held by syz-executor/10332: [ 343.399851][ T30] #0: ffffffff8e93dc38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x830 [ 343.411876][ T30] 2 locks held by syz.6.1816/11338: [ 343.417088][ T30] #0: ffffffff8fd22d30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 343.425376][ T30] #1: ffffffff8ec04408 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 343.435679][ T30] 2 locks held by syz.0.2427/13032: [ 343.441499][ T30] #0: ffffffff8fd22d30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 343.449740][ T30] #1: ffffffff8ec04408 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 343.460045][ T30] 2 locks held by syz.1.2571/13452: [ 343.465375][ T30] #0: ffffffff8fd22d30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 343.473630][ T30] #1: ffffffff8ec04408 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 343.483897][ T30] 2 locks held by syz.8.2695/13832: [ 343.489102][ T30] #0: ffffffff8fd22d30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 343.497399][ T30] #1: ffffffff8ec04408 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 343.508740][ T30] 2 locks held by syz.3.2769/14091: [ 343.514005][ T30] #0: ffffffff8fcbf088 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0 [ 343.531445][ T30] #1: ffffffff8e93dc38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x830 [ 343.542448][ T30] 1 lock held by syz.9.2772/14099: [ 343.547559][ T30] #0: ffffffff8fcbf088 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x48c/0x2400 [ 343.557115][ T30] 1 lock held by syz.9.2772/14101: [ 343.562314][ T30] #0: ffffffff8fcbf088 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 343.571881][ T30] 1 lock held by syz.7.2773/14105: [ 343.577001][ T30] #0: ffffffff8fcbf088 (rtnl_mutex){+.+.}-{4:4}, at: wext_ioctl_dispatch+0x9d/0x410 [ 343.586587][ T30] 1 lock held by syz.7.2773/14108: [ 343.591853][ T30] #0: ffffffff8fcbf088 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 343.601892][ T30] [ 343.604234][ T30] ============================================= [ 343.604234][ T30] [ 343.628405][ T30] NMI backtrace for cpu 0 [ 343.628421][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-09685-gc2933b2befe2 #0 [ 343.628435][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 343.628442][ T30] Call Trace: [ 343.628448][ T30] [ 343.628454][ T30] dump_stack_lvl+0x241/0x360 [ 343.628475][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 343.628488][ T30] ? __pfx__printk+0x10/0x10 [ 343.628517][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 343.628535][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 343.628548][ T30] ? _printk+0xd5/0x120 [ 343.628565][ T30] ? __pfx__printk+0x10/0x10 [ 343.628583][ T30] ? __wake_up_klogd+0xcc/0x110 [ 343.628600][ T30] ? __pfx__printk+0x10/0x10 [ 343.628619][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 343.628637][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 343.628654][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 343.628670][ T30] watchdog+0x1058/0x10a0 [ 343.628688][ T30] ? watchdog+0x1ea/0x10a0 [ 343.628708][ T30] ? __pfx_watchdog+0x10/0x10 [ 343.628725][ T30] kthread+0x7a9/0x920 [ 343.628741][ T30] ? __pfx_kthread+0x10/0x10 [ 343.628759][ T30] ? __pfx_watchdog+0x10/0x10 [ 343.628775][ T30] ? __pfx_kthread+0x10/0x10 [ 343.628790][ T30] ? __pfx_kthread+0x10/0x10 [ 343.628809][ T30] ? __pfx_kthread+0x10/0x10 [ 343.628834][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 343.628849][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 343.628864][ T30] ? __pfx_kthread+0x10/0x10 [ 343.628882][ T30] ret_from_fork+0x4b/0x80 [ 343.628898][ T30] ? __pfx_kthread+0x10/0x10 [ 343.628915][ T30] ret_from_fork_asm+0x1a/0x30 [ 343.628940][ T30] [ 343.628947][ T30] Sending NMI from CPU 0 to CPUs 1: [ 343.805181][ C1] NMI backtrace for cpu 1 [ 343.805196][ C1] CPU: 1 UID: 0 PID: 35 Comm: kworker/u8:2 Not tainted 6.13.0-syzkaller-09685-gc2933b2befe2 #0 [ 343.805220][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 343.805229][ C1] Workqueue: krdsd rds_connect_worker [ 343.805252][ C1] RIP: 0010:__free_one_page+0x64f/0x9c0 [ 343.805271][ C1] Code: 28 44 89 fa 8b 4c 24 1c e8 ae 1d 01 00 f6 c3 01 49 bd 00 00 00 00 00 fc ff df 75 05 0f 1f 44 00 00 48 c7 44 24 60 0e 36 e0 45 <48> 8b 44 24 58 49 c7 44 05 00 00 00 00 00 65 48 8b 04 25 28 00 00 [ 343.805283][ C1] RSP: 0018:ffffc90000ab73c0 EFLAGS: 00000046 [ 343.805295][ C1] RAX: 1ffff11027fff7e6 RBX: 0000000000000000 RCX: dffffc0000000000 [ 343.805305][ C1] RDX: ffffea0001949608 RSI: ffff88813fffbed0 RDI: ffffea0001948708 [ 343.805316][ C1] RBP: ffffc90000ab74c0 R08: 0000000000000000 R09: 1ffffd40003290f6 [ 343.805326][ C1] R10: dffffc0000000000 R11: fffff940003290f7 R12: ffffea0001948730 [ 343.805337][ C1] R13: dffffc0000000000 R14: ffffea0001948700 R15: 0000000000000002 [ 343.805347][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 343.805359][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 343.805369][ C1] CR2: 00007f1886f762d8 CR3: 000000000e738000 CR4: 00000000003526f0 [ 343.805382][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 343.805391][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 343.805400][ C1] Call Trace: [ 343.805405][ C1] [ 343.805411][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 343.805426][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 343.805446][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 343.805460][ C1] ? nmi_handle+0x2a/0x5a0 [ 343.805486][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 343.805502][ C1] ? nmi_handle+0x14f/0x5a0 [ 343.805519][ C1] ? nmi_handle+0x2a/0x5a0 [ 343.805538][ C1] ? __free_one_page+0x64f/0x9c0 [ 343.805553][ C1] ? default_do_nmi+0x63/0x160 [ 343.805567][ C1] ? exc_nmi+0x123/0x1f0 [ 343.805581][ C1] ? end_repeat_nmi+0xf/0x53 [ 343.805603][ C1] ? __free_one_page+0x64f/0x9c0 [ 343.805620][ C1] ? __free_one_page+0x64f/0x9c0 [ 343.805637][ C1] ? __free_one_page+0x64f/0x9c0 [ 343.805653][ C1] [ 343.805658][ C1] [ 343.805668][ C1] ? __pfx___free_one_page+0x10/0x10 [ 343.805691][ C1] free_pcppages_bulk+0x3c7/0x5e0 [ 343.805714][ C1] free_frozen_page_commit+0x582/0x1140 [ 343.805737][ C1] ? __pfx_free_frozen_page_commit+0x10/0x10 [ 343.805753][ C1] ? page_ext_get+0x20/0x2a0 [ 343.805770][ C1] ? page_ext_get+0x1d6/0x2a0 [ 343.805791][ C1] free_frozen_pages+0x74f/0x10e0 [ 343.805818][ C1] __slab_free+0x2c2/0x380 [ 343.805837][ C1] ? __phys_addr+0xba/0x170 [ 343.805857][ C1] qlist_free_all+0x9a/0x140 [ 343.805874][ C1] ? sock_alloc_inode+0x28/0xc0 [ 343.805890][ C1] kasan_quarantine_reduce+0x14f/0x170 [ 343.805910][ C1] __kasan_slab_alloc+0x23/0x80 [ 343.805928][ C1] kmem_cache_alloc_lru_noprof+0x1dd/0x390 [ 343.805946][ C1] sock_alloc_inode+0x28/0xc0 [ 343.805960][ C1] ? __pfx_sock_alloc_inode+0x10/0x10 [ 343.805975][ C1] alloc_inode+0x65/0x1a0 [ 343.805990][ C1] __sock_create+0x127/0xa30 [ 343.806010][ C1] rds_tcp_conn_path_connect+0x2bb/0xbc0 [ 343.806036][ C1] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 343.806055][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 343.806075][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 343.806096][ C1] rds_connect_worker+0x1dd/0x2a0 [ 343.806113][ C1] ? process_scheduled_works+0x976/0x1840 [ 343.806129][ C1] process_scheduled_works+0xa66/0x1840 [ 343.806159][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 343.806179][ C1] ? assign_work+0x364/0x3d0 [ 343.806201][ C1] worker_thread+0x870/0xd30 [ 343.806224][ C1] ? __kthread_parkme+0x169/0x1d0 [ 343.806243][ C1] ? __pfx_worker_thread+0x10/0x10 [ 343.806259][ C1] kthread+0x7a9/0x920 [ 343.806274][ C1] ? __pfx_kthread+0x10/0x10 [ 343.806292][ C1] ? __pfx_worker_thread+0x10/0x10 [ 343.806307][ C1] ? __pfx_kthread+0x10/0x10 [ 343.806323][ C1] ? __pfx_kthread+0x10/0x10 [ 343.806341][ C1] ? __pfx_kthread+0x10/0x10 [ 343.806356][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 343.806370][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 343.806385][ C1] ? __pfx_kthread+0x10/0x10 [ 343.806403][ C1] ret_from_fork+0x4b/0x80 [ 343.806418][ C1] ? __pfx_kthread+0x10/0x10 [ 343.806434][ C1] ret_from_fork_asm+0x1a/0x30 [ 343.806457][ C1] [ 343.807759][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 344.246484][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-09685-gc2933b2befe2 #0 [ 344.256623][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 344.266688][ T30] Call Trace: [ 344.269969][ T30] [ 344.272895][ T30] dump_stack_lvl+0x241/0x360 [ 344.277571][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 344.282765][ T30] ? __pfx__printk+0x10/0x10 [ 344.287353][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 344.293334][ T30] ? vscnprintf+0x5d/0x90 [ 344.297661][ T30] panic+0x349/0x880 [ 344.301559][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 344.307707][ T30] ? __pfx_panic+0x10/0x10 [ 344.312119][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 344.317481][ T30] ? __irq_work_queue_local+0x137/0x410 [ 344.323029][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 344.328402][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 344.334560][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 344.340715][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 344.346868][ T30] watchdog+0x1097/0x10a0 [ 344.351204][ T30] ? watchdog+0x1ea/0x10a0 [ 344.355618][ T30] ? __pfx_watchdog+0x10/0x10 [ 344.360289][ T30] kthread+0x7a9/0x920 [ 344.364355][ T30] ? __pfx_kthread+0x10/0x10 [ 344.368941][ T30] ? __pfx_watchdog+0x10/0x10 [ 344.373619][ T30] ? __pfx_kthread+0x10/0x10 [ 344.378204][ T30] ? __pfx_kthread+0x10/0x10 [ 344.382804][ T30] ? __pfx_kthread+0x10/0x10 [ 344.387390][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 344.392579][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 344.397771][ T30] ? __pfx_kthread+0x10/0x10 [ 344.402359][ T30] ret_from_fork+0x4b/0x80 [ 344.406769][ T30] ? __pfx_kthread+0x10/0x10 [ 344.411353][ T30] ret_from_fork_asm+0x1a/0x30 [ 344.416115][ T30] [ 344.419417][ T30] Kernel Offset: disabled [ 344.423730][ T30] Rebooting in 86400 seconds..