last executing test programs: 1m28.031894746s ago: executing program 1 (id=2460): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000280)}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[], 0xb8}}, 0x10) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000), 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1m27.80405143s ago: executing program 1 (id=2464): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@fwd={0x5, 0x0, 0x0, 0x12}, @func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x0, 0x0, 0x51, 0x0, 0x61]}}, 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000084000000060a010400000000000000000100000008000b40000000005c0004802c000180090001007866726d000000001c000280080001400000001508000240000000385e5efcc0c228bb002c0001800c00010062697477697365001c0002800800014000000014080003400000000208000240000000120900010073797a3000"], 0xf8}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="02"], 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/cgroup\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000d00)=@newqdisc={0x30, 0x24, 0xf0b, 0x18000020, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048005}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000002600)=ANY=[@ANYBLOB="05000000000000001f110000000000008510000002000000850000000500000095000000000000009500a505000000007751e8ba639a67880141cca555077e3a159110193dd2df1fa7c3205bfedbe9116eb423cdacfa7e32fe02313615b2e1a38d522be18b000048b043ccc42646d25dfd73bb6d7535f7866907dc6751dfced1fd8accae669e173a649c1cfd6587d47578f4c35235138d5521f9453559c35d9560ebe8efbc6f342a3e3173d466a0f06c54c3a4903ef31c4d4a01010000009f2f0517ccca0e1823a2971a50f713d4e21b9436f1ae0796f23526ec0fd97f734c783bcaecd4596f2e91af6565902716314c815bf697e6bd25eac36d4dfafe7cc03b0864009d2e7d7ff6ff72ba8972b122b07789d99b3d0124f39dc092440010000000000000f7049db5cb19d7962fed44e00f39ed8c15a11fa798de504e2865cd81f2b77fdd76c67700000000000000db3947c8dc7b1b4c4554ffdca8b75d82706ba9cbeeffbc83fb05000000000000593d60abc9b3e67d127e9d5c4c560256f3d3759dcfeb820634fd4d419e0500000005b2d5a2008a600484511b6efaad206335a3ebf6b9e01446a6285f4665a7fe37da0049f8bf4064726dc32add75e0f435f28fbeda75cf971d54a9698cf7270f420edc858176070bfff7b09413f3fbd3ced3284db730b368ddca654dd7836f171b766ffd7526847a6bfda9c648e8aa5c558aa6d463ecbe5cb0417d33d35faee6b2d905d30dfe64d05ac37ed015494d9d10e36e603129e9a726579ac7d672cacd581b7e2fc7a5758fcfb822de1dacc357341e000c604cc34c49914f1aa198a77b3610b7403930fd42051d4b7443e5b49c000000000000007d6173050027791c9c1e00ad3711a66d91254a6f911b1449c62a6e1e3f9ce19a9d173663570d884b0cb462e0b45853673df72dc813f7454ae62d79ac48034282f03040350f886e9644179dcf66d93907cedd49e0c5752f755849953957143a0380d1f62ae63b29fe177745448ccc92577007c12cf90da9200df6bb669d5a57dd74df817eaa92000000000001b08b3ac52db204399eae4a2f105d4544d9a3000000000000001ff2e8afd7913007fe44950233feb5303b2617668a0e45846436ad643fb999180644298458d40002a06f4853d99af16764b8e59e04d02835f803f66307fbeef5b7e97b6d0ef2c62215c259c7796a158d662b1adfae1d24e109e52378b3f1f8ee8965dedd20abc5b7a73d9501bf3f5a2ae19d7ddf8daf3691d1879e225395c0925ec1fe4ca8fd6fc11c8db3cd0d7206531366a5f6150d9d1a6eab622821378f2827fac5c7f82dad8f4ed4367c3a4f20304432f0a154147c7af7569ff2ed248dafc1aa13afe3d17c8f2f720e1a12c4cd230f3f29a390b44a3bf66b5c8fc4a026fe6ea8edf871da290c4d9457fccdc6a8f5944e47f742cfd7b0c5f5b00fc0921c6951541f2dda75be07cb0097e25e4a30000346c782264139540c5f260495abee91019e816aabc7c9b1e3862de6c6cf6d5cdead6a42b519619ff9c2f5600d95d34d50667901373f32a1fc0b7299aadbcc96958dff4a229c8a78864ea0ae3289a04249d2f790745374fea0687a32b8c9731226a085c71f6b35f8db44f30ed778ca2cd4ebb7929ff7845e9bdfba5caf2cae0fbc83999790441bc991f5c8acb6ba3deb94f52f7a74c33ab7106054a8eb839ab2ff7acbcc8f875acc552ba92df8f649598f9eba605729db380c130e00"/1247], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r7, @ANYBLOB="01000000000000000000010000000c000597ff000000000000000c0002000000000000000000040007800c000800000000000000000008002000000000004400078008000100", @ANYRES32, @ANYBLOB="32000100", @ANYRES32=r8, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB='\b'], 0x90}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000200)={'wg1\x00'}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x37, 0x301, 0x270bd24, 0x25dfdbfc, {0x1}}, 0x14}}, 0x0) 1m27.447936833s ago: executing program 1 (id=2469): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}}, 0x0) 1m26.926797234s ago: executing program 1 (id=2475): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xc3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket(0x23, 0x5, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r3, 0x10d, 0xc9, &(0x7f0000000000), &(0x7f0000000240)=0x4) write(r2, &(0x7f0000000000)="d1d0", 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xd, 0x200cc, 0x6, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='D', &(0x7f0000000240), 0x4b2, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f0000000640), &(0x7f0000001740), 0x2, r5}, 0x38) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7fe}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x1, 0x9, 0xc5, @vifc_lcl_ifindex=r7, @remote}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) close(0x4) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x8befc8e1ce82796c) sendmmsg(r6, &(0x7f00000001c0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="42bd8a104b0f12b0206537cc393cced511a505275611a3940c9ce3f9e9431fe5de3e51d5d1d8041c03e047cfe185bcc47b45aa51fdd198b8d0ebd7145a9a46d04d4f956775c2b0fd99124a20b000e4b8cb1cfc5f6a152a015d86f0f61626a493e92b0b44d0ae88d3e9838c8819db4a3bf57d302d", 0x74}], 0x1, &(0x7f0000000400)=[{0xc0, 0x29, 0x0, "d2141f562fd3c5cadeae01cb85b05f96546d6cf85a9d7961570649a63ef0db13259831f644ec4ae9236e24d4a792531d2bd246c0f62d0ea4606344c30b4257f7a4d4ec270d83030caae2d936b662f3757d128d22721a9e763383f00040cf1b1a4a151197b08db6f8a7c944c7ab689ea2cc20b70701ad6010ba13e297ec925b46edbb601cbb00a9ea31e672935599d4773cba988ff3b661fe59a04ee6758febed62f6b3b5c6ab2d5fe54bc2bf20"}], 0xc0}}], 0x1, 0x8000) 1m18.046693169s ago: executing program 1 (id=2475): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xc3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket(0x23, 0x5, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r3, 0x10d, 0xc9, &(0x7f0000000000), &(0x7f0000000240)=0x4) write(r2, &(0x7f0000000000)="d1d0", 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xd, 0x200cc, 0x6, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='D', &(0x7f0000000240), 0x4b2, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f0000000640), &(0x7f0000001740), 0x2, r5}, 0x38) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7fe}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x1, 0x9, 0xc5, @vifc_lcl_ifindex=r7, @remote}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) close(0x4) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x8befc8e1ce82796c) sendmmsg(r6, &(0x7f00000001c0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="42bd8a104b0f12b0206537cc393cced511a505275611a3940c9ce3f9e9431fe5de3e51d5d1d8041c03e047cfe185bcc47b45aa51fdd198b8d0ebd7145a9a46d04d4f956775c2b0fd99124a20b000e4b8cb1cfc5f6a152a015d86f0f61626a493e92b0b44d0ae88d3e9838c8819db4a3bf57d302d", 0x74}], 0x1, &(0x7f0000000400)=[{0xc0, 0x29, 0x0, "d2141f562fd3c5cadeae01cb85b05f96546d6cf85a9d7961570649a63ef0db13259831f644ec4ae9236e24d4a792531d2bd246c0f62d0ea4606344c30b4257f7a4d4ec270d83030caae2d936b662f3757d128d22721a9e763383f00040cf1b1a4a151197b08db6f8a7c944c7ab689ea2cc20b70701ad6010ba13e297ec925b46edbb601cbb00a9ea31e672935599d4773cba988ff3b661fe59a04ee6758febed62f6b3b5c6ab2d5fe54bc2bf20"}], 0xc0}}], 0x1, 0x8000) 1m10.689089816s ago: executing program 0 (id=2643): r0 = socket$kcm(0x2, 0x3, 0x2) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000) socket(0xa, 0x3, 0x3a) ioctl$SIOCSIFHWADDR(r0, 0x8b0b, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r5, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r5, &(0x7f0000005dc0)=[{{0x0, 0x0, 0x0}, 0x4fe}], 0x1, 0x0, 0x0) 1m9.686710542s ago: executing program 3 (id=2656): r0 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 1m9.686143841s ago: executing program 0 (id=2657): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1500000010"], 0x50) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c0000003d000701feffffff00000000047c00000800088004004c003800018006000600800a00002c001b"], 0x5c}, 0x1, 0x0, 0x0, 0x4040000}, 0xc000) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x5, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001d00)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xa}]}}}]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="08004d010000dd"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, r6, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x64e9187d31c549d2}, @NL80211_ATTR_KEY={0x44, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_SEQ={0x8, 0x4, "5f7b50a0"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT_TYPES={0x24, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40048}, 0x20004001) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x15, 0x7, &(0x7f0000000380)=@raw=[@cb_func={0x18, 0x7, 0x4, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], &(0x7f00000003c0)='GPL\x00', 0x4, 0x86, &(0x7f0000000400)=""/134, 0x41100, 0x40, '\x00', r3, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4, 0x2, &(0x7f00000004c0)=[r2, r2, r2, r2, r2, 0x1, r2, r2], &(0x7f0000000500)=[{0x1, 0x3, 0xa, 0x8}, {0x5, 0x3, 0xa, 0x2}], 0x10, 0x629491be, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x19, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_fd={0x18, 0x0, 0x1, 0x0, r2}, @jmp={0x5, 0x1, 0x8, 0xa, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffa}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @generic={0x30, 0xe, 0x2, 0xce, 0x10000}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000700)='GPL\x00', 0x3, 0x3f, &(0x7f0000000740)=""/63, 0x41000, 0x20, '\x00', r3, @sock_ops=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, &(0x7f00000007c0)=[r2, r2, r2, r2, r2, r2, r2, r2], &(0x7f0000000800)=[{0x2, 0x2, 0x7, 0xb}, {0x5, 0x3, 0xc, 0xc}, {0x0, 0x3, 0xf, 0x6}], 0x10, 0x85, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x44, 0x10, 0x403, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x2}, @IFLA_XDP_FD={0x8, 0x1, r8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r9}]}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x8000) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x3fa, 0x0, 0x70bd29, 0x25dfdbfd, {0x1, 0x0, 0x1}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4840}, 0x8080) 1m9.684270707s ago: executing program 2 (id=2658): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x814) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1402005c", @ANYRES16, @ANYBLOB="020027bd7000fddbdf2515"], 0x14}}, 0x2004000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xb8}}, 0x10) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1m9.472696561s ago: executing program 2 (id=2660): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)={0x28, 0x5a, 0x30d, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x5, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x28}], 0x1}, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x400, @multicast1}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000080)="08001efbb07d586e", 0x8}], 0x1}, 0x404805c) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) syz_emit_ethernet(0x1e, &(0x7f0000000100)={@random="7c34609fc82b", @link_local, @void, {@can={0xc, {{0x4, 0x1, 0x1, 0x1}, 0x7, 0x2, 0x0, 0x0, "4a1d0f95a757f38e"}}}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000001c0)={r4, 0x5, 0x7, 0x9}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x2, 0x0}, 0x8) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001740)=@bpf_tracing={0x1a, 0xd, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, [@map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb73}, @map_val={0x18, 0xfcbb19a140524292, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}]}, &(0x7f0000000500)='syzkaller\x00', 0x80, 0x1000, &(0x7f0000000640)=""/4096, 0x40f00, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x6, 0x9, 0x9}, 0x10, 0x2167c, 0xffffffffffffffff, 0xa, &(0x7f0000001640)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, r0, r2], &(0x7f0000001680)=[{0x4, 0x4, 0x9, 0x2}, {0x4, 0x3, 0xb, 0x5}, {0x4, 0x3, 0xc, 0xa}, {0x3, 0xd7, 0xb, 0x1}, {0x5, 0x5, 0xb, 0x6}, {0x2, 0x2, 0xd, 0x9}, {0x0, 0x2, 0x10, 0x9}, {0x3, 0x4, 0xb, 0x8}, {0x5, 0x4, 0x10, 0x5}, {0x1, 0x5, 0xf, 0x6}], 0x10, 0x100, @void, @value}, 0x94) pipe(&(0x7f0000001800)={0xffffffffffffffff}) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001880)=@generic={&(0x7f0000001840)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0xd, 0x17, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x35ab26b}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='GPL\x00', 0xb, 0x0, 0x0, 0x40f00, 0x4, '\x00', r6, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x48}, 0x10, r7, r8, 0x2, &(0x7f00000018c0)=[r9, r10], &(0x7f0000001900)=[{0x1, 0x4, 0xb, 0xb}, {0x0, 0x1, 0x8}], 0x10, 0x4, @void, @value}, 0x94) write(r4, &(0x7f0000000100)="520003000100b8", 0x7) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000000100005ff0000006f000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006c"], 0x34}}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000002500010324bd7002fddbdf6501"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1m9.419010432s ago: executing program 0 (id=2661): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x4000000, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) close(r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000001280)="b9ffddc1ddcccdde75537d5326a4dfff70bf2dfe443b1b5e2a9080f3", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000019c0)=@base={0x4, 0x4, 0x4, 0x1, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffa, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000240)={'bond0\x00', &(0x7f00000005c0)=@ethtool_drvinfo={0x3, "751b3a5054b25e3ad3efb5b662a743dd52bacca09240fdeb292bffd4050ef6cf", "0a1819733e1d64dbd19cb1e02bb39bb7a20e10a3459692faa0a8df09016daa6e", "44c1d129371e13cc3bcc669fd833c7391408ffdfa30285a5aa48141142ce5700", "242f28691b9da04dd4ff5e98d4030eb9000000000000000300", "9ca5fb02099a024df59efd8c9a8ef6c3649beea9eddf6b4cd2134dbf00", "858a1ba8d3f4dccddf00"}}) 1m9.338549194s ago: executing program 2 (id=2662): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x814) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x20, 0x40, 0x1001000, 0x756, {{0x5, 0x4, 0x2, 0x2, 0x4, 0x66, 0x0, 0xe9, 0x2f, 0x0, @private=0x2, @loopback}}}}) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1402005c", @ANYRES16=r2, @ANYBLOB="020027bd7000fddbdf2515000000"], 0x14}}, 0x2004000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000280)}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f00000008c0), 0x4) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="b8000000140001000000000000000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000a00b00029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}}, 0x10) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r3) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r3, &(0x7f0000000880)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, r6, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x17ce}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x4040000) r7 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3}], 0x1, 0x40800) recvmsg(r7, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x10002) ioctl$int_in(r8, 0x5452, &(0x7f0000000240)=0x6) sendmmsg$unix(r9, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000700)='E', 0x1}], 0x1, 0x0, 0x0, 0x14008000}}], 0x1, 0x40000) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) epoll_create1(0x80000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1m9.303934115s ago: executing program 3 (id=2664): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x814) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x20, 0x40, 0x1001000, 0x756, {{0x5, 0x4, 0x2, 0x2, 0x4, 0x66, 0x0, 0xe9, 0x2f, 0x0, @private=0x2, @loopback}}}}) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0}, 0x2004000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000280)}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x10) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r1) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000880)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x4040000) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45", 0xc8}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x10002) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1m9.142364267s ago: executing program 3 (id=2665): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x38, r1, 0x852dd6c070cd7e4d, 0xffdfffff, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x38}, 0x4, 0xfd}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000440)=0x40) writev(r5, &(0x7f0000000780)=[{&(0x7f0000000340)="41c1275abffb30b21f98326c1a30825aeb0243eec955d1ada4aeeaa61b5d3962b81d827c962f3ede14eb95814763b2fd4f622e4b55f80de9fa38431d7dffa88a0f41d8fdd5763b63a9da11ab64cc1ddb3646909b801e93f9c80c972fa2eb1ee646ef3da376e7a32923fbda3eef86dc9386f46143b88951cba964f932173931ac94c77df479b9cb1740daf29d8e32c976de0c56785e07db49c6e1b4c37bf6408fdb717e6453648cdbb89da08770b08c561957c633fd62f6ec5e36c228fbda6632cb689df332253ab12365cb658770cf", 0x38}], 0x1000000000000351) recvmsg$unix(r5, &(0x7f0000000400)={&(0x7f00000000c0), 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f00000001c0)=""/139, 0x8b}, {&(0x7f00000002c0)=""/215, 0xd7}], 0x3}, 0x120) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x14, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffa}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1m9.069023212s ago: executing program 0 (id=2666): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="ffa10000100000001c001a8008000280", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x0) 1m8.962576162s ago: executing program 2 (id=2668): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000005dc0)=[{{0x0, 0x0, 0x0}, 0x4fe}], 0x1, 0x0, 0x0) 1m8.912965355s ago: executing program 3 (id=2669): socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r1) sendmsg$inet(r1, 0x0, 0x2000c854) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="03"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f000000c140), r0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001000000080001"], 0x6c}}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0103"], 0x34}, 0x1, 0x0, 0x400000000000000}, 0x0) recvmsg(r3, 0x0, 0x10002) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) 1m8.88718132s ago: executing program 0 (id=2670): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB], 0xffdd) close(r2) close(0x4) 1m8.825731001s ago: executing program 3 (id=2671): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1402005c", @ANYRES16=r0, @ANYBLOB="020027bd7000fddbdf2515"], 0x14}}, 0x2004000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xb8}}, 0x10) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1m8.760988626s ago: executing program 2 (id=2672): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x814) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140200", @ANYRES16=r1, @ANYBLOB="020027"], 0x14}}, 0x2004000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000280)}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[], 0xb8}}, 0x10) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1m8.699400161s ago: executing program 3 (id=2673): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x814) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140200", @ANYRES16=r1, @ANYBLOB="020027"], 0x14}}, 0x2004000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000280)}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1m8.469077889s ago: executing program 32 (id=2673): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x814) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140200", @ANYRES16=r1, @ANYBLOB="020027"], 0x14}}, 0x2004000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000280)}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1m8.234006972s ago: executing program 0 (id=2675): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x814) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x20, 0x40, 0x1001000, 0x756, {{0x5, 0x4, 0x2, 0x2, 0x4, 0x66, 0x0, 0xe9, 0x2f, 0x0, @private=0x2, @loopback}}}}) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0}, 0x2004000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000280)}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x10) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r1) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000880)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x4040000) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x10002) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1m8.233536536s ago: executing program 33 (id=2675): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x814) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x20, 0x40, 0x1001000, 0x756, {{0x5, 0x4, 0x2, 0x2, 0x4, 0x66, 0x0, 0xe9, 0x2f, 0x0, @private=0x2, @loopback}}}}) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0}, 0x2004000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000280)}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x10) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r1) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000880)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x4040000) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x10002) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1m8.19289646s ago: executing program 2 (id=2676): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x4000000, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) close(r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000001280)="b9ffddc1ddcccdde75537d5326a4dfff70bf2dfe443b1b5e2a9080f3", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000019c0)=@base={0x4, 0x4, 0x4, 0x1, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffa, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000240)={'bond0\x00', &(0x7f00000005c0)=@ethtool_drvinfo={0x3, "751b3a5054b25e3ad3efb5b662a743dd52bacca09240fdeb292bffd4050ef6cf", "0a1819733e1d64dbd19cb1e02bb39bb7a20e10a3459692faa0a8df09016daa6e", "44c1d129371e13cc3bcc669fd833c7391408ffdfa30285a5aa48141142ce5700", "242f28691b9da04dd4ff5e98d4030eb9000000000000000300", "9ca5fb02099a024df59efd8c9a8ef6c3649beea9eddf6b4cd2134dbf00", "858a1ba8d3f4dccddf00"}}) 1m8.192650051s ago: executing program 34 (id=2676): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x4000000, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) close(r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000001280)="b9ffddc1ddcccdde75537d5326a4dfff70bf2dfe443b1b5e2a9080f3", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000019c0)=@base={0x4, 0x4, 0x4, 0x1, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffa, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000240)={'bond0\x00', &(0x7f00000005c0)=@ethtool_drvinfo={0x3, "751b3a5054b25e3ad3efb5b662a743dd52bacca09240fdeb292bffd4050ef6cf", "0a1819733e1d64dbd19cb1e02bb39bb7a20e10a3459692faa0a8df09016daa6e", "44c1d129371e13cc3bcc669fd833c7391408ffdfa30285a5aa48141142ce5700", "242f28691b9da04dd4ff5e98d4030eb9000000000000000300", "9ca5fb02099a024df59efd8c9a8ef6c3649beea9eddf6b4cd2134dbf00", "858a1ba8d3f4dccddf00"}}) 1m7.200845877s ago: executing program 1 (id=2475): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xc3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket(0x23, 0x5, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r3, 0x10d, 0xc9, &(0x7f0000000000), &(0x7f0000000240)=0x4) write(r2, &(0x7f0000000000)="d1d0", 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xd, 0x200cc, 0x6, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='D', &(0x7f0000000240), 0x4b2, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f0000000640), &(0x7f0000001740), 0x2, r5}, 0x38) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7fe}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x1, 0x9, 0xc5, @vifc_lcl_ifindex=r7, @remote}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) close(0x4) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x8befc8e1ce82796c) sendmmsg(r6, &(0x7f00000001c0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="42bd8a104b0f12b0206537cc393cced511a505275611a3940c9ce3f9e9431fe5de3e51d5d1d8041c03e047cfe185bcc47b45aa51fdd198b8d0ebd7145a9a46d04d4f956775c2b0fd99124a20b000e4b8cb1cfc5f6a152a015d86f0f61626a493e92b0b44d0ae88d3e9838c8819db4a3bf57d302d", 0x74}], 0x1, &(0x7f0000000400)=[{0xc0, 0x29, 0x0, "d2141f562fd3c5cadeae01cb85b05f96546d6cf85a9d7961570649a63ef0db13259831f644ec4ae9236e24d4a792531d2bd246c0f62d0ea4606344c30b4257f7a4d4ec270d83030caae2d936b662f3757d128d22721a9e763383f00040cf1b1a4a151197b08db6f8a7c944c7ab689ea2cc20b70701ad6010ba13e297ec925b46edbb601cbb00a9ea31e672935599d4773cba988ff3b661fe59a04ee6758febed62f6b3b5c6ab2d5fe54bc2bf20"}], 0xc0}}], 0x1, 0x8000) 1m6.899834447s ago: executing program 35 (id=2475): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xc3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket(0x23, 0x5, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r3, 0x10d, 0xc9, &(0x7f0000000000), &(0x7f0000000240)=0x4) write(r2, &(0x7f0000000000)="d1d0", 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xd, 0x200cc, 0x6, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='D', &(0x7f0000000240), 0x4b2, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f0000000640), &(0x7f0000001740), 0x2, r5}, 0x38) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7fe}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x1, 0x9, 0xc5, @vifc_lcl_ifindex=r7, @remote}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) close(0x4) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x8befc8e1ce82796c) sendmmsg(r6, &(0x7f00000001c0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="42bd8a104b0f12b0206537cc393cced511a505275611a3940c9ce3f9e9431fe5de3e51d5d1d8041c03e047cfe185bcc47b45aa51fdd198b8d0ebd7145a9a46d04d4f956775c2b0fd99124a20b000e4b8cb1cfc5f6a152a015d86f0f61626a493e92b0b44d0ae88d3e9838c8819db4a3bf57d302d", 0x74}], 0x1, &(0x7f0000000400)=[{0xc0, 0x29, 0x0, "d2141f562fd3c5cadeae01cb85b05f96546d6cf85a9d7961570649a63ef0db13259831f644ec4ae9236e24d4a792531d2bd246c0f62d0ea4606344c30b4257f7a4d4ec270d83030caae2d936b662f3757d128d22721a9e763383f00040cf1b1a4a151197b08db6f8a7c944c7ab689ea2cc20b70701ad6010ba13e297ec925b46edbb601cbb00a9ea31e672935599d4773cba988ff3b661fe59a04ee6758febed62f6b3b5c6ab2d5fe54bc2bf20"}], 0xc0}}], 0x1, 0x8000) 3.204827117s ago: executing program 8 (id=3205): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x814) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1402005c", @ANYRES16=r0, @ANYBLOB="020027bd7000fddbdf2515"], 0x14}}, 0x2004000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[], 0xb8}}, 0x10) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r1) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000880)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x4040000) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.018373139s ago: executing program 8 (id=3208): ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x4010744d, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x310, 0xffffffff, 0x0, 0x1a8, 0xb0, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @dev, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6bc128419cfb67daad5b4809088400ed0000006c00000000000100040500"}}}, {{@uncond, 0x287, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@statistic={{0x38}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x8, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x0, 0x0, &(0x7f0000000c40)='syzkaller\x00', 0x100, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff0802110000"], 0x6f4}}, 0x0) 2.828518668s ago: executing program 8 (id=3209): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x814) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, 0x0, 0x2004000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.644363992s ago: executing program 8 (id=3211): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448d4, &(0x7f00000002c0)={0x300, 0x4, "00fa00"}) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6fc40b5d175e86ac0b7a9fd7f1748af98902340eb", 0xa4}, {&(0x7f0000000400)="029993440c7a0c95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c", 0x63}, {&(0x7f0000000e00)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619327cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58625fe19516af43c9870c5b8191e23778abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074e89477bf6ed2ab648b0498ac8c0f90844ed9a26675199d5ff9b391c1dec077b5099cf9aecd1a9d94e235a7", 0xd0}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9ddac4fe6db927cd4d03965f42d9c7513eff1631baa83e3daf514c600450374f6d76b8fcf2bc3eca29ce7538f85aa34b2bdcc17ecd080f0850377f771a4e8693703da4e347e0165f00872a21845e17030de0ff47bc869de32ee24ca05e6f805ec0a1d0257e0e6f900e6cfb68e827b515d05bf2cc14e53e04b713a851bd656f209da5", 0xb6}, {&(0x7f0000000480)="4068745fc217775e9fca3477d3c929c1231d710ed7bb68bf2f127cb83703392703f53051ec7ebd4d519a9db1973eaeda928822aaa8d3a9677374a52305e2ad47d5802e40bd678517886e0c9ec482da71", 0x50}], 0x5}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000fc0)="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", 0x11a}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bde5fbc390c7ccb9d3c1020e80bd0659e82d861dc6fe4c62639134c54e708601eae992000000", 0xd2}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472f0700000000000000e71ba62334303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf648c910000000000000000", 0x7b}, {&(0x7f0000000b80)="bd2f6aa36cea0e4bccda24dc5bd69ad762e998d923018ec9f30d63c7059c3c786069915581888508ff589f82857ff546b23b88d6bd61f1efc982005bf6c9abc4fe2caf32ef3ff105b69346a4d09afd7b0b8bd5f8c25f0eab84d8ad1b65e2acc2ef0a9b0f9964d5b05db134bdd9f261b7349a42b463709b19b5605bd160899eaba704b3b37af409d2c47e808b3767959756c1273617b0b0f42f9caec585a7c463", 0xa0}], 0x4}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="b5d383823677f025217943343e36323daecfa0fdc5beb5a7ac332a11533627b41dbe33a6be0055bf716aa2b23b97d43cc40c632f6b9850f364ba0831ed0d6f7157f204275aa850d992d81ba6ab984bd809254e847b644cf6459a813bc3ebba62168141343c9938965233cdaef85778ce05c77e962fd69eb05654e64f1867398e202b18f20f783d274ab9ff6deff8cc91001fff575cb5ba4920e8ebc08f6e6dc6", 0xa0}, {&(0x7f0000000500)="e47ecfc6ce6d4d9cc5a0fbf98f301803da3adfbec8a1d5324076b744b24bc7cf83120d4819726e827d90219c7100dc54801b32c3a9a69a238db1f4d16464062d870e812ee381b6b3c234824a4a4475f9ee81286836e549", 0x57}], 0x2}}], 0x3, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a", 0x3, 0x11, 0x0, 0x0) 2.562198028s ago: executing program 6 (id=3212): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x814) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140200", @ANYRES16=r1, @ANYBLOB="020027"], 0x14}}, 0x2004000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000280)}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[], 0xb8}}, 0x10) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.341435803s ago: executing program 6 (id=3213): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x20, 0x40, 0x1001000, 0x756, {{0x5, 0x4, 0x2, 0x2, 0x4, 0x66, 0x0, 0xe9, 0x2f, 0x0, @private=0x2, @loopback}}}}) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1402005c", @ANYRES16], 0x14}}, 0x2004000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000280)}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[], 0xb8}}, 0x10) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0, 0x6f4}}, 0x0) 2.249828633s ago: executing program 6 (id=3214): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @remote}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x1d}, r6}, 0x14) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1c, 0x0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000000)={@local, 0x78, r8}) syz_emit_ethernet(0x6e, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6008008000383a00fc020000000000000000000000000000ff020000000000000000000000000001020090780000000a608cb02b00002f000000000000fffffffffe8000000000000000000000000000aa3a0004000000000000000000000000334a155b4b2f4353705b51d23f1894f080dac550672e56661146ede6f4079a960e3daf116e49"], 0x0) 2.181690275s ago: executing program 6 (id=3217): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_opts(r0, 0x0, 0xb, &(0x7f0000000000)="89", 0x1) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @random="4489a2bc242d", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0xff, 0x1, 0x0, @private=0xa010104, @local}, @time_exceeded={0x4, 0x1, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @broadcast=0xac14140a, @broadcast=0xac1414bb, {[@timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@local}, {@loopback}, {@loopback}, {@dev}, {@dev={0xac, 0x14, 0x14, 0x1}}, {@rand_addr=0x64010101}, {@remote, 0x2}]}, @ra={0x94, 0x4, 0x1}]}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x90000004}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40050) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000006000000000000000100000d030000000000000003000000000000000000000604000000040000000000000c02000000000000005f"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) unshare(0xc000000) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0xf1, 0x8, 0x7, 0x619347a8, 0x5, 0x3]}, &(0x7f00000002c0)=0x78) 2.06502919s ago: executing program 7 (id=3218): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000280)}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="b8000000140001000000000000000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000a"], 0xb8}}, 0x10) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0, 0x6f4}}, 0x0) 1.943770607s ago: executing program 7 (id=3220): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x814) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1402005c", @ANYRES16=r1], 0x14}}, 0x2004000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, 0x0}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="b8000000140001000000000000000000ac1414aa00"/56, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000900000000000000000000000000000003000000000000000200000000000000ffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffffff"], 0xb8}}, 0x10) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r2) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f0000000880)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, r4, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x54}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x17ce}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x4040000) r5 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.85110346s ago: executing program 4 (id=3221): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x814) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x2004000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.708880831s ago: executing program 7 (id=3222): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001840), 0x0, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet_int(r1, 0x0, 0x19, &(0x7f0000000140)=0x400030, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@random="f5613454d5c8", @link_local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @multicast, @remote, @multicast, @local}}}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000002800)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000100)="930d", 0x2}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e22, 0x6, @private2, 0x8}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000500)='J', 0x1}], 0x1}}], 0x2, 0xc010) shutdown(r0, 0x1) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r3, 0x0, 0xffffffff000) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000240)) write$tun(r3, &(0x7f0000002880)={@val={0x0, 0x86dd}, @val={0x0, 0x80, 0x9, 0x5, 0x8, 0x1}, @ipv4=@gre={{0x18, 0x4, 0x3, 0x15, 0x118d, 0x66, 0x0, 0x5, 0x2f, 0x0, @loopback, @empty, {[@ssrr={0x89, 0x27, 0x5c, [@loopback, @local, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @local, @multicast1, @remote, @multicast1]}, @generic={0xd, 0x8, "5bd550041a33"}, @ssrr={0x89, 0x1b, 0x87, [@multicast1, @rand_addr=0x64010101, @rand_addr=0x64010102, @private=0xa010101, @remote, @remote]}, @end]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x1000, 0x1, [], "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"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x0, 0xf6], "e410f917e511fc73eb5b144d2cdfc661769975e88ca351c1ee3fa33566fe2aef4d8136918992daac1b3ade51f12d5868d7f627d9305e0ebde0fbc56a"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x2, 0xe27], "7e655b923a74d2bc0cb7af7d68cf79031c7dcabf80bebab44947ce93938b18b0dbbe95046abfaa3b93a996f43ba728d3325e8538c61944a85b42e223e6"}, {0x8, 0x88be, 0x1, {{0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x3, 0x6}, 0x1, {0xfffffff3}}}, {0x8, 0x22eb, 0x1, {{0x1, 0x2, 0x7, 0x3, 0x0, 0x3, 0x5, 0xc6}, 0x2, {0x4, 0x400, 0x0, 0x17, 0x0, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x1, "2949854d8f8aa0e4754103cba6d47592e4f20e40569aa3024467ddcdb92b95affd475732f0b172cdac9683646372ae1d91c721edd06f4d5125f280912c48349fb2e6a6b4e35149ade066e1aed2813e4ebdbf4dc232e9ac6c6d75f0864b49ddb2b87849d5eae603e0"}}}}, 0x119b) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) 1.708516737s ago: executing program 5 (id=3223): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x814) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140200", @ANYRES16=r1, @ANYBLOB="020027"], 0x14}}, 0x2004000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000280)}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[], 0xb8}}, 0x10) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.692489022s ago: executing program 4 (id=3224): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711214000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$inet_sctp(0x2, 0x5, 0x84) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x17, 0x0, 0x6, 0xffff8000, 0x0, 0xffffffffffffffff, 0x4000087, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$cgroup_ro(r3, &(0x7f0000000300)='memory.current\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x9, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8, 0x0, 0x0, 0x6}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$rds(0x15, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) 1.676688886s ago: executing program 8 (id=3225): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) (fail_nth: 5) 1.180959388s ago: executing program 5 (id=3226): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x814) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1402005c", @ANYRES16=r1], 0x14}}, 0x2004000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000280)}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="b8000000140001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xb8}}, 0x10) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_genetlink_get_family_id$mptcp(0x0, r2) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f0000000880)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={0x0}, 0x1, 0x0, 0x0, 0x5}, 0x4040000) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) 1.117032251s ago: executing program 8 (id=3227): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000003700), r1) sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000003bc0)={&(0x7f0000003b80)={0x24, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x24}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0xfffd, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000001c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "ecf0ff19", "4e67cb72f328ac2f"}, 0x28) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000580)="781fd1169bc02decbd902949dd5be7", 0xf}], 0x1) setsockopt$inet6_tcp_int(r4, 0x6, 0x4, &(0x7f0000000140)=0xea6, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000240)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e23, @local}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000010c0)={r5}, &(0x7f0000000340)=0x8) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x5) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000040)={0xe0000014}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r7) 1.072525053s ago: executing program 4 (id=3228): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001a80)=ANY=[@ANYBLOB="2000000015340e8b64142b7b89dd21a2976af5dd6ab8a10560350da51b67849f3ed442f92b5229db6f3fe2b0ad99286c9351bb742809a217e5e9f127da21897321fdffffffff9473d3b0acd92aa415286a3b0010039ef61b89c710538c4ec34b238017bf0ae275e30434477d0abb6d454019ef6f3cf9c5bd7eeaf80e0e673b2744cfd96ab3c738e983a0bfcf9f50bc3570f5ec97f9fb9b3b4eedb2d3d5fff02444de52d2c354bbfee035ff62ecdb67f65f64d2374cfd74d862f80c1c771920f275e500"/204, @ANYRES16=r1, @ANYBLOB="0b0027bd7000fcdbdf25240000000a0001007770616e30000000"], 0x20}, 0x1, 0x0, 0x0, 0x20040004}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000019c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa20080045000028000000000002907800000000ffffffff11e090780000000062ea0000000000000000000059eb334daecf8119a1647958221649b17e4e1a4e4ac4b0beb89ac547b33e3b980c7261985ba399f9e8f6035b948c72e923347979a1802a691048b6bd52a42da4ab565e205b211213f156becaddf12b30bd91ea4d8780d29e05c11f000000000000004b3c8b168807568756a0a61919"], 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="ac03000010000100"/20, @ANYRES32=r4, @ANYBLOB="000100000000000084031680100001800c000700ffffff7f04"], 0x3ac}}, 0x4004014) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x85, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) recvmsg$can_raw(r3, &(0x7f0000000580)={&(0x7f0000000180)=@un=@abs, 0x80, &(0x7f0000001900)=[{&(0x7f00000002c0)=""/33, 0x21}, {0xffffffffffffffff}, {&(0x7f0000000400)=""/167, 0xa7}, {&(0x7f0000000340)=""/54, 0x36}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f0000001740)=""/155, 0x9b}, {&(0x7f00000004c0)=""/7, 0x7}, {&(0x7f0000001840)=""/176, 0xb0}], 0x9}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00'}, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="240000002e0001002aab70000000000008000000"], 0x24}], 0x1}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001b80)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="000000000099980fba0000008100de399d0000755349622409000000000000146024322c62823be999e1fad22fc28a3fe417ff030000d2c635936f6a542b0008005aac20bbf37090721f3443b7b2a6e8a72510c88d36197e194a98fb484a0861e403b977ca87691b8334b5ca4da8567e90c663b81a51ee81fce05d6766149988c3dbc63fd860bcb01f8036b88eeffe9fea346442dbf5ec29ee8c68300f474724070d5a47836f8e677ac899f1e92eb38e763af7e694b4bd284fdd4a454a24e73281b8f572041f49fa21bbb0", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000100)={r10}, &(0x7f0000000140)=0x8) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008000b"], 0x54}}, 0x0) pipe(&(0x7f0000000500)) 919.767093ms ago: executing program 5 (id=3229): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x814) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, 0x0, 0x2004000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000280)}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xb8}}, 0x10) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 725.00726ms ago: executing program 6 (id=3230): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000280)}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="b8000000140001000000000000000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000a"], 0xb8}}, 0x10) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0, 0x6f4}}, 0x0) 723.519357ms ago: executing program 7 (id=3231): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@null, @null, @null, @remote, @default, @rose, @null, @rose]}, &(0x7f0000000080)=0x48, 0x80800) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000010003b0c00"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000300012800b00010065727370616e00002000028004001200060011004e2000000500160001000000060010004e230000"], 0x50}}, 0x0) sendmmsg$inet(r1, &(0x7f0000000540)=[{{&(0x7f0000000100)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="a8d0dbebf31adc48fd3505d85d87f77622787649eb198aabbf9a83517fed772d23f07f46ee2e3d3bbe3c2d5bb13f8288b0d1e29ab6f6d7d76a34d69daf7e52ab8ed2c394ed0b8a808d0fef8f5d01fbecf7efd21fc1390f02838292e3092c3f53dc4e21bf457d852feebcc9d67dfdab4bdc2fb5ab243b3eaed2ac7475d7f6e79513ba6bf1784d37f97e1699cd10d5dd21b47717555d45a4d265861025d77ad92ceba85ac0783795c663ac22a1ca2efa49b015bb", 0xb3}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="2c000000000000000000000007000000831b9200000000ac141417e0000001ac14140ee000000100000000000000000014000000000000000000000002000000ff0f0000000000001c000000000000000000000008000000", @ANYRES32=r4, @ANYBLOB="00000000640101010000000014000000000000000000000001000000020000000000000014000000000000000000000002000000080000000000000054000000000000000000000007000000830334443481d30a01010100000008ac1e00010000000564010100000000000a010100000000097f0000010001000100000000000009e2bc9404010044089f200000000100001400000000e80000000000000100"/172], 0x108}}], 0x1, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x18) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000000102010210000000e0fd4630a514373537ec59b60dea08cb0000020000071800018014000180"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x74}}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r9, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r8, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, 0x0, 0x20000004) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r11 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r11, 0x101, 0x6, &(0x7f0000000040)=0x2, 0x4) socket$alg(0x26, 0x5, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, 0x0}, 0x20) 649.752352ms ago: executing program 4 (id=3232): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000280)}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="b8000000140001000000000000000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000a"], 0xb8}}, 0x10) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0, 0x6f4}}, 0x0) 627.285055ms ago: executing program 5 (id=3233): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1402005c", @ANYRES16=r1, @ANYBLOB="020027"], 0x14}}, 0x2004000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000280)}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB], 0x6f4}}, 0x0) 512.830847ms ago: executing program 6 (id=3234): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSETELEM={0x1c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x900, 0x0, 0x0, {0x5, 0x0, 0x8}}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}}, @NFT_MSG_NEWFLOWTABLE={0x24, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd8}}, 0x20008000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r2, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000"], 0x5b0}, 0x20008001) sendmsg$inet6(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="376cd97cb39285495ddf4bd660c811b4dca74500799dac8f26884d6d4cc781a3b510574bd853ed8eae31de87a5", 0x2d}], 0x1}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) shutdown(r3, 0x1) r4 = socket$inet(0xa, 0x801, 0x84) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x891c) shutdown(0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)="b970f6aa2bfdc9d7afbfe5c81e0b9b00b49015199ee375d7bd1e9a044aead3faf4a0f39154893e76f7c07b1ef464add3dac1272dfb540106eff5d18585394f8978a2a6e597b9479e904e68cfe4474d047fbd2a138da70c600c760ce32fdd162b9866cd8b1d2908ea2599011aba31a4b1193250944e602609300cbbb8f2bd89acef5fd0471e96cd071c31f8", 0x8b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) shutdown(r4, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x4040850) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) recvmmsg(r3, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r8, 0x112, 0x4, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90324fc6004001c000a000200053582c137153e37000c0480fc0b10000300", 0x33fe0}], 0x1}, 0x0) 469.039846ms ago: executing program 4 (id=3235): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448d4, &(0x7f00000002c0)={0x300, 0x4, "00fa00"}) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6fc40b5d175e86ac0b7a9fd7f1748af98902340eb", 0xa4}, {&(0x7f0000000400)="029993440c7a0c95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c", 0x63}, {&(0x7f0000000e00)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619327cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58625fe19516af43c9870c5b8191e23778abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074e89477bf6ed2ab648b0498ac8c0f90844ed9a26675199d5ff9b391c1dec077b5099cf9aecd1a9d94e235a7", 0xd0}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9ddac4fe6db927cd4d03965f42d9c7513eff1631baa83e3daf514c600450374f6d76b8fcf2bc3eca29ce7538f85aa34b2bdcc17ecd080f0850377f771a4e8693703da4e347e0165f00872a21845e17030de0ff47bc869de32ee24ca05e6f805ec0a1d0257e0e6f900e6cfb68e827b515d05bf2cc14e53e04b713a851bd656f209da5", 0xb6}, {&(0x7f0000000480)="4068745fc217775e9fca3477d3c929c1231d710ed7bb68bf2f127cb83703392703f53051ec7ebd4d519a9db1973eaeda928822aaa8d3a9677374a52305e2ad47d5802e40bd678517886e0c9ec482da71", 0x50}], 0x5}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000fc0)="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", 0x11a}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bde5fbc390c7ccb9d3c1020e80bd0659e82d861dc6fe4c62639134c54e708601eae992000000", 0xd2}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472f0700000000000000e71ba62334303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf648c910000000000000000", 0x7b}, {&(0x7f0000000b80)="bd2f6aa36cea0e4bccda24dc5bd69ad762e998d923018ec9f30d63c7059c3c786069915581888508ff589f82857ff546b23b88d6bd61f1efc982005bf6c9abc4fe2caf32ef3ff105b69346a4d09afd7b0b8bd5f8c25f0eab84d8ad1b65e2acc2ef0a9b0f9964d5b05db134bdd9f261b7349a42b463709b19b5605bd160899eaba704b3b37af409d2c47e808b3767959756c1273617b0b0f42f9caec585a7c463", 0xa0}], 0x4}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="b5d383823677f025217943343e36323daecfa0fdc5beb5a7ac332a11533627b41dbe33a6be0055bf716aa2b23b97d43cc40c632f6b9850f364ba0831ed0d6f7157f204275aa850d992d81ba6ab984bd809254e847b644cf6459a813bc3ebba62168141343c9938965233cdaef85778ce05c77e962fd69eb05654e64f1867398e202b18f20f783d274ab9ff6deff8cc91001fff575cb5ba4920e8ebc08f6e6dc6", 0xa0}, {&(0x7f0000000500)="e47ecfc6ce6d4d9cc5a0fbf98f301803da3adfbec8a1d5324076b744b24bc7cf83120d4819726e827d90219c7100dc54801b32c3a9a69a238db1f4d16464062d870e812ee381b6b3c234824a4a4475f9ee81286836e549", 0x57}], 0x2}}], 0x3, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a", 0x3, 0x11, 0x0, 0x0) 422.584738ms ago: executing program 5 (id=3236): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x814) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140200", @ANYRES16=r1, @ANYBLOB="020027"], 0x14}}, 0x2004000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000280)}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[], 0xb8}}, 0x10) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 292.532821ms ago: executing program 4 (id=3237): r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x20800, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000001c0)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000200)=0x2, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@gettaction={0x44, 0x32, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000100)={0x3c, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_FLAGS={0x14, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}]}]}, 0x3c}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) 181.006759ms ago: executing program 5 (id=3238): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a01020000"], 0x14}}, 0x0) close(0x3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$packet(0x11, 0x3, 0x300) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, r3, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0xc045}, 0x40000) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18ecffffff00000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x37, 0x301, 0x270bd24, 0x25dfdbfa, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x4, &(0x7f0000000140), &(0x7f00000001c0)=0x4) sendmsg$nl_route(r7, 0x0, 0x20010084) 131.203522ms ago: executing program 7 (id=3239): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x814) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1402005c", @ANYRES16=r1], 0x14}}, 0x2004000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000280)}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="b8000000140001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xb8}}, 0x10) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_genetlink_get_family_id$mptcp(0x0, r2) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f0000000880)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={0x0}, 0x1, 0x0, 0x0, 0x5}, 0x4040000) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 7 (id=3240): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x814) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1402005c", @ANYRES16=r0, @ANYBLOB="020027bd7000fddbdf"], 0x14}}, 0x2004000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xb8}}, 0x10) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): 59999][T11793] ? __virt_addr_valid+0x45f/0x530 [ 325.760015][T11793] ? __phys_addr_symbol+0x2f/0x70 [ 325.760030][T11793] ? __check_object_size+0x47a/0x730 [ 325.760054][T11793] netlink_sendmsg+0x8de/0xcb0 [ 325.760087][T11793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 325.760111][T11793] ? aa_sock_msg_perm+0x91/0x160 [ 325.760139][T11793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 325.760158][T11793] __sock_sendmsg+0x221/0x270 [ 325.760182][T11793] ____sys_sendmsg+0x53a/0x860 [ 325.760204][T11793] ? __pfx_____sys_sendmsg+0x10/0x10 [ 325.760217][T11793] ? __fget_files+0x2a/0x410 [ 325.760246][T11793] ? __fget_files+0x2a/0x410 [ 325.760275][T11793] __sys_sendmsg+0x269/0x350 [ 325.760298][T11793] ? __pfx___sys_sendmsg+0x10/0x10 [ 325.760327][T11793] ? do_sys_openat2+0x17a/0x1d0 [ 325.760372][T11793] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 325.760396][T11793] ? do_syscall_64+0x100/0x230 [ 325.760418][T11793] ? do_syscall_64+0xb6/0x230 [ 325.760439][T11793] do_syscall_64+0xf3/0x230 [ 325.760457][T11793] ? clear_bhb_loop+0x35/0x90 [ 325.760480][T11793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.760500][T11793] RIP: 0033:0x7fe360d8d169 [ 325.760515][T11793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.760529][T11793] RSP: 002b:00007fe361b93038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 325.760547][T11793] RAX: ffffffffffffffda RBX: 00007fe360fa5fa0 RCX: 00007fe360d8d169 [ 325.760559][T11793] RDX: 0000000000004000 RSI: 0000400000000280 RDI: 0000000000000003 [ 325.760569][T11793] RBP: 00007fe361b93090 R08: 0000000000000000 R09: 0000000000000000 [ 325.760580][T11793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.760589][T11793] R13: 0000000000000000 R14: 00007fe360fa5fa0 R15: 00007ffe63c97aa8 [ 325.760615][T11793] [ 326.324016][T11806] bond6 (unregistering): Released all slaves [ 326.569446][T11824] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2196'. [ 326.985042][T11848] __nla_validate_parse: 1 callbacks suppressed [ 326.985061][T11848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2206'. [ 327.072698][T11850] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2208'. [ 327.101116][T11850] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2208'. [ 327.314391][T11859] xt_TCPMSS: Only works on TCP SYN packets [ 327.336252][T11859] tipc: Can't bind to reserved service type 1 [ 327.931450][T11908] netlink: 'syz.0.2227': attribute type 1 has an invalid length. [ 328.121836][T11919] FAULT_INJECTION: forcing a failure. [ 328.121836][T11919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 328.135414][T11919] CPU: 1 UID: 0 PID: 11919 Comm: syz.2.2232 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 328.135437][T11919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 328.135447][T11919] Call Trace: [ 328.135453][T11919] [ 328.135460][T11919] dump_stack_lvl+0x241/0x360 [ 328.135489][T11919] ? __pfx_dump_stack_lvl+0x10/0x10 [ 328.135506][T11919] ? __pfx__printk+0x10/0x10 [ 328.135527][T11919] ? snprintf+0xda/0x120 [ 328.135550][T11919] should_fail_ex+0x40a/0x550 [ 328.135574][T11919] _copy_to_user+0x31/0xb0 [ 328.135596][T11919] simple_read_from_buffer+0xca/0x150 [ 328.135621][T11919] proc_fail_nth_read+0x1e9/0x250 [ 328.135645][T11919] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 328.135669][T11919] ? rw_verify_area+0x243/0x630 [ 328.135685][T11919] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 328.135707][T11919] vfs_read+0x1f8/0xb40 [ 328.135724][T11919] ? fdget_pos+0x254/0x320 [ 328.135748][T11919] ? __pfx___mutex_lock+0x10/0x10 [ 328.135767][T11919] ? __pfx_vfs_read+0x10/0x10 [ 328.135787][T11919] ? __fget_files+0x2a/0x410 [ 328.135808][T11919] ? __fget_files+0x395/0x410 [ 328.135827][T11919] ? __fget_files+0x2a/0x410 [ 328.135855][T11919] ksys_read+0x18f/0x2b0 [ 328.135874][T11919] ? __pfx_ksys_read+0x10/0x10 [ 328.135892][T11919] ? do_syscall_64+0x100/0x230 [ 328.135914][T11919] ? do_syscall_64+0xb6/0x230 [ 328.135935][T11919] do_syscall_64+0xf3/0x230 [ 328.135954][T11919] ? clear_bhb_loop+0x35/0x90 [ 328.135978][T11919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.135997][T11919] RIP: 0033:0x7f453ab8bb7c [ 328.136012][T11919] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 328.136027][T11919] RSP: 002b:00007f453b932030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 328.136051][T11919] RAX: ffffffffffffffda RBX: 00007f453ada5fa0 RCX: 00007f453ab8bb7c [ 328.136062][T11919] RDX: 000000000000000f RSI: 00007f453b9320a0 RDI: 0000000000000004 [ 328.136072][T11919] RBP: 00007f453b932090 R08: 0000000000000000 R09: 000000000000001c [ 328.136083][T11919] R10: fffffeffffff7fbf R11: 0000000000000246 R12: 0000000000000001 [ 328.136093][T11919] R13: 0000000000000000 R14: 00007f453ada5fa0 R15: 00007ffc52386918 [ 328.136121][T11919] [ 328.656980][T11937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2238'. [ 328.674111][T11937] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2238'. [ 328.684665][T11937] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2238'. [ 328.699070][T11937] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2238'. [ 328.774357][T11941] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2236'. [ 328.788074][T11941] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 328.804558][T11937] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2238'. [ 328.825866][ T54] Bluetooth: hci4: command 0x0405 tx timeout [ 328.831712][T11941] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 328.856019][T11941] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 328.880301][T11941] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 329.487513][T11982] raw_sendmsg: syz.1.2252 forgot to set AF_INET. Fix it! [ 329.548251][T11988] netlink: 'syz.2.2253': attribute type 1 has an invalid length. [ 329.610375][T11988] 8021q: adding VLAN 0 to HW filter on device bond4 [ 329.619916][T11988] bond3: (slave bond4): making interface the new active one [ 329.628731][T11988] bond3: (slave bond4): Enslaving as an active interface with an up link [ 329.892582][T12006] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2258'. [ 330.271090][T12025] netlink: 'syz.4.2263': attribute type 10 has an invalid length. [ 331.002003][T12068] FAULT_INJECTION: forcing a failure. [ 331.002003][T12068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 331.015331][T12068] CPU: 0 UID: 0 PID: 12068 Comm: syz.4.2284 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 331.015355][T12068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 331.015366][T12068] Call Trace: [ 331.015372][T12068] [ 331.015380][T12068] dump_stack_lvl+0x241/0x360 [ 331.015405][T12068] ? __pfx_dump_stack_lvl+0x10/0x10 [ 331.015423][T12068] ? __pfx__printk+0x10/0x10 [ 331.015442][T12068] ? __pfx_lock_release+0x10/0x10 [ 331.015472][T12068] should_fail_ex+0x40a/0x550 [ 331.015500][T12068] _copy_from_user+0x2d/0xb0 [ 331.015520][T12068] bpf_test_init+0xfc/0x160 [ 331.015543][T12068] bpf_prog_test_run_xdp+0x48e/0x11e0 [ 331.015567][T12068] ? __pfx_lock_release+0x10/0x10 [ 331.015594][T12068] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 331.015614][T12068] ? __fget_files+0x2a/0x410 [ 331.015637][T12068] ? __fget_files+0x2a/0x410 [ 331.015661][T12068] ? fput+0x21b/0x290 [ 331.015680][T12068] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 331.015703][T12068] bpf_prog_test_run+0x2e4/0x360 [ 331.015728][T12068] __sys_bpf+0x487/0x820 [ 331.015751][T12068] ? __pfx___sys_bpf+0x10/0x10 [ 331.015784][T12068] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 331.015808][T12068] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 331.015829][T12068] ? do_syscall_64+0x100/0x230 [ 331.015852][T12068] __x64_sys_bpf+0x7c/0x90 [ 331.015873][T12068] do_syscall_64+0xf3/0x230 [ 331.015890][T12068] ? clear_bhb_loop+0x35/0x90 [ 331.015914][T12068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.015933][T12068] RIP: 0033:0x7effc1d8d169 [ 331.015948][T12068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.015962][T12068] RSP: 002b:00007effc2b53038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 331.015980][T12068] RAX: ffffffffffffffda RBX: 00007effc1fa5fa0 RCX: 00007effc1d8d169 [ 331.015993][T12068] RDX: 0000000000000050 RSI: 0000400000000280 RDI: 000000000000000a [ 331.016003][T12068] RBP: 00007effc2b53090 R08: 0000000000000000 R09: 0000000000000000 [ 331.016014][T12068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.016023][T12068] R13: 0000000000000000 R14: 00007effc1fa5fa0 R15: 00007fffa7909888 [ 331.016049][T12068] [ 331.314050][T12083] FAULT_INJECTION: forcing a failure. [ 331.314050][T12083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 331.328270][T12083] CPU: 1 UID: 0 PID: 12083 Comm: syz.3.2288 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 331.328294][T12083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 331.328304][T12083] Call Trace: [ 331.328310][T12083] [ 331.328316][T12083] dump_stack_lvl+0x241/0x360 [ 331.328340][T12083] ? __pfx_dump_stack_lvl+0x10/0x10 [ 331.328358][T12083] ? __pfx__printk+0x10/0x10 [ 331.328377][T12083] ? __pfx_lock_release+0x10/0x10 [ 331.328406][T12083] should_fail_ex+0x40a/0x550 [ 331.328433][T12083] _copy_from_user+0x2d/0xb0 [ 331.328455][T12083] copy_msghdr_from_user+0xae/0x680 [ 331.328476][T12083] ? __pfx___might_resched+0x10/0x10 [ 331.328499][T12083] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 331.328525][T12083] ? do_recvmmsg+0x44e/0xab0 [ 331.328542][T12083] ? __might_fault+0xaa/0x120 [ 331.328563][T12083] do_recvmmsg+0x3bd/0xab0 [ 331.328590][T12083] ? __pfx_do_recvmmsg+0x10/0x10 [ 331.328626][T12083] ? ksys_write+0x22a/0x2b0 [ 331.328643][T12083] ? __pfx_lock_release+0x10/0x10 [ 331.328670][T12083] ? sb_end_write+0xe9/0x1c0 [ 331.328691][T12083] ? vfs_write+0x7fa/0xd10 [ 331.328709][T12083] ? __mutex_unlock_slowpath+0x227/0x800 [ 331.328737][T12083] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 331.328754][T12083] ? __fget_files+0x2a/0x410 [ 331.328799][T12083] __x64_sys_recvmmsg+0x199/0x250 [ 331.328820][T12083] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 331.328838][T12083] ? do_syscall_64+0x100/0x230 [ 331.328860][T12083] ? do_syscall_64+0xb6/0x230 [ 331.328880][T12083] do_syscall_64+0xf3/0x230 [ 331.328897][T12083] ? clear_bhb_loop+0x35/0x90 [ 331.328921][T12083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.328941][T12083] RIP: 0033:0x7f961078d169 [ 331.328956][T12083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.328970][T12083] RSP: 002b:00007f9611685038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 331.328988][T12083] RAX: ffffffffffffffda RBX: 00007f96109a5fa0 RCX: 00007f961078d169 [ 331.328999][T12083] RDX: 03ffffffffffff67 RSI: 0000400000002440 RDI: 0000000000000004 [ 331.329010][T12083] RBP: 00007f9611685090 R08: 0000000000000000 R09: 0000000000000000 [ 331.329019][T12083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 331.329029][T12083] R13: 0000000000000000 R14: 00007f96109a5fa0 R15: 00007ffe84976118 [ 331.329053][T12083] [ 332.127858][T12113] __nla_validate_parse: 5 callbacks suppressed [ 332.127875][T12113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2300'. [ 332.353940][T12126] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2305'. [ 332.520356][T12138] vlan3: entered promiscuous mode [ 332.709963][T12147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2310'. [ 332.740632][T12147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2310'. [ 332.752170][T12151] FAULT_INJECTION: forcing a failure. [ 332.752170][T12151] name failslab, interval 1, probability 0, space 0, times 0 [ 332.765305][T12151] CPU: 1 UID: 0 PID: 12151 Comm: syz.3.2314 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 332.765329][T12151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 332.765340][T12151] Call Trace: [ 332.765347][T12151] [ 332.765354][T12151] dump_stack_lvl+0x241/0x360 [ 332.765379][T12151] ? __pfx_dump_stack_lvl+0x10/0x10 [ 332.765397][T12151] ? __pfx__printk+0x10/0x10 [ 332.765427][T12151] should_fail_ex+0x40a/0x550 [ 332.765455][T12151] should_failslab+0xac/0x100 [ 332.765481][T12151] __kmalloc_cache_noprof+0x70/0x390 [ 332.765499][T12151] ? __hw_addr_add_ex+0x1fb/0x760 [ 332.765520][T12151] __hw_addr_add_ex+0x1fb/0x760 [ 332.765541][T12151] dev_mc_add+0xa3/0x110 [ 332.765561][T12151] garp_init_applicant+0x1a0/0x450 [ 332.765582][T12151] register_vlan_dev+0x1eb/0x810 [ 332.765609][T12151] vlan_newlink+0x4a7/0x5f0 [ 332.765625][T12151] ? __pfx_vlan_newlink+0x10/0x10 [ 332.765641][T12151] rtnl_newlink_create+0x37b/0xbd0 [ 332.765668][T12151] ? __pfx_aa_get_newest_label+0x10/0x10 [ 332.765692][T12151] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 332.765717][T12151] ? __pfx___mutex_lock+0x10/0x10 [ 332.765744][T12151] ? ns_capable+0x8a/0xf0 [ 332.765764][T12151] rtnl_newlink+0x167a/0x1d90 [ 332.765794][T12151] ? stack_depot_save_flags+0x37/0x940 [ 332.765824][T12151] ? __pfx_rtnl_newlink+0x10/0x10 [ 332.765841][T12151] ? __netlink_deliver_tap+0x561/0x7f0 [ 332.765860][T12151] ? __pfx_validate_chain+0x10/0x10 [ 332.765875][T12151] ? __sock_sendmsg+0x221/0x270 [ 332.765893][T12151] ? ____sys_sendmsg+0x53a/0x860 [ 332.765905][T12151] ? __sys_sendmsg+0x269/0x350 [ 332.765918][T12151] ? do_syscall_64+0xf3/0x230 [ 332.765933][T12151] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.765972][T12151] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 332.765997][T12151] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 332.766026][T12151] ? mark_lock+0x9a/0x360 [ 332.766044][T12151] ? __lock_acquire+0x1397/0x2100 [ 332.766090][T12151] ? __pfx_lock_release+0x10/0x10 [ 332.766121][T12151] ? __pfx_rtnl_newlink+0x10/0x10 [ 332.766142][T12151] rtnetlink_rcv_msg+0x791/0xcf0 [ 332.766160][T12151] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 332.766184][T12151] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 332.766210][T12151] ? ref_tracker_free+0x643/0x7e0 [ 332.766230][T12151] netlink_rcv_skb+0x206/0x480 [ 332.766251][T12151] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 332.766271][T12151] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 332.766309][T12151] ? netlink_deliver_tap+0x2e/0x1b0 [ 332.766332][T12151] netlink_unicast+0x7f6/0x990 [ 332.766360][T12151] ? __pfx_netlink_unicast+0x10/0x10 [ 332.766376][T12151] ? __virt_addr_valid+0x45f/0x530 [ 332.766392][T12151] ? __phys_addr_symbol+0x2f/0x70 [ 332.766406][T12151] ? __check_object_size+0x47a/0x730 [ 332.766430][T12151] netlink_sendmsg+0x8de/0xcb0 [ 332.766460][T12151] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.766484][T12151] ? aa_sock_msg_perm+0x91/0x160 [ 332.766512][T12151] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.766531][T12151] __sock_sendmsg+0x221/0x270 [ 332.766555][T12151] ____sys_sendmsg+0x53a/0x860 [ 332.766580][T12151] ? __pfx_____sys_sendmsg+0x10/0x10 [ 332.766594][T12151] ? __fget_files+0x2a/0x410 [ 332.766618][T12151] ? __fget_files+0x2a/0x410 [ 332.766645][T12151] __sys_sendmsg+0x269/0x350 [ 332.766666][T12151] ? __pfx___sys_sendmsg+0x10/0x10 [ 332.766695][T12151] ? do_sys_openat2+0x17a/0x1d0 [ 332.766742][T12151] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 332.766767][T12151] ? do_syscall_64+0x100/0x230 [ 332.766798][T12151] ? do_syscall_64+0xb6/0x230 [ 332.766819][T12151] do_syscall_64+0xf3/0x230 [ 332.766837][T12151] ? clear_bhb_loop+0x35/0x90 [ 332.766858][T12151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.766878][T12151] RIP: 0033:0x7f961078d169 [ 332.766893][T12151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.766907][T12151] RSP: 002b:00007f9611685038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 332.766925][T12151] RAX: ffffffffffffffda RBX: 00007f96109a5fa0 RCX: 00007f961078d169 [ 332.766937][T12151] RDX: 0000000000000000 RSI: 0000400000000280 RDI: 0000000000000003 [ 332.766947][T12151] RBP: 00007f9611685090 R08: 0000000000000000 R09: 0000000000000000 [ 332.766957][T12151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 332.766966][T12151] R13: 0000000000000000 R14: 00007f96109a5fa0 R15: 00007ffe84976118 [ 332.766993][T12151] [ 332.772649][T12147] netlink: 'syz.4.2310': attribute type 1 has an invalid length. [ 333.078098][T12163] netlink: 'syz.0.2315': attribute type 10 has an invalid length. [ 333.085795][T12147] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2310'. [ 333.358600][ T5840] block nbd5: Receive control failed (result -107) [ 333.514706][T12175] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2319'. [ 333.598043][T12175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2319'. [ 333.927019][T12199] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2327'. [ 334.149387][T12208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2330'. [ 334.165054][T12208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2330'. [ 334.175461][T12208] netlink: 'syz.4.2330': attribute type 1 has an invalid length. [ 334.237452][ T5840] block nbd6: Receive control failed (result -107) [ 334.759089][T12230] FAULT_INJECTION: forcing a failure. [ 334.759089][T12230] name failslab, interval 1, probability 0, space 0, times 0 [ 334.795737][T12230] CPU: 0 UID: 0 PID: 12230 Comm: syz.2.2337 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 334.795765][T12230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 334.795776][T12230] Call Trace: [ 334.795782][T12230] [ 334.795789][T12230] dump_stack_lvl+0x241/0x360 [ 334.795815][T12230] ? __pfx_dump_stack_lvl+0x10/0x10 [ 334.795832][T12230] ? __pfx__printk+0x10/0x10 [ 334.795851][T12230] ? kmem_cache_alloc_lru_noprof+0x4d/0x390 [ 334.795874][T12230] ? __pfx___might_resched+0x10/0x10 [ 334.795900][T12230] should_fail_ex+0x40a/0x550 [ 334.795928][T12230] should_failslab+0xac/0x100 [ 334.795949][T12230] ? __d_alloc+0x31/0x740 [ 334.795962][T12230] kmem_cache_alloc_lru_noprof+0x75/0x390 [ 334.795989][T12230] __d_alloc+0x31/0x740 [ 334.796009][T12230] d_alloc_pseudo+0x1f/0xb0 [ 334.796026][T12230] alloc_file_pseudo+0x141/0x320 [ 334.796046][T12230] ? rcu_is_watching+0x15/0xb0 [ 334.796069][T12230] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 334.796092][T12230] ? security_inode_alloc+0xd2/0x310 [ 334.796119][T12230] sock_alloc_file+0xb7/0x2e0 [ 334.796143][T12230] do_accept+0x36f/0x6d0 [ 334.796170][T12230] ? __pfx_do_accept+0x10/0x10 [ 334.796211][T12230] __sys_accept4+0x11f/0x1d0 [ 334.796236][T12230] ? __pfx___sys_accept4+0x10/0x10 [ 334.796258][T12230] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 334.796283][T12230] ? do_syscall_64+0x100/0x230 [ 334.796305][T12230] __x64_sys_accept4+0x9a/0xb0 [ 334.796329][T12230] do_syscall_64+0xf3/0x230 [ 334.796346][T12230] ? clear_bhb_loop+0x35/0x90 [ 334.796369][T12230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.796389][T12230] RIP: 0033:0x7f453ab8d169 [ 334.796404][T12230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.796418][T12230] RSP: 002b:00007f453b932038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 334.796435][T12230] RAX: ffffffffffffffda RBX: 00007f453ada5fa0 RCX: 00007f453ab8d169 [ 334.796447][T12230] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 334.796457][T12230] RBP: 00007f453b932090 R08: 0000000000000000 R09: 0000000000000000 [ 334.796468][T12230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.796478][T12230] R13: 0000000000000000 R14: 00007f453ada5fa0 R15: 00007ffc52386918 [ 334.796503][T12230] [ 335.252186][T12249] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 335.509453][T12264] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 336.886886][T12323] Cannot find del_set index 1 as target [ 337.004643][T12329] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 338.922529][T12429] __nla_validate_parse: 9 callbacks suppressed [ 338.922547][T12429] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.2400'. [ 339.348213][T12442] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2406'. [ 339.361146][T12442] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 339.544511][T12452] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2409'. [ 339.682620][T12460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2409'. [ 342.164668][T12531] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2431'. [ 342.190381][T12531] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 342.216178][T12534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2432'. [ 342.923527][T12566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2442'. [ 343.241140][T12570] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2443'. [ 343.355762][T12570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2443'. [ 344.557965][T12624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2464'. [ 344.583824][T12624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2464'. [ 344.625570][T12624] netlink: 26 bytes leftover after parsing attributes in process `syz.1.2464'. [ 344.646596][T12593] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2452'. [ 344.692504][T12635] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2467'. [ 344.714808][T12635] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 345.124876][T12644] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2472'. [ 345.773154][T12662] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2477'. [ 345.898161][T12662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2477'. [ 346.438276][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 346.450782][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 346.459931][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 346.468680][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 346.488233][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 346.496005][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 346.533282][T12692] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2485'. [ 346.670804][T12684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2485'. [ 346.872234][T12693] chnl_net:caif_netlink_parms(): no params data found [ 346.917161][T12714] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 347.327265][T12693] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.334496][T12693] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.396043][T12693] bridge_slave_0: entered allmulticast mode [ 347.426753][T12693] bridge_slave_0: entered promiscuous mode [ 347.479926][T12693] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.495715][T12693] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.515822][T12693] bridge_slave_1: entered allmulticast mode [ 347.522906][T12693] bridge_slave_1: entered promiscuous mode [ 347.680219][T12693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.726972][T12693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.841940][T12693] team0: Port device team_slave_0 added [ 347.881365][T12693] team0: Port device team_slave_1 added [ 348.012544][T12693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.039103][T12693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.105311][T12693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.289969][T12693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.310349][T12693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.343603][T12693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.579790][ T5840] Bluetooth: hci2: command tx timeout [ 348.587389][T12693] hsr_slave_0: entered promiscuous mode [ 348.594171][T12693] hsr_slave_1: entered promiscuous mode [ 348.610754][T12693] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 348.624283][T12693] Cannot create hsr debugfs directory [ 348.791687][T12783] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 348.829998][T12780] bond5 (unregistering): Released all slaves [ 349.060248][T12794] IPVS: set_ctl: invalid protocol: 55 127.0.0.1:20003 [ 349.423831][T12693] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.457922][T12693] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 349.648442][T12693] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.669436][T12693] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 349.878191][T12693] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.904775][T12693] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 350.041852][T12693] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.066647][T12693] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 350.459915][T12693] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 350.498022][T12693] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 350.530600][T12693] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 350.556504][T12693] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 350.656425][ T5840] Bluetooth: hci2: command tx timeout [ 350.754053][T12848] netlink: 'syz.4.2536': attribute type 10 has an invalid length. [ 350.832615][T12693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.893858][T12693] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.977516][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.984659][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.014608][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.021837][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.040289][T12863] __nla_validate_parse: 3 callbacks suppressed [ 351.040308][T12863] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2542'. [ 351.077863][T12863] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 351.182163][T12693] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 351.572034][T12693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.726703][T12693] veth0_vlan: entered promiscuous mode [ 351.760544][T12693] veth1_vlan: entered promiscuous mode [ 351.852110][T12693] veth0_macvtap: entered promiscuous mode [ 351.883525][T12693] veth1_macvtap: entered promiscuous mode [ 351.930011][T12693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.961261][T12693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.992079][T12693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.010568][T12693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.024760][T12693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.038791][T12693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.068088][T12693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.109389][T12693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.122658][T12693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.133885][T12693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.171740][T12693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.198877][T12693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.224178][T12693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.241506][T12693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.282006][T12693] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.301039][T12693] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.322658][T12693] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.338481][T12693] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.736091][ T5840] Bluetooth: hci2: command tx timeout [ 352.743729][T12921] 8021q: adding VLAN 0 to HW filter on device bond5 [ 352.752246][T12921] bond0: (slave bond5): Enslaving as an active interface with an up link [ 352.775682][ T6640] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.825353][ T6640] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.949799][ T2953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.982771][ T2953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.002021][T12935] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2565'. [ 353.022447][T12935] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 353.105771][T12942] netlink: 'syz.0.2565': attribute type 3 has an invalid length. [ 353.113557][T12942] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2565'. [ 354.362748][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.721926][T13002] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2590'. [ 354.742872][T12999] bond6 (unregistering): Released all slaves [ 354.818144][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.890768][T13007] netlink: 'syz.3.2590': attribute type 1 has an invalid length. [ 354.919782][T13007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2590'. [ 354.978378][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 354.987962][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 355.000412][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 355.014892][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 355.029437][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 355.040531][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 355.067449][T13011] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2592'. [ 355.068231][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.118888][T13007] 8021q: adding VLAN 0 to HW filter on device bond7 [ 355.127117][T13007] bond6: (slave bond7): making interface the new active one [ 355.134780][T13007] bond6: (slave bond7): Enslaving as an active interface with an up link [ 355.178590][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.232618][T13017] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2594'. [ 355.401504][T13028] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2596'. [ 355.411105][T13028] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 355.648240][ T11] bridge_slave_1: left allmulticast mode [ 355.675933][ T11] bridge_slave_1: left promiscuous mode [ 355.683517][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.810699][ T11] bridge_slave_0: left allmulticast mode [ 355.821141][ T11] bridge_slave_0: left promiscuous mode [ 355.832574][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.491681][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.506127][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.521173][ T11] bond0 (unregistering): Released all slaves [ 356.541738][T13035] macvlan2: entered promiscuous mode [ 356.687859][T13009] chnl_net:caif_netlink_parms(): no params data found [ 357.047574][T13009] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.054955][T13009] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.062637][T13009] bridge_slave_0: entered allmulticast mode [ 357.066251][ T5840] Bluetooth: hci2: command tx timeout [ 357.073983][T13009] bridge_slave_0: entered promiscuous mode [ 357.104188][T13009] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.132031][T13009] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.141664][T13009] bridge_slave_1: entered allmulticast mode [ 357.158475][T13009] bridge_slave_1: entered promiscuous mode [ 357.193625][ T11] hsr_slave_0: left promiscuous mode [ 357.208292][ T11] hsr_slave_1: left promiscuous mode [ 357.218521][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.229544][T13069] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2606'. [ 357.235739][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.257846][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.265308][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.304596][ T11] veth1_macvtap: left promiscuous mode [ 357.311210][ T11] veth0_macvtap: left promiscuous mode [ 357.319309][ T11] veth1_vlan: left promiscuous mode [ 357.326642][ T11] veth0_vlan: left promiscuous mode [ 357.761228][T13074] netlink: 'syz.3.2607': attribute type 10 has an invalid length. [ 357.924577][ T11] team0 (unregistering): Port device team_slave_1 removed [ 357.970205][ T11] team0 (unregistering): Port device team_slave_0 removed [ 358.458233][T13074] team0: Device ipvlan1 failed to register rx_handler [ 358.512445][T13009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.563301][T13009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.676334][T13079] xt_CONNSECMARK: invalid mode: 0 [ 358.683991][T13079] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2609'. [ 358.745130][T13009] team0: Port device team_slave_0 added [ 358.829384][T13009] team0: Port device team_slave_1 added [ 358.917923][T13009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.939681][T13009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.983313][T13009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.040733][T13009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.050655][T13009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.085567][T13009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.136076][ T5840] Bluetooth: hci2: command tx timeout [ 359.300145][T13009] hsr_slave_0: entered promiscuous mode [ 359.315683][T13009] hsr_slave_1: entered promiscuous mode [ 359.332313][T13009] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 359.371457][T13009] Cannot create hsr debugfs directory [ 359.601299][T13111] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2618'. [ 359.623026][T13109] netlink: 'syz.4.2619': attribute type 10 has an invalid length. [ 359.796699][T13121] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2623'. [ 359.808385][T13121] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 360.504999][T13145] FAULT_INJECTION: forcing a failure. [ 360.504999][T13145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.556101][T13145] CPU: 1 UID: 0 PID: 13145 Comm: syz.0.2631 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 360.556132][T13145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 360.556142][T13145] Call Trace: [ 360.556149][T13145] [ 360.556155][T13145] dump_stack_lvl+0x241/0x360 [ 360.556181][T13145] ? __pfx_dump_stack_lvl+0x10/0x10 [ 360.556199][T13145] ? __pfx__printk+0x10/0x10 [ 360.556225][T13145] should_fail_ex+0x40a/0x550 [ 360.556251][T13145] _copy_to_user+0x31/0xb0 [ 360.556272][T13145] generic_map_lookup_batch+0x98a/0xf20 [ 360.556288][T13145] ? __pfx_lock_release+0x10/0x10 [ 360.556321][T13145] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 360.556336][T13145] ? __fget_files+0x395/0x410 [ 360.556355][T13145] ? __fget_files+0x2a/0x410 [ 360.556377][T13145] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 360.556395][T13145] bpf_map_do_batch+0x288/0x660 [ 360.556419][T13145] __sys_bpf+0x653/0x820 [ 360.556442][T13145] ? __pfx___sys_bpf+0x10/0x10 [ 360.556472][T13145] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 360.556496][T13145] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 360.556519][T13145] ? do_syscall_64+0x100/0x230 [ 360.556541][T13145] __x64_sys_bpf+0x7c/0x90 [ 360.556561][T13145] do_syscall_64+0xf3/0x230 [ 360.556579][T13145] ? clear_bhb_loop+0x35/0x90 [ 360.556602][T13145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.556621][T13145] RIP: 0033:0x7ffaebf8d169 [ 360.556635][T13145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.556649][T13145] RSP: 002b:00007ffaeced5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 360.556667][T13145] RAX: ffffffffffffffda RBX: 00007ffaec1a5fa0 RCX: 00007ffaebf8d169 [ 360.556678][T13145] RDX: 0000000000000038 RSI: 0000400000000700 RDI: 0000000000000018 [ 360.556688][T13145] RBP: 00007ffaeced5090 R08: 0000000000000000 R09: 0000000000000000 [ 360.556698][T13145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.556708][T13145] R13: 0000000000000000 R14: 00007ffaec1a5fa0 R15: 00007fffae58afc8 [ 360.556733][T13145] [ 360.584998][T13149] bridge_slave_0: left allmulticast mode [ 360.608122][T13152] netlink: 'syz.3.2632': attribute type 10 has an invalid length. [ 360.705255][T13149] bridge_slave_0: left promiscuous mode [ 360.833139][T13149] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.859119][T13149] bridge_slave_1: left allmulticast mode [ 360.864957][T13149] bridge_slave_1: left promiscuous mode [ 360.892582][T13149] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.924839][T13149] bond0: (slave bond_slave_0): Releasing backup interface [ 360.940504][T13149] bond0: (slave bond_slave_1): Releasing backup interface [ 360.950320][T13149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.959894][T13149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.969039][T13149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.972417][T13161] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2635'. [ 360.977310][T13149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.001919][T13149] bond0: (slave bond1): Releasing backup interface [ 361.036899][T13152] team0: Device ipvlan1 failed to register rx_handler [ 361.215795][ T5840] Bluetooth: hci2: command tx timeout [ 361.291572][T13009] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 361.381842][T13009] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 361.394383][T13009] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 361.417582][T13009] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 361.648565][T13185] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.2644'. [ 361.679790][T13009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.710468][T13009] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.764144][ T2953] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.771345][ T2953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.791267][ T2953] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.798463][ T2953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.997535][T13201] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2649'. [ 362.013802][T13199] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2648'. [ 362.108401][T13201] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.2649'. [ 362.204429][T13009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.260228][T13214] dvmrp0: entered allmulticast mode [ 362.306435][T13009] veth0_vlan: entered promiscuous mode [ 362.350873][T13009] veth1_vlan: entered promiscuous mode [ 362.423874][T13221] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2654'. [ 362.424201][T13009] veth0_macvtap: entered promiscuous mode [ 362.465424][T13009] veth1_macvtap: entered promiscuous mode [ 362.502304][T13009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.548485][T13009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.569912][T13009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.588207][T13009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.617532][T13009] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.629168][T13229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2657'. [ 362.631407][T13009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.645665][T13229] openvswitch: netlink: Unexpected mask (mask=8000040, allowed=10048) [ 362.657622][T13009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.670233][T13009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.681499][T13009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.693144][T13009] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.772818][T13009] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.792004][T13009] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.804804][T13009] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.830061][T13009] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.943100][T13241] netlink: 'syz.0.2661': attribute type 10 has an invalid length. [ 362.964387][T13243] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2662'. [ 363.100581][T13243] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.2662'. [ 363.127190][ T2975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.150146][ T2975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.202602][ T6640] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.232915][ T6640] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.295787][ T5840] Bluetooth: hci2: command tx timeout [ 364.606028][T13285] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2678'. [ 364.747383][T13286] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.2678'. [ 364.993708][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 365.005462][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 365.014053][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 365.022407][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 365.038656][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 365.051819][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 365.103532][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 365.118352][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 365.126276][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 365.134887][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 365.164444][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 365.173398][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 365.207170][ T2975] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.227730][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 365.237028][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 365.255700][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 365.265451][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 365.274712][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 365.282727][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 365.568761][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 365.581304][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 365.590514][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 365.600941][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 365.608738][ T5840] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 365.616700][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 365.761311][T13291] chnl_net:caif_netlink_parms(): no params data found [ 365.791507][ T2975] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.860948][T13310] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2681'. [ 365.885762][T13294] chnl_net:caif_netlink_parms(): no params data found [ 365.949191][ T2975] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.961100][T13314] netlink: 'syz.4.2682': attribute type 10 has an invalid length. [ 366.014229][T13296] chnl_net:caif_netlink_parms(): no params data found [ 366.101230][ T2975] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.206626][T13291] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.214002][T13291] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.221585][T13291] bridge_slave_0: entered allmulticast mode [ 366.228674][T13291] bridge_slave_0: entered promiscuous mode [ 366.236709][T13291] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.243829][T13291] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.252060][T13291] bridge_slave_1: entered allmulticast mode [ 366.259637][T13291] bridge_slave_1: entered promiscuous mode [ 366.417546][T13294] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.424684][T13294] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.443017][T13294] bridge_slave_0: entered allmulticast mode [ 366.453757][T13294] bridge_slave_0: entered promiscuous mode [ 366.492906][T13291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.502554][T13336] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2686'. [ 366.509332][T13291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.542053][T13294] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.556146][T13294] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.563452][T13294] bridge_slave_1: entered allmulticast mode [ 366.571452][T13294] bridge_slave_1: entered promiscuous mode [ 366.632463][T13294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.642270][T13296] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.650098][T13296] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.657723][T13296] bridge_slave_0: entered allmulticast mode [ 366.665274][T13296] bridge_slave_0: entered promiscuous mode [ 366.673461][T13296] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.680714][T13296] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.693102][T13296] bridge_slave_1: entered allmulticast mode [ 366.699983][T13296] bridge_slave_1: entered promiscuous mode [ 366.717348][T13291] team0: Port device team_slave_0 added [ 366.723481][T13301] chnl_net:caif_netlink_parms(): no params data found [ 366.735235][ T2975] bridge_slave_1: left allmulticast mode [ 366.742258][ T2975] bridge_slave_1: left promiscuous mode [ 366.751448][ T2975] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.762014][ T2975] bridge_slave_0: left allmulticast mode [ 366.768368][ T2975] bridge_slave_0: left promiscuous mode [ 366.774079][ T2975] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.139171][ T54] Bluetooth: hci0: command tx timeout [ 367.169463][ T2975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.186540][ T2975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.198519][ T2975] bond0 (unregistering): Released all slaves [ 367.210867][T13294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.220092][ T54] Bluetooth: hci2: command tx timeout [ 367.240922][T13291] team0: Port device team_slave_1 added [ 367.296184][ T54] Bluetooth: hci3: command tx timeout [ 367.342128][T13296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.363598][T13291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.371260][T13291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.398951][T13291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.415959][T13291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.422943][T13291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.455866][T13291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.547917][T13294] team0: Port device team_slave_0 added [ 367.559238][T13296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.590806][T13294] team0: Port device team_slave_1 added [ 367.696235][ T54] Bluetooth: hci4: command tx timeout [ 367.741899][T13294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.749294][T13294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.776644][T13294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.790081][T13294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.797467][T13294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.823424][T13294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.847196][T13296] team0: Port device team_slave_0 added [ 367.880890][T13301] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.889587][T13301] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.897342][T13301] bridge_slave_0: entered allmulticast mode [ 367.904027][T13301] bridge_slave_0: entered promiscuous mode [ 367.925902][T13291] hsr_slave_0: entered promiscuous mode [ 367.932047][T13291] hsr_slave_1: entered promiscuous mode [ 367.938522][T13291] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 367.947337][T13291] Cannot create hsr debugfs directory [ 367.955405][T13296] team0: Port device team_slave_1 added [ 367.976991][T13301] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.987401][T13301] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.994763][T13301] bridge_slave_1: entered allmulticast mode [ 368.006854][T13301] bridge_slave_1: entered promiscuous mode [ 368.091183][ T2975] hsr_slave_0: left promiscuous mode [ 368.098481][ T2975] hsr_slave_1: left promiscuous mode [ 368.104220][ T2975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.112680][ T2975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.122805][ T2975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.130439][ T2975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.156606][ T2975] veth1_macvtap: left promiscuous mode [ 368.162173][ T2975] veth0_macvtap: left promiscuous mode [ 368.167970][ T2975] veth1_vlan: left promiscuous mode [ 368.173265][ T2975] veth0_vlan: left promiscuous mode [ 368.620985][ T2975] team0 (unregistering): Port device team_slave_1 removed [ 368.667251][ T2975] team0 (unregistering): Port device team_slave_0 removed [ 369.094960][T13296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.104975][T13296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.134062][T13296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.215727][ T54] Bluetooth: hci0: command tx timeout [ 369.221783][T13296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.229311][T13296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.255645][T13296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.295723][ T54] Bluetooth: hci2: command tx timeout [ 369.331074][T13301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.344722][T13294] hsr_slave_0: entered promiscuous mode [ 369.353859][T13294] hsr_slave_1: entered promiscuous mode [ 369.360520][T13294] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 369.368475][T13294] Cannot create hsr debugfs directory [ 369.386684][ T54] Bluetooth: hci3: command tx timeout [ 369.400410][T13301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.491280][T13301] team0: Port device team_slave_0 added [ 369.561298][T13301] team0: Port device team_slave_1 added [ 369.591888][T13296] hsr_slave_0: entered promiscuous mode [ 369.598898][T13296] hsr_slave_1: entered promiscuous mode [ 369.604874][T13296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 369.612639][T13296] Cannot create hsr debugfs directory [ 369.641031][T13301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.653467][T13301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.679678][T13301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.728612][T13301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.737387][T13301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.763976][T13301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.789150][ T54] Bluetooth: hci4: command tx timeout [ 369.903774][T13301] hsr_slave_0: entered promiscuous mode [ 369.910650][T13301] hsr_slave_1: entered promiscuous mode [ 369.917996][T13301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 369.925661][T13301] Cannot create hsr debugfs directory [ 369.940877][T13366] IPv6: addrconf: prefix option has invalid lifetime [ 370.057517][T13291] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 370.087579][T13291] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 370.127011][T13291] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 370.171791][T13291] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 370.262816][T13294] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 370.290944][T13294] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 370.301869][T13294] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 370.311892][T13294] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 370.428164][T13296] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 370.477137][T13296] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 370.507943][T13296] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 370.544728][T13296] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 370.642031][T13377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2696'. [ 370.642842][T13301] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 370.663452][T13301] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 370.686418][T13301] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 370.721599][T13301] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 370.742286][T13291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.780293][T13294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.818449][T13291] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.853974][T13294] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.887545][ T3489] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.894668][ T3489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.917054][ T3489] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.925352][ T3489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.960970][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.968199][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.988300][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.995416][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.031102][T13296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.057831][T13296] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.122390][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.129553][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.155539][ T2953] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.162649][ T2953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.296703][ T54] Bluetooth: hci0: command tx timeout [ 371.347190][T13301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.375913][ T54] Bluetooth: hci2: command tx timeout [ 371.466583][ T54] Bluetooth: hci3: command tx timeout [ 371.469779][T13301] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.514857][T13291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.589672][ T6640] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.596856][ T6640] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.653532][ T6640] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.660740][ T6640] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.737805][T13294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.777057][T13301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 371.856020][ T54] Bluetooth: hci4: command tx timeout [ 371.922777][T13296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.224179][T13301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.318269][T13291] veth0_vlan: entered promiscuous mode [ 372.398302][T13291] veth1_vlan: entered promiscuous mode [ 372.466516][T13294] veth0_vlan: entered promiscuous mode [ 372.512310][T13291] veth0_macvtap: entered promiscuous mode [ 372.533528][T13294] veth1_vlan: entered promiscuous mode [ 372.553260][T13296] veth0_vlan: entered promiscuous mode [ 372.588409][T13291] veth1_macvtap: entered promiscuous mode [ 372.613359][T13296] veth1_vlan: entered promiscuous mode [ 372.649610][T13294] veth0_macvtap: entered promiscuous mode [ 372.676752][T13294] veth1_macvtap: entered promiscuous mode [ 372.695817][T13294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.706712][T13294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.717228][T13294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.729151][T13294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.740833][T13294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.757941][T13291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.772539][T13291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.783366][T13291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.794002][T13291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.804158][T13291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.814769][T13291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.828095][T13291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.883284][T13294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.894645][T13294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.905289][T13294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.917087][T13294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.928505][T13294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.940420][T13291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.953062][T13291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.963399][T13291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.976141][T13291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.986091][T13291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.996709][T13291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.007885][T13291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.034990][T13294] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.054117][T13294] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.069164][T13294] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.078404][T13294] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.127513][T13301] veth0_vlan: entered promiscuous mode [ 373.136618][T13291] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.156173][T13291] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.165195][T13291] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.174079][T13291] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.188456][T13440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2702'. [ 373.259485][T13296] veth0_macvtap: entered promiscuous mode [ 373.284019][T13440] hsr_slave_0: left promiscuous mode [ 373.292275][T13440] hsr_slave_1: left promiscuous mode [ 373.339313][T13301] veth1_vlan: entered promiscuous mode [ 373.368982][T13296] veth1_macvtap: entered promiscuous mode [ 373.375795][ T54] Bluetooth: hci0: command tx timeout [ 373.401602][T13439] openvswitch: netlink: VXLAN extension 0 has unexpected len 3 expected 0 [ 373.437299][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.453338][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.465935][ T54] Bluetooth: hci2: command tx timeout [ 373.529187][T13301] veth0_macvtap: entered promiscuous mode [ 373.536224][ T54] Bluetooth: hci3: command tx timeout [ 373.551604][ T2953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.556827][T13301] veth1_macvtap: entered promiscuous mode [ 373.574777][ T2953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.613757][T13445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2703'. [ 373.618475][T13296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.635929][T13296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.648108][T13296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.658740][T13296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.669022][T13296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.680372][T13296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.690629][T13296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.701274][T13296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.712432][T13296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.765346][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.773558][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.793925][T13301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.816488][T13301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.834884][T13301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.856875][T13301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.875629][T13301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.895557][T13301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.905412][T13301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.919142][T13301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.929383][T13301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.940561][T13301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.945820][ T54] Bluetooth: hci4: command tx timeout [ 373.951690][T13301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.973476][T13296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.995390][T13296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.005983][T13296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.016921][T13296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.026910][T13296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.037491][T13296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.047416][T13296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.058146][T13296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.069184][T13296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.082513][T13301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.094795][T13301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.111446][T13301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.126294][T13301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.136324][T13301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.147297][T13301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.157336][T13301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.169008][T13301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.188250][T13301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.206307][T13301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.227287][T13301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.261063][T13301] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.294619][T13301] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.297752][T13459] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2674'. [ 374.305936][T13301] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.321575][T13301] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.346379][T13296] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.355116][T13296] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.364495][T13296] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.373659][T13296] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.398384][ T2953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.416468][ T2953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.580670][T13464] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2707'. [ 374.701608][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.737118][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.816948][ T2975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.842785][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.856219][ T2975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.861991][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.558906][T13485] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2711'. [ 375.687796][T13487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2711'. [ 377.434045][ T6640] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.449114][T13480] vlan2: entered promiscuous mode [ 377.454255][ T6640] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.456531][T13480] batadv0: entered promiscuous mode [ 377.493382][T13480] team0: Port device vlan2 added [ 377.919788][T13507] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2716'. [ 378.292049][T13528] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2724'. [ 378.453885][T13532] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2725'. [ 378.505915][T13532] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2725'. [ 378.590797][T13537] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2727'. [ 378.743018][T13544] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2728'. [ 378.983589][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.377879][T13561] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2734'. [ 379.653215][T13572] netlink: 1688 bytes leftover after parsing attributes in process `syz.8.2739'. [ 379.781804][T13575] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2743'. [ 379.835777][T13578] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 379.847469][T13581] FAULT_INJECTION: forcing a failure. [ 379.847469][T13581] name failslab, interval 1, probability 0, space 0, times 0 [ 379.904973][T13581] CPU: 1 UID: 0 PID: 13581 Comm: syz.7.2741 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 379.905000][T13581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 379.905011][T13581] Call Trace: [ 379.905016][T13581] [ 379.905024][T13581] dump_stack_lvl+0x241/0x360 [ 379.905050][T13581] ? __pfx_dump_stack_lvl+0x10/0x10 [ 379.905068][T13581] ? __pfx__printk+0x10/0x10 [ 379.905097][T13581] should_fail_ex+0x40a/0x550 [ 379.905123][T13581] should_failslab+0xac/0x100 [ 379.905144][T13581] __kmalloc_cache_noprof+0x70/0x390 [ 379.905162][T13581] ? sctp_add_bind_addr+0x89/0x3a0 [ 379.905184][T13581] sctp_add_bind_addr+0x89/0x3a0 [ 379.905206][T13581] sctp_copy_local_addr_list+0x311/0x500 [ 379.905226][T13581] ? sctp_copy_local_addr_list+0xab/0x500 [ 379.905245][T13581] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 379.905276][T13581] ? sctp_v6_is_any+0x60/0x70 [ 379.905295][T13581] ? sctp_copy_one_addr+0x94/0x360 [ 379.905317][T13581] sctp_bind_addr_copy+0xad/0x3b0 [ 379.905335][T13581] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 379.905361][T13581] sctp_connect_new_asoc+0x2f3/0x6c0 [ 379.905385][T13581] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 379.905405][T13581] ? sctp_sendmsg+0xf1a/0x35d0 [ 379.905430][T13581] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 379.905450][T13581] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 379.905475][T13581] sctp_sendmsg+0x1f64/0x35d0 [ 379.905511][T13581] ? __pfx_sctp_sendmsg+0x10/0x10 [ 379.905535][T13581] ? aa_sk_perm+0x96d/0xab0 [ 379.905569][T13581] ? inet_sendmsg+0x330/0x390 [ 379.905589][T13581] __sock_sendmsg+0x1a6/0x270 [ 379.905614][T13581] ____sys_sendmsg+0x53a/0x860 [ 379.905640][T13581] ? __pfx_____sys_sendmsg+0x10/0x10 [ 379.905654][T13581] ? __fget_files+0x2a/0x410 [ 379.905679][T13581] ? __fget_files+0x2a/0x410 [ 379.905706][T13581] __sys_sendmmsg+0x36a/0x720 [ 379.905736][T13581] ? __pfx___sys_sendmmsg+0x10/0x10 [ 379.905764][T13581] ? __pfx_lock_release+0x10/0x10 [ 379.905782][T13581] ? kstrtouint_from_user+0x128/0x190 [ 379.905822][T13581] ? ksys_write+0x22a/0x2b0 [ 379.905838][T13581] ? __pfx_lock_release+0x10/0x10 [ 379.905863][T13581] ? sb_end_write+0xe9/0x1c0 [ 379.905883][T13581] ? vfs_write+0x7fa/0xd10 [ 379.905902][T13581] ? __mutex_unlock_slowpath+0x227/0x800 [ 379.905945][T13581] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 379.905969][T13581] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 379.905993][T13581] ? do_syscall_64+0x100/0x230 [ 379.906015][T13581] __x64_sys_sendmmsg+0xa0/0xb0 [ 379.906034][T13581] do_syscall_64+0xf3/0x230 [ 379.906052][T13581] ? clear_bhb_loop+0x35/0x90 [ 379.906076][T13581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.906095][T13581] RIP: 0033:0x7ff5be98d169 [ 379.906110][T13581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.906124][T13581] RSP: 002b:00007ff5bf80c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 379.906141][T13581] RAX: ffffffffffffffda RBX: 00007ff5beba5fa0 RCX: 00007ff5be98d169 [ 379.906153][T13581] RDX: 0000000000000001 RSI: 0000400000000940 RDI: 0000000000000003 [ 379.906164][T13581] RBP: 00007ff5bf80c090 R08: 0000000000000000 R09: 0000000000000000 [ 379.906173][T13581] R10: 0000000000048081 R11: 0000000000000246 R12: 0000000000000002 [ 379.906183][T13581] R13: 0000000000000000 R14: 00007ff5beba5fa0 R15: 00007ffceabcbcc8 [ 379.906208][T13581] [ 380.351285][T13588] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 380.755678][T13597] __nla_validate_parse: 2 callbacks suppressed [ 380.755699][T13597] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2750'. [ 381.359701][T13616] netlink: 1760 bytes leftover after parsing attributes in process `syz.4.2755'. [ 381.386671][T13618] Cannot find del_set index 1 as target [ 381.607702][T13626] FAULT_INJECTION: forcing a failure. [ 381.607702][T13626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.690527][T13626] CPU: 1 UID: 0 PID: 13626 Comm: syz.8.2760 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 381.690556][T13626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 381.690566][T13626] Call Trace: [ 381.690572][T13626] [ 381.690580][T13626] dump_stack_lvl+0x241/0x360 [ 381.690606][T13626] ? __pfx_dump_stack_lvl+0x10/0x10 [ 381.690624][T13626] ? __pfx__printk+0x10/0x10 [ 381.690641][T13626] ? __pfx_lock_release+0x10/0x10 [ 381.690671][T13626] should_fail_ex+0x40a/0x550 [ 381.690696][T13626] _copy_from_iter+0x1df/0x1c40 [ 381.690715][T13626] ? __virt_addr_valid+0x183/0x530 [ 381.690731][T13626] ? __pfx_lock_release+0x10/0x10 [ 381.690757][T13626] ? __alloc_skb+0x28f/0x440 [ 381.690773][T13626] ? __pfx__copy_from_iter+0x10/0x10 [ 381.690791][T13626] ? __virt_addr_valid+0x183/0x530 [ 381.690804][T13626] ? __virt_addr_valid+0x183/0x530 [ 381.690817][T13626] ? __virt_addr_valid+0x45f/0x530 [ 381.690832][T13626] ? __phys_addr_symbol+0x2f/0x70 [ 381.690846][T13626] ? __check_object_size+0x47a/0x730 [ 381.690869][T13626] netlink_sendmsg+0x742/0xcb0 [ 381.690899][T13626] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.690922][T13626] ? aa_sock_msg_perm+0x91/0x160 [ 381.690946][T13626] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.690963][T13626] __sock_sendmsg+0x221/0x270 [ 381.690985][T13626] ____sys_sendmsg+0x53a/0x860 [ 381.691007][T13626] ? __pfx_____sys_sendmsg+0x10/0x10 [ 381.691021][T13626] ? __fget_files+0x2a/0x410 [ 381.691043][T13626] ? __fget_files+0x2a/0x410 [ 381.691070][T13626] __sys_sendmsg+0x269/0x350 [ 381.691092][T13626] ? __pfx___sys_sendmsg+0x10/0x10 [ 381.691120][T13626] ? do_sys_openat2+0x17a/0x1d0 [ 381.691172][T13626] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 381.691193][T13626] ? do_syscall_64+0x100/0x230 [ 381.691213][T13626] ? do_syscall_64+0xb6/0x230 [ 381.691231][T13626] do_syscall_64+0xf3/0x230 [ 381.691249][T13626] ? clear_bhb_loop+0x35/0x90 [ 381.691270][T13626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.691288][T13626] RIP: 0033:0x7f05e0b8d169 [ 381.691301][T13626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.691313][T13626] RSP: 002b:00007f05e199f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 381.691331][T13626] RAX: ffffffffffffffda RBX: 00007f05e0da5fa0 RCX: 00007f05e0b8d169 [ 381.691342][T13626] RDX: 0000000000000000 RSI: 0000400000000480 RDI: 0000000000000003 [ 381.691351][T13626] RBP: 00007f05e199f090 R08: 0000000000000000 R09: 0000000000000000 [ 381.691361][T13626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.691371][T13626] R13: 0000000000000000 R14: 00007f05e0da5fa0 R15: 00007ffcdc23a598 [ 381.691393][T13626] [ 382.096014][T13635] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2763'. [ 382.142349][T13639] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2765'. [ 382.172852][T13635] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2763'. [ 382.196987][T13635] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2763'. [ 382.225695][T13635] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2763'. [ 382.244382][T13635] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2763'. [ 382.272784][T13635] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2763'. [ 382.287170][T13635] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2763'. [ 382.371546][T13635] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 382.750850][T13662] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 383.372563][T13661] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 383.466892][T13685] FAULT_INJECTION: forcing a failure. [ 383.466892][T13685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 383.495712][T13685] CPU: 1 UID: 0 PID: 13685 Comm: syz.4.2779 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 383.495738][T13685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 383.495749][T13685] Call Trace: [ 383.495755][T13685] [ 383.495763][T13685] dump_stack_lvl+0x241/0x360 [ 383.495789][T13685] ? __pfx_dump_stack_lvl+0x10/0x10 [ 383.495807][T13685] ? __pfx__printk+0x10/0x10 [ 383.495832][T13685] should_fail_ex+0x40a/0x550 [ 383.495859][T13685] _copy_to_user+0x31/0xb0 [ 383.495881][T13685] bpf_test_finish+0x212/0x890 [ 383.495909][T13685] ? __pfx_bpf_test_finish+0x10/0x10 [ 383.495934][T13685] ? bpf_test_init+0x137/0x160 [ 383.495954][T13685] bpf_prog_test_run_xdp+0x8f4/0x11e0 [ 383.495980][T13685] ? __pfx_lock_release+0x10/0x10 [ 383.496010][T13685] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 383.496033][T13685] ? __fget_files+0x2a/0x410 [ 383.496064][T13685] ? __fget_files+0x2a/0x410 [ 383.496088][T13685] ? fput+0x21b/0x290 [ 383.496106][T13685] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 383.496130][T13685] bpf_prog_test_run+0x2e4/0x360 [ 383.496155][T13685] __sys_bpf+0x487/0x820 [ 383.496177][T13685] ? __pfx___sys_bpf+0x10/0x10 [ 383.496209][T13685] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 383.496233][T13685] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 383.496257][T13685] ? do_syscall_64+0x100/0x230 [ 383.496279][T13685] __x64_sys_bpf+0x7c/0x90 [ 383.496299][T13685] do_syscall_64+0xf3/0x230 [ 383.496317][T13685] ? clear_bhb_loop+0x35/0x90 [ 383.496340][T13685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.496359][T13685] RIP: 0033:0x7effc1d8d169 [ 383.496374][T13685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.496387][T13685] RSP: 002b:00007effc2b53038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 383.496406][T13685] RAX: ffffffffffffffda RBX: 00007effc1fa5fa0 RCX: 00007effc1d8d169 [ 383.496418][T13685] RDX: 0000000000000050 RSI: 0000400000000180 RDI: 000000000000000a [ 383.496428][T13685] RBP: 00007effc2b53090 R08: 0000000000000000 R09: 0000000000000000 [ 383.496439][T13685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.496448][T13685] R13: 0000000000000000 R14: 00007effc1fa5fa0 R15: 00007fffa7909888 [ 383.496474][T13685] [ 384.915714][T13729] FAULT_INJECTION: forcing a failure. [ 384.915714][T13729] name failslab, interval 1, probability 0, space 0, times 0 [ 384.955194][T13729] CPU: 0 UID: 0 PID: 13729 Comm: syz.7.2796 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 384.955222][T13729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 384.955232][T13729] Call Trace: [ 384.955238][T13729] [ 384.955245][T13729] dump_stack_lvl+0x241/0x360 [ 384.955270][T13729] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.955288][T13729] ? __pfx__printk+0x10/0x10 [ 384.955307][T13729] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 384.955330][T13729] ? __pfx___might_resched+0x10/0x10 [ 384.955353][T13729] should_fail_ex+0x40a/0x550 [ 384.955379][T13729] should_failslab+0xac/0x100 [ 384.955401][T13729] __kmalloc_node_noprof+0xe1/0x4d0 [ 384.955421][T13729] ? __kvmalloc_node_noprof+0x72/0x190 [ 384.955448][T13729] __kvmalloc_node_noprof+0x72/0x190 [ 384.955472][T13729] bpf_test_run_xdp_live+0x21d/0x2220 [ 384.955495][T13729] ? __pfx_lock_release+0x10/0x10 [ 384.955520][T13729] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 384.955537][T13729] ? __pfx___might_resched+0x10/0x10 [ 384.955558][T13729] ? __mutex_unlock_slowpath+0x227/0x800 [ 384.955585][T13729] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 384.955604][T13729] ? synchronize_rcu+0x11b/0x360 [ 384.955631][T13729] ? __pfx_synchronize_rcu+0x10/0x10 [ 384.955669][T13729] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 384.955690][T13729] ? 0xffffffffa0000948 [ 384.955702][T13729] ? 0xffffffffa0001f98 [ 384.955713][T13729] ? 0xffffffffa000201c [ 384.955726][T13729] ? 0xffffffffa0002060 [ 384.955754][T13729] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 384.955790][T13729] ? _copy_from_user+0x95/0xb0 [ 384.955810][T13729] ? bpf_test_init+0x137/0x160 [ 384.955828][T13729] ? xdp_convert_md_to_buff+0x5b/0x330 [ 384.955850][T13729] bpf_prog_test_run_xdp+0x805/0x11e0 [ 384.955873][T13729] ? __pfx_lock_release+0x10/0x10 [ 384.955907][T13729] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 384.955926][T13729] ? __fget_files+0x2a/0x410 [ 384.955950][T13729] ? __fget_files+0x2a/0x410 [ 384.955972][T13729] ? fput+0x21b/0x290 [ 384.955991][T13729] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 384.956012][T13729] bpf_prog_test_run+0x2e4/0x360 [ 384.956036][T13729] __sys_bpf+0x487/0x820 [ 384.956057][T13729] ? __pfx___sys_bpf+0x10/0x10 [ 384.956088][T13729] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 384.956111][T13729] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 384.956133][T13729] ? do_syscall_64+0x100/0x230 [ 384.956156][T13729] __x64_sys_bpf+0x7c/0x90 [ 384.956173][T13729] do_syscall_64+0xf3/0x230 [ 384.956189][T13729] ? clear_bhb_loop+0x35/0x90 [ 384.956212][T13729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.956231][T13729] RIP: 0033:0x7ff5be98d169 [ 384.956245][T13729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.956259][T13729] RSP: 002b:00007ff5bf80c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 384.956277][T13729] RAX: ffffffffffffffda RBX: 00007ff5beba5fa0 RCX: 00007ff5be98d169 [ 384.956289][T13729] RDX: 0000000000000048 RSI: 0000400000000600 RDI: 000000000000000a [ 384.956299][T13729] RBP: 00007ff5bf80c090 R08: 0000000000000000 R09: 0000000000000000 [ 384.956309][T13729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.956318][T13729] R13: 0000000000000000 R14: 00007ff5beba5fa0 R15: 00007ffceabcbcc8 [ 384.956343][T13729] [ 384.958506][T13735] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 385.336125][T13742] syz.8.2801 (13742) used greatest stack depth: 18464 bytes left [ 385.817069][T13756] netlink: 'syz.7.2806': attribute type 72 has an invalid length. [ 386.030679][T13763] __nla_validate_parse: 29 callbacks suppressed [ 386.030697][T13763] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2809'. [ 386.156518][T13766] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2810'. [ 386.211933][T13766] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2810'. [ 386.276537][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 386.284845][T13766] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2810'. [ 386.294217][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 386.306247][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 386.345683][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 386.357371][ T5840] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 386.364684][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 386.468927][T13776] netlink: 'syz.8.2813': attribute type 13 has an invalid length. [ 386.581417][T13776] macvtap0: entered promiscuous mode [ 386.766319][T13776] macvtap0: refused to change device tx_queue_len [ 386.983401][T13796] netlink: 'syz.8.2820': attribute type 72 has an invalid length. [ 387.068816][T13798] bridge0: entered promiscuous mode [ 387.083464][T13798] macvlan2: entered promiscuous mode [ 387.101529][T13771] chnl_net:caif_netlink_parms(): no params data found [ 387.186473][T13800] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2822'. [ 387.261605][T13805] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2824'. [ 387.382551][T13771] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.416597][T13771] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.423867][T13771] bridge_slave_0: entered allmulticast mode [ 387.443357][T13771] bridge_slave_0: entered promiscuous mode [ 387.487574][T13771] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.495467][T13771] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.503973][T13771] bridge_slave_1: entered allmulticast mode [ 387.527049][T13771] bridge_slave_1: entered promiscuous mode [ 387.686084][T13771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.708768][T13771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.805182][T13771] team0: Port device team_slave_0 added [ 387.826880][T13771] team0: Port device team_slave_1 added [ 387.897892][T13826] netlink: 148 bytes leftover after parsing attributes in process `syz.7.2832'. [ 387.915814][T13826] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 388.044394][T13771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.072507][T13771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.120581][T13771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.149592][T13834] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2835'. [ 388.176177][T13771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.205642][T13771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.303963][T13771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.314567][T13841] netlink: 'syz.8.2838': attribute type 11 has an invalid length. [ 388.416171][ T5840] Bluetooth: hci1: command tx timeout [ 388.548684][T13771] hsr_slave_0: entered promiscuous mode [ 388.577503][T13771] hsr_slave_1: entered promiscuous mode [ 388.811801][T13851] vlan0: entered promiscuous mode [ 388.962178][T13771] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.074045][T13771] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.231316][T13771] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.378801][T13771] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.444097][T13861] 8021q: adding VLAN 0 to HW filter on device bond1 [ 389.444559][T13866] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2847'. [ 389.463882][T13858] dvmrp5: entered allmulticast mode [ 389.520867][T13862] dvmrp5: left allmulticast mode [ 389.746084][T13879] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2849'. [ 389.991512][T13771] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 390.021782][T13771] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 390.061770][T13771] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 390.081718][T13771] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 390.124424][T13891] Bluetooth: MGMT ver 1.23 [ 390.351946][T13771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.430609][T13771] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.469908][ T2953] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.477111][ T2953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.500888][ T5840] Bluetooth: hci1: command tx timeout [ 390.554831][ T2953] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.561976][ T2953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.000891][T13771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.076676][T13933] __nla_validate_parse: 6 callbacks suppressed [ 391.076694][T13933] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2869'. [ 391.182848][T13933] syz_tun: entered promiscuous mode [ 391.222027][T13933] macvtap1: entered promiscuous mode [ 391.235874][T13933] macvtap1: entered allmulticast mode [ 391.245602][T13933] syz_tun: entered allmulticast mode [ 391.272641][T13942] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2873'. [ 391.361657][T13942] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2873'. [ 391.460787][T13771] veth0_vlan: entered promiscuous mode [ 391.488742][T13771] veth1_vlan: entered promiscuous mode [ 391.541600][T13771] veth0_macvtap: entered promiscuous mode [ 391.574316][T13771] veth1_macvtap: entered promiscuous mode [ 391.593719][T13954] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2877'. [ 391.633143][T13771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.674571][T13771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.695203][T13771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.726310][T13771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.746749][T13771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.765759][T13771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.797184][T13771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.825645][T13771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.847003][T13771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.871412][T13771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.976755][T13771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.993417][T13771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.028812][T13771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.047897][T13771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.065340][T13771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.090956][T13771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.114363][T13771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.135766][T13771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.157199][T13771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.180232][T13771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.196414][T13771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.206608][T13771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.218387][T13771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.228491][T13771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.255256][T13771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.270828][T13771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.330916][T13771] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.350908][T13771] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.370064][T13771] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.389044][T13771] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.575965][ T5840] Bluetooth: hci1: command tx timeout [ 392.591916][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.635137][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.738334][ T3489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.754626][ T3489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.856618][T13979] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2888'. [ 392.905264][T13979] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2888'. [ 394.657938][ T5840] Bluetooth: hci1: command tx timeout [ 396.567740][T14053] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2920'. [ 396.766802][T14061] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2921'. [ 396.833489][T14061] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2921'. [ 396.843764][T14065] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2922'. [ 397.626863][T14095] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2934'. [ 398.340886][T14120] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2940'. [ 400.063058][T14120] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2940'. [ 400.533579][T14141] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2948'. [ 401.075282][T14155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2953'. [ 401.369192][T14163] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2958'. [ 401.536665][T14178] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 401.689247][T14183] __nla_validate_parse: 3 callbacks suppressed [ 401.689266][T14183] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2965'. [ 404.686681][T14213] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.2975'. [ 404.917593][T14217] netlink: 1624 bytes leftover after parsing attributes in process `syz.7.2977'. [ 405.155739][T14228] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2981'. [ 407.336164][T14238] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2986'. [ 407.502517][T14245] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.2990'. [ 408.085016][T14273] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.3003'. [ 408.156889][T14278] netlink: 'syz.5.3005': attribute type 21 has an invalid length. [ 408.197779][T14278] netlink: 'syz.5.3005': attribute type 1 has an invalid length. [ 408.394424][T14283] netlink: 'syz.8.3004': attribute type 13 has an invalid length. [ 410.545131][T14279] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3004'. [ 410.928364][T14305] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3015'. [ 410.945692][T14305] nbd: nbd0 already in use [ 411.031419][T14309] 8021q: adding VLAN 0 to HW filter on device bond1 [ 411.040639][T14309] bond0: (slave bond1): Enslaving as an active interface with an up link [ 412.073350][T14343] FAULT_INJECTION: forcing a failure. [ 412.073350][T14343] name failslab, interval 1, probability 0, space 0, times 0 [ 412.089568][T14343] CPU: 0 UID: 0 PID: 14343 Comm: syz.4.3030 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 412.089592][T14343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 412.089601][T14343] Call Trace: [ 412.089607][T14343] [ 412.089614][T14343] dump_stack_lvl+0x241/0x360 [ 412.089637][T14343] ? __pfx_dump_stack_lvl+0x10/0x10 [ 412.089651][T14343] ? __pfx__printk+0x10/0x10 [ 412.089666][T14343] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 412.089685][T14343] ? __pfx___might_resched+0x10/0x10 [ 412.089706][T14343] should_fail_ex+0x40a/0x550 [ 412.089729][T14343] should_failslab+0xac/0x100 [ 412.089748][T14343] kmem_cache_alloc_node_noprof+0x77/0x380 [ 412.089765][T14343] ? __alloc_skb+0x1c3/0x440 [ 412.089782][T14343] __alloc_skb+0x1c3/0x440 [ 412.089798][T14343] ? __pfx___alloc_skb+0x10/0x10 [ 412.089813][T14343] ? netlink_autobind+0xd6/0x2f0 [ 412.089831][T14343] ? netlink_autobind+0x2b0/0x2f0 [ 412.089851][T14343] netlink_sendmsg+0x634/0xcb0 [ 412.089878][T14343] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.089898][T14343] ? aa_sock_msg_perm+0x91/0x160 [ 412.089921][T14343] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.089937][T14343] __sock_sendmsg+0x221/0x270 [ 412.089957][T14343] ____sys_sendmsg+0x53a/0x860 [ 412.089978][T14343] ? __pfx_____sys_sendmsg+0x10/0x10 [ 412.089990][T14343] ? __fget_files+0x2a/0x410 [ 412.090011][T14343] ? __fget_files+0x2a/0x410 [ 412.090034][T14343] __sys_sendmmsg+0x36a/0x720 [ 412.090058][T14343] ? __pfx___sys_sendmmsg+0x10/0x10 [ 412.090081][T14343] ? __pfx_lock_release+0x10/0x10 [ 412.090098][T14343] ? kstrtouint_from_user+0x128/0x190 [ 412.090131][T14343] ? ksys_write+0x22a/0x2b0 [ 412.090146][T14343] ? __pfx_lock_release+0x10/0x10 [ 412.090168][T14343] ? sb_end_write+0xe9/0x1c0 [ 412.090195][T14343] ? vfs_write+0x7fa/0xd10 [ 412.090211][T14343] ? __mutex_unlock_slowpath+0x227/0x800 [ 412.090248][T14343] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 412.090269][T14343] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 412.090288][T14343] ? do_syscall_64+0x100/0x230 [ 412.090306][T14343] __x64_sys_sendmmsg+0xa0/0xb0 [ 412.090322][T14343] do_syscall_64+0xf3/0x230 [ 412.090337][T14343] ? clear_bhb_loop+0x35/0x90 [ 412.090358][T14343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.090374][T14343] RIP: 0033:0x7f1a4c18d169 [ 412.090388][T14343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.090400][T14343] RSP: 002b:00007f1a4d0c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 412.090416][T14343] RAX: ffffffffffffffda RBX: 00007f1a4c3a5fa0 RCX: 00007f1a4c18d169 [ 412.090426][T14343] RDX: 0492492492492627 RSI: 00004000000000c0 RDI: 0000000000000003 [ 412.090436][T14343] RBP: 00007f1a4d0c8090 R08: 0000000000000000 R09: 0000000000000000 [ 412.090444][T14343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.090452][T14343] R13: 0000000000000000 R14: 00007f1a4c3a5fa0 R15: 00007ffe0ed40988 [ 412.090474][T14343] [ 414.507091][T14362] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3039'. [ 414.527483][T14362] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3039'. [ 414.538579][T14362] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3039'. [ 414.548409][T14362] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3039'. [ 414.558155][T14362] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3039'. [ 414.567689][T14362] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3039'. [ 414.587798][T14362] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3039'. [ 414.618570][T14362] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3039'. [ 414.630186][T14362] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3039'. [ 414.641712][T14362] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3039'. [ 414.671815][T14362] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 414.721646][T14367] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 414.731560][T14367] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 414.889400][T14373] netlink: 'syz.7.3043': attribute type 10 has an invalid length. [ 414.915145][T14373] batman_adv: batadv0: Adding interface: team0 [ 414.931118][T14373] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.970404][T14375] netlink: 'syz.7.3043': attribute type 10 has an invalid length. [ 414.987861][T14373] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 415.008319][T14375] team0: entered promiscuous mode [ 415.013496][T14375] team_slave_0: entered promiscuous mode [ 415.035862][T14375] team_slave_1: entered promiscuous mode [ 415.042651][T14375] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.076019][T14375] batman_adv: batadv0: Interface activated: team0 [ 415.082600][T14375] batman_adv: batadv0: Interface deactivated: team0 [ 415.115735][T14375] batman_adv: batadv0: Removing interface: team0 [ 415.122834][T14375] bridge0: port 3(team0) entered blocking state [ 415.135680][T14375] bridge0: port 3(team0) entered disabled state [ 415.142172][T14375] team0: entered allmulticast mode [ 415.165634][T14375] team_slave_0: entered allmulticast mode [ 415.171423][T14375] team_slave_1: entered allmulticast mode [ 415.217694][T14375] bridge0: port 3(team0) entered blocking state [ 415.224067][T14375] bridge0: port 3(team0) entered forwarding state [ 419.632826][T14404] netlink: 'syz.5.3053': attribute type 2 has an invalid length. [ 419.641186][T14404] __nla_validate_parse: 9 callbacks suppressed [ 419.641434][T14404] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3053'. [ 419.916624][T14435] netlink: 240 bytes leftover after parsing attributes in process `syz.5.3056'. [ 420.372447][T14458] tipc: Started in network mode [ 420.377559][T14458] tipc: Node identity e0000002, cluster identity 4711 [ 420.385731][T14458] tipc: Enabling of bearer rejected, failed to enable media [ 420.553177][T14461] 8021q: adding VLAN 0 to HW filter on device bond2 [ 420.573820][T14461] team0: Port device bond2 added [ 421.195620][T14480] netlink: 'syz.6.3078': attribute type 10 has an invalid length. [ 421.240379][T14480] team0: Port device netdevsim0 added [ 421.263164][T14480] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 421.475819][T14493] netlink: 148 bytes leftover after parsing attributes in process `syz.5.3083'. [ 421.493279][T14491] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.3084'. [ 421.535805][T14493] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 422.131953][T14519] Cannot find add_set index 0 as target [ 423.531800][T14576] team0: left allmulticast mode [ 423.554101][T14576] team_slave_0: left allmulticast mode [ 423.573591][T14576] team_slave_1: left allmulticast mode [ 423.596423][T14576] bridge0: port 3(team0) entered disabled state [ 423.660402][T14576] bridge_slave_0: left allmulticast mode [ 423.678853][T14576] bridge_slave_0: left promiscuous mode [ 423.684841][T14576] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.727258][T14576] bridge_slave_1: left allmulticast mode [ 423.743300][T14576] bridge_slave_1: left promiscuous mode [ 423.743941][T14587] FAULT_INJECTION: forcing a failure. [ 423.743941][T14587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.756344][T14576] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.792773][T14587] CPU: 0 UID: 0 PID: 14587 Comm: syz.5.3122 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 423.792800][T14587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 423.792809][T14587] Call Trace: [ 423.792815][T14587] [ 423.792823][T14587] dump_stack_lvl+0x241/0x360 [ 423.792848][T14587] ? __pfx_dump_stack_lvl+0x10/0x10 [ 423.792862][T14587] ? __pfx__printk+0x10/0x10 [ 423.792880][T14587] ? __pfx_lock_release+0x10/0x10 [ 423.792909][T14587] should_fail_ex+0x40a/0x550 [ 423.792936][T14587] _copy_from_user+0x2d/0xb0 [ 423.792956][T14587] copy_msghdr_from_user+0xae/0x680 [ 423.792977][T14587] ? __pfx___might_resched+0x10/0x10 [ 423.793000][T14587] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 423.793026][T14587] ? do_recvmmsg+0x44e/0xab0 [ 423.793044][T14587] ? __might_fault+0xaa/0x120 [ 423.793064][T14587] do_recvmmsg+0x3bd/0xab0 [ 423.793092][T14587] ? __pfx_do_recvmmsg+0x10/0x10 [ 423.793129][T14587] ? ksys_write+0x22a/0x2b0 [ 423.793145][T14587] ? __pfx_lock_release+0x10/0x10 [ 423.793171][T14587] ? sb_end_write+0xe9/0x1c0 [ 423.793193][T14587] ? vfs_write+0x7fa/0xd10 [ 423.793211][T14587] ? __mutex_unlock_slowpath+0x227/0x800 [ 423.793239][T14587] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 423.793257][T14587] ? __fget_files+0x2a/0x410 [ 423.793292][T14587] __x64_sys_recvmmsg+0x199/0x250 [ 423.793313][T14587] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 423.793332][T14587] ? do_syscall_64+0x100/0x230 [ 423.793354][T14587] ? do_syscall_64+0xb6/0x230 [ 423.793374][T14587] do_syscall_64+0xf3/0x230 [ 423.793398][T14587] ? clear_bhb_loop+0x35/0x90 [ 423.793422][T14587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.793442][T14587] RIP: 0033:0x7ff9ef38d169 [ 423.793457][T14587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.793470][T14587] RSP: 002b:00007ff9f012b038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 423.793488][T14587] RAX: ffffffffffffffda RBX: 00007ff9ef5a5fa0 RCX: 00007ff9ef38d169 [ 423.793499][T14587] RDX: 03ffffffffffff67 RSI: 0000400000002440 RDI: 0000000000000004 [ 423.793511][T14587] RBP: 00007ff9f012b090 R08: 0000000000000000 R09: 0000000000000000 [ 423.793521][T14587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 423.793531][T14587] R13: 0000000000000000 R14: 00007ff9ef5a5fa0 R15: 00007ffe16356818 [ 423.793557][T14587] [ 424.100561][T14576] bond0: (slave bond_slave_0): Releasing backup interface [ 424.126193][T14576] bond0: (slave bond_slave_1): Releasing backup interface [ 424.165455][T14576] team_slave_0: left promiscuous mode [ 424.190122][T14576] team0: Port device team_slave_0 removed [ 424.197443][T14576] team_slave_1: left promiscuous mode [ 424.211842][T14576] team0: Port device team_slave_1 removed [ 424.218804][T14576] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.226746][T14576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.235915][T14576] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.243385][T14576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.270483][T14577] team0: Mode changed to "loadbalance" [ 424.863034][T14622] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3135'. [ 424.908117][T14625] netlink: 'syz.5.3136': attribute type 1 has an invalid length. [ 424.960061][T14627] FAULT_INJECTION: forcing a failure. [ 424.960061][T14627] name failslab, interval 1, probability 0, space 0, times 0 [ 424.996131][T14627] CPU: 1 UID: 0 PID: 14627 Comm: syz.5.3136 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 424.996157][T14627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 424.996168][T14627] Call Trace: [ 424.996174][T14627] [ 424.996182][T14627] dump_stack_lvl+0x241/0x360 [ 424.996208][T14627] ? __pfx_dump_stack_lvl+0x10/0x10 [ 424.996225][T14627] ? __pfx__printk+0x10/0x10 [ 424.996243][T14627] ? __kmalloc_cache_noprof+0x48/0x390 [ 424.996266][T14627] ? __pfx___might_resched+0x10/0x10 [ 424.996285][T14627] ? unwind_get_return_address+0x4d/0x90 [ 424.996313][T14627] should_fail_ex+0x40a/0x550 [ 424.996343][T14627] should_failslab+0xac/0x100 [ 424.996365][T14627] __kmalloc_cache_noprof+0x70/0x390 [ 424.996384][T14627] ? rtnl_newlink+0x13e/0x1d90 [ 424.996409][T14627] rtnl_newlink+0x13e/0x1d90 [ 424.996429][T14627] ? stack_depot_save_flags+0x37/0x940 [ 424.996459][T14627] ? kasan_save_track+0x51/0x80 [ 424.996476][T14627] ? kasan_save_free_info+0x40/0x50 [ 424.996496][T14627] ? __kasan_slab_free+0x59/0x70 [ 424.996512][T14627] ? kmem_cache_free+0x195/0x410 [ 424.996532][T14627] ? __pfx_rtnl_newlink+0x10/0x10 [ 424.996551][T14627] ? __netlink_deliver_tap+0x561/0x7f0 [ 424.996572][T14627] ? __pfx_validate_chain+0x10/0x10 [ 424.996589][T14627] ? __sock_sendmsg+0x221/0x270 [ 424.996607][T14627] ? ____sys_sendmsg+0x53a/0x860 [ 424.996622][T14627] ? __sys_sendmsg+0x269/0x350 [ 424.996636][T14627] ? do_syscall_64+0xf3/0x230 [ 424.996653][T14627] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.996693][T14627] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 424.996718][T14627] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 424.996748][T14627] ? mark_lock+0x9a/0x360 [ 424.996767][T14627] ? __lock_acquire+0x1397/0x2100 [ 424.996819][T14627] ? __pfx_lock_release+0x10/0x10 [ 424.996871][T14627] ? __pfx_rtnl_newlink+0x10/0x10 [ 424.996893][T14627] rtnetlink_rcv_msg+0x791/0xcf0 [ 424.996912][T14627] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 424.996937][T14627] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 424.996964][T14627] ? ref_tracker_free+0x643/0x7e0 [ 424.996986][T14627] netlink_rcv_skb+0x206/0x480 [ 424.997014][T14627] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 424.997037][T14627] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 424.997078][T14627] ? netlink_deliver_tap+0x2e/0x1b0 [ 424.997101][T14627] netlink_unicast+0x7f6/0x990 [ 424.997128][T14627] ? __pfx_netlink_unicast+0x10/0x10 [ 424.997145][T14627] ? __virt_addr_valid+0x45f/0x530 [ 424.997162][T14627] ? __phys_addr_symbol+0x2f/0x70 [ 424.997177][T14627] ? __check_object_size+0x47a/0x730 [ 424.997201][T14627] netlink_sendmsg+0x8de/0xcb0 [ 424.997234][T14627] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.997257][T14627] ? aa_sock_msg_perm+0x91/0x160 [ 424.997285][T14627] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.997303][T14627] __sock_sendmsg+0x221/0x270 [ 424.997326][T14627] ____sys_sendmsg+0x53a/0x860 [ 424.997351][T14627] ? __pfx_____sys_sendmsg+0x10/0x10 [ 424.997366][T14627] ? __fget_files+0x2a/0x410 [ 424.997390][T14627] ? __fget_files+0x2a/0x410 [ 424.997419][T14627] __sys_sendmsg+0x269/0x350 [ 424.997441][T14627] ? __pfx___sys_sendmsg+0x10/0x10 [ 424.997471][T14627] ? do_sys_openat2+0x17a/0x1d0 [ 424.997517][T14627] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 424.997540][T14627] ? do_syscall_64+0x100/0x230 [ 424.997561][T14627] ? do_syscall_64+0xb6/0x230 [ 424.997582][T14627] do_syscall_64+0xf3/0x230 [ 424.997600][T14627] ? clear_bhb_loop+0x35/0x90 [ 424.997622][T14627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.997642][T14627] RIP: 0033:0x7ff9ef38d169 [ 424.997657][T14627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.997671][T14627] RSP: 002b:00007ff9f010a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 424.997689][T14627] RAX: ffffffffffffffda RBX: 00007ff9ef5a6080 RCX: 00007ff9ef38d169 [ 424.997701][T14627] RDX: 0000000000004000 RSI: 0000400000000280 RDI: 0000000000000004 [ 424.997711][T14627] RBP: 00007ff9f010a090 R08: 0000000000000000 R09: 0000000000000000 [ 424.997721][T14627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.997731][T14627] R13: 0000000000000001 R14: 00007ff9ef5a6080 R15: 00007ffe16356818 [ 424.997758][T14627] [ 426.026336][T14654] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3149'. [ 426.174026][T14662] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3153'. [ 427.836479][T14735] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3186'. [ 427.850375][T14735] netlink: 'syz.8.3186': attribute type 1 has an invalid length. [ 428.159196][T14751] FAULT_INJECTION: forcing a failure. [ 428.159196][T14751] name failslab, interval 1, probability 0, space 0, times 0 [ 428.185691][T14751] CPU: 0 UID: 0 PID: 14751 Comm: syz.8.3192 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 428.185718][T14751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 428.185727][T14751] Call Trace: [ 428.185734][T14751] [ 428.185741][T14751] dump_stack_lvl+0x241/0x360 [ 428.185768][T14751] ? __pfx_dump_stack_lvl+0x10/0x10 [ 428.185785][T14751] ? __pfx__printk+0x10/0x10 [ 428.185805][T14751] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 428.185827][T14751] ? __pfx___might_resched+0x10/0x10 [ 428.185851][T14751] should_fail_ex+0x40a/0x550 [ 428.185878][T14751] should_failslab+0xac/0x100 [ 428.185900][T14751] kmem_cache_alloc_node_noprof+0x77/0x380 [ 428.185921][T14751] ? __alloc_skb+0x1c3/0x440 [ 428.185940][T14751] __alloc_skb+0x1c3/0x440 [ 428.185960][T14751] ? __pfx___alloc_skb+0x10/0x10 [ 428.185978][T14751] ? netlink_autobind+0xd6/0x2f0 [ 428.185997][T14751] ? netlink_autobind+0x2b0/0x2f0 [ 428.186022][T14751] netlink_sendmsg+0x634/0xcb0 [ 428.186053][T14751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 428.186084][T14751] ? aa_sock_msg_perm+0x91/0x160 [ 428.186111][T14751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 428.186130][T14751] __sock_sendmsg+0x221/0x270 [ 428.186152][T14751] ____sys_sendmsg+0x53a/0x860 [ 428.186178][T14751] ? __pfx_____sys_sendmsg+0x10/0x10 [ 428.186193][T14751] ? __fget_files+0x2a/0x410 [ 428.186217][T14751] ? __fget_files+0x2a/0x410 [ 428.186245][T14751] __sys_sendmsg+0x269/0x350 [ 428.186267][T14751] ? __pfx___sys_sendmsg+0x10/0x10 [ 428.186296][T14751] ? do_sys_openat2+0x17a/0x1d0 [ 428.186338][T14751] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 428.186362][T14751] ? do_syscall_64+0x100/0x230 [ 428.186382][T14751] ? do_syscall_64+0xb6/0x230 [ 428.186402][T14751] do_syscall_64+0xf3/0x230 [ 428.186419][T14751] ? clear_bhb_loop+0x35/0x90 [ 428.186443][T14751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.186463][T14751] RIP: 0033:0x7f05e0b8d169 [ 428.186478][T14751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.186491][T14751] RSP: 002b:00007f05e197e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 428.186507][T14751] RAX: ffffffffffffffda RBX: 00007f05e0da6080 RCX: 00007f05e0b8d169 [ 428.186518][T14751] RDX: 0000000000000000 RSI: 0000400000000400 RDI: 0000000000000005 [ 428.186528][T14751] RBP: 00007f05e197e090 R08: 0000000000000000 R09: 0000000000000000 [ 428.186538][T14751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.186547][T14751] R13: 0000000000000000 R14: 00007f05e0da6080 R15: 00007ffcdc23a598 [ 428.186570][T14751] [ 428.668615][T14764] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3198'. [ 429.545087][T14793] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 429.986435][T14804] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3214'. [ 430.322453][T14816] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.3219'. [ 430.573570][T14825] FAULT_INJECTION: forcing a failure. [ 430.573570][T14825] name failslab, interval 1, probability 0, space 0, times 0 [ 430.607188][T14825] CPU: 1 UID: 0 PID: 14825 Comm: syz.8.3225 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 430.607213][T14825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 430.607224][T14825] Call Trace: [ 430.607231][T14825] [ 430.607238][T14825] dump_stack_lvl+0x241/0x360 [ 430.607266][T14825] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.607284][T14825] ? __pfx__printk+0x10/0x10 [ 430.607315][T14825] should_fail_ex+0x40a/0x550 [ 430.607342][T14825] should_failslab+0xac/0x100 [ 430.607364][T14825] ? skb_clone+0x20c/0x390 [ 430.607382][T14825] kmem_cache_alloc_noprof+0x70/0x380 [ 430.607409][T14825] skb_clone+0x20c/0x390 [ 430.607430][T14825] __netlink_deliver_tap+0x3c4/0x7f0 [ 430.607463][T14825] ? netlink_deliver_tap+0x2e/0x1b0 [ 430.607482][T14825] netlink_deliver_tap+0x19d/0x1b0 [ 430.607505][T14825] netlink_unicast+0x7c4/0x990 [ 430.607532][T14825] ? __pfx_netlink_unicast+0x10/0x10 [ 430.607549][T14825] ? __virt_addr_valid+0x45f/0x530 [ 430.607567][T14825] ? __phys_addr_symbol+0x2f/0x70 [ 430.607582][T14825] ? __check_object_size+0x47a/0x730 [ 430.607606][T14825] netlink_sendmsg+0x8de/0xcb0 [ 430.607640][T14825] ? __pfx_netlink_sendmsg+0x10/0x10 [ 430.607664][T14825] ? aa_sock_msg_perm+0x91/0x160 [ 430.607693][T14825] ? __pfx_netlink_sendmsg+0x10/0x10 [ 430.607712][T14825] __sock_sendmsg+0x221/0x270 [ 430.607737][T14825] ____sys_sendmsg+0x53a/0x860 [ 430.607763][T14825] ? __pfx_____sys_sendmsg+0x10/0x10 [ 430.607778][T14825] ? __fget_files+0x2a/0x410 [ 430.607803][T14825] ? __fget_files+0x2a/0x410 [ 430.607833][T14825] __sys_sendmsg+0x269/0x350 [ 430.607856][T14825] ? __pfx___sys_sendmsg+0x10/0x10 [ 430.607887][T14825] ? do_sys_openat2+0x17a/0x1d0 [ 430.607940][T14825] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 430.607962][T14825] ? do_syscall_64+0x100/0x230 [ 430.607980][T14825] ? do_syscall_64+0xb6/0x230 [ 430.607998][T14825] do_syscall_64+0xf3/0x230 [ 430.608016][T14825] ? clear_bhb_loop+0x35/0x90 [ 430.608040][T14825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.608060][T14825] RIP: 0033:0x7f05e0b8d169 [ 430.608075][T14825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.608086][T14825] RSP: 002b:00007f05e199f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 430.608105][T14825] RAX: ffffffffffffffda RBX: 00007f05e0da5fa0 RCX: 00007f05e0b8d169 [ 430.608116][T14825] RDX: 0000000000000080 RSI: 00004000000002c0 RDI: 0000000000000003 [ 430.608126][T14825] RBP: 00007f05e199f090 R08: 0000000000000000 R09: 0000000000000000 [ 430.608135][T14825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.608143][T14825] R13: 0000000000000000 R14: 00007f05e0da5fa0 R15: 00007ffcdc23a598 [ 430.608168][T14825] [ 431.281498][T14837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3228'. [ 431.337732][T14837] ip6tnl0: entered promiscuous mode [ 431.727909][T14847] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.3233'. [ 431.867918][T14850] netlink: 'syz.6.3234': attribute type 10 has an invalid length. [ 431.912028][T14857] netlink: 'syz.6.3234': attribute type 10 has an invalid length. [ 431.939625][T14857] netlink: 2 bytes leftover after parsing attributes in process `syz.6.3234'. [ 431.949047][T14850] batman_adv: batadv0: Adding interface: team0 [ 431.949068][T14850] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.949093][T14850] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 431.997305][T14857] team0: entered promiscuous mode [ 432.012990][T14857] team_slave_0: entered promiscuous mode [ 432.023683][T14857] team_slave_1: entered promiscuous mode [ 432.078310][T14857] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 432.105298][T14857] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.137767][T14857] batman_adv: batadv0: Interface activated: team0 [ 432.158305][T14857] batman_adv: batadv0: Interface deactivated: team0 [ 432.174191][T14857] batman_adv: batadv0: Removing interface: team0 [ 432.210760][T14857] bridge0: port 3(team0) entered blocking state [ 432.236569][T14869] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.3234'. [ 432.255197][T14857] bridge0: port 3(team0) entered disabled state [ 432.282944][T14857] team0: entered allmulticast mode [ 432.288409][T14857] team_slave_0: entered allmulticast mode [ 432.294274][T14857] team_slave_1: entered allmulticast mode [ 432.300393][T14857] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:562 [ 432.309951][T14857] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 14857, name: syz.6.3234 [ 432.319594][T14857] preempt_count: 0, expected: 0 [ 432.324641][T14857] RCU nest depth: 1, expected: 0 [ 432.329999][T14857] 2 locks held by syz.6.3234/14857: [ 432.335876][T14857] #0: ffffffff8fed6908 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc4c/0x1d90 [ 432.345367][T14857] #1: ffffffff8eb392e0 (rcu_read_lock){....}-{1:3}, at: team_change_rx_flags+0x29/0x330 [ 432.357148][T14857] CPU: 1 UID: 0 PID: 14857 Comm: syz.6.3234 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 432.357174][T14857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 432.357185][T14857] Call Trace: [ 432.357191][T14857] [ 432.357200][T14857] dump_stack_lvl+0x241/0x360 [ 432.357226][T14857] ? __pfx_dump_stack_lvl+0x10/0x10 [ 432.357246][T14857] ? __pfx__printk+0x10/0x10 [ 432.357275][T14857] __might_resched+0x5d4/0x780 [ 432.357300][T14857] ? dev_set_rx_mode+0x57/0x2e0 [ 432.357326][T14857] ? __pfx___might_resched+0x10/0x10 [ 432.357348][T14857] ? mark_lock+0x9a/0x360 [ 432.357368][T14857] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 432.357390][T14857] ? netif_set_allmulti+0x224/0x380 [ 432.357419][T14857] __mutex_lock+0x126/0x1010 [ 432.357443][T14857] ? __pfx___dev_notify_flags+0x10/0x10 [ 432.357478][T14857] ? __local_bh_enable_ip+0x168/0x200 [ 432.357502][T14857] ? dev_set_allmulti+0x11c/0x270 [ 432.357524][T14857] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 432.357542][T14857] ? netif_set_allmulti+0x224/0x380 [ 432.357565][T14857] ? __pfx___mutex_lock+0x10/0x10 [ 432.357584][T14857] ? veth_set_multicast_list+0x9/0x10 [ 432.357601][T14857] ? dev_set_rx_mode+0x233/0x2e0 [ 432.357629][T14857] ? netif_set_allmulti+0x264/0x380 [ 432.357662][T14857] dev_set_allmulti+0x11c/0x270 [ 432.357691][T14857] team_change_rx_flags+0x1a8/0x330 [ 432.357710][T14857] ? team_change_rx_flags+0x29/0x330 [ 432.357732][T14857] ? __pfx_team_change_rx_flags+0x10/0x10 [ 432.357751][T14857] netif_set_allmulti+0x20e/0x380 [ 432.357782][T14857] dev_set_allmulti+0x143/0x270 [ 432.357811][T14857] br_add_if+0x317/0xef0 [ 432.357834][T14857] ? validate_linkmsg+0x828/0xa40 [ 432.357863][T14857] do_set_master+0x579/0x730 [ 432.357895][T14857] do_setlink+0xfee/0x40f0 [ 432.357946][T14857] ? __pfx_do_setlink+0x10/0x10 [ 432.357987][T14857] ? __pfx___might_resched+0x10/0x10 [ 432.358012][T14857] ? __pfx___mutex_trylock_common+0x10/0x10 [ 432.358036][T14857] ? rcu_is_watching+0x15/0xb0 [ 432.358056][T14857] ? trace_contention_end+0x3c/0x120 [ 432.358076][T14857] ? __mutex_lock+0x397/0x1010 [ 432.358098][T14857] ? __pfx_aa_get_newest_label+0x10/0x10 [ 432.358129][T14857] ? rtnl_newlink+0xc4c/0x1d90 [ 432.358152][T14857] ? __pfx___mutex_lock+0x10/0x10 [ 432.358182][T14857] ? ns_capable+0x8a/0xf0 [ 432.358202][T14857] ? rtnl_link_get_net_capable+0x168/0x340 [ 432.358230][T14857] rtnl_newlink+0x15a6/0x1d90 [ 432.358252][T14857] ? stack_depot_save_flags+0x37/0x940 [ 432.358291][T14857] ? __pfx_rtnl_newlink+0x10/0x10 [ 432.358310][T14857] ? __netlink_deliver_tap+0x561/0x7f0 [ 432.358333][T14857] ? __pfx_validate_chain+0x10/0x10 [ 432.358349][T14857] ? __sock_sendmsg+0x221/0x270 [ 432.358369][T14857] ? ____sys_sendmsg+0x53a/0x860 [ 432.358384][T14857] ? __sys_sendmsg+0x269/0x350 [ 432.358399][T14857] ? do_syscall_64+0xf3/0x230 [ 432.358417][T14857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.358468][T14857] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 432.358495][T14857] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 432.358529][T14857] ? mark_lock+0x9a/0x360 [ 432.358551][T14857] ? __lock_acquire+0x1397/0x2100 [ 432.358608][T14857] ? __pfx_lock_release+0x10/0x10 [ 432.358648][T14857] ? __pfx_rtnl_newlink+0x10/0x10 [ 432.358673][T14857] rtnetlink_rcv_msg+0x791/0xcf0 [ 432.358693][T14857] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 432.358720][T14857] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 432.358750][T14857] ? ref_tracker_free+0x643/0x7e0 [ 432.358773][T14857] netlink_rcv_skb+0x206/0x480 [ 432.358796][T14857] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 432.358821][T14857] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 432.358866][T14857] ? netlink_deliver_tap+0x2e/0x1b0 [ 432.358891][T14857] netlink_unicast+0x7f6/0x990 [ 432.358921][T14857] ? __pfx_netlink_unicast+0x10/0x10 [ 432.358939][T14857] ? __virt_addr_valid+0x45f/0x530 [ 432.358956][T14857] ? __phys_addr_symbol+0x2f/0x70 [ 432.358972][T14857] ? __check_object_size+0x47a/0x730 [ 432.358999][T14857] netlink_sendmsg+0x8de/0xcb0 [ 432.359034][T14857] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.359061][T14857] ? aa_sock_msg_perm+0x91/0x160 [ 432.359090][T14857] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.359110][T14857] __sock_sendmsg+0x221/0x270 [ 432.359134][T14857] ____sys_sendmsg+0x53a/0x860 [ 432.359162][T14857] ? __pfx_____sys_sendmsg+0x10/0x10 [ 432.359177][T14857] ? __fget_files+0x2a/0x410 [ 432.359203][T14857] ? __fget_files+0x2a/0x410 [ 432.359235][T14857] __sys_sendmsg+0x269/0x350 [ 432.359258][T14857] ? __pfx___sys_sendmsg+0x10/0x10 [ 432.359306][T14857] ? trace_sys_enter+0x74/0x120 [ 432.359323][T14857] ? __pfx_lock_release+0x10/0x10 [ 432.359357][T14857] ? trace_sys_enter+0x74/0x120 [ 432.359372][T14857] ? rcu_is_watching+0x15/0xb0 [ 432.359392][T14857] ? trace_sys_enter+0x25/0x120 [ 432.359414][T14857] do_syscall_64+0xf3/0x230 [ 432.359434][T14857] ? clear_bhb_loop+0x35/0x90 [ 432.359465][T14857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.359487][T14857] RIP: 0033:0x7fea7278d169 [ 432.359504][T14857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.359518][T14857] RSP: 002b:00007fea705f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 432.359536][T14857] RAX: ffffffffffffffda RBX: 00007fea729a6080 RCX: 00007fea7278d169 [ 432.359548][T14857] RDX: 0000000000000000 RSI: 0000400000000100 RDI: 0000000000000009 [ 432.359559][T14857] RBP: 00007fea7280e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 432.359570][T14857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 432.359580][T14857] R13: 0000000000000000 R14: 00007fea729a6080 R15: 00007fffc6e6f858 [ 432.359610][T14857] [ 432.359849][T14857] [ 432.908447][T14857] ============================= [ 432.913291][T14857] [ BUG: Invalid wait context ] [ 432.918135][T14857] 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 Tainted: G W [ 432.926773][T14857] ----------------------------- [ 432.931601][T14857] syz.6.3234/14857 is trying to lock: [ 432.936961][T14857] ffff888034e8cd28 (&dev->lock){+.+.}-{4:4}, at: dev_set_allmulti+0x11c/0x270 [ 432.945837][T14857] other info that might help us debug this: [ 432.951716][T14857] context-{5:5} [ 432.955168][T14857] 2 locks held by syz.6.3234/14857: [ 432.960350][T14857] #0: ffffffff8fed6908 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc4c/0x1d90 [ 432.969403][T14857] #1: ffffffff8eb392e0 (rcu_read_lock){....}-{1:3}, at: team_change_rx_flags+0x29/0x330 [ 432.979679][T14857] stack backtrace: [ 432.983487][T14857] CPU: 1 UID: 0 PID: 14857 Comm: syz.6.3234 Tainted: G W 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 432.983506][T14857] Tainted: [W]=WARN [ 432.983511][T14857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 432.983520][T14857] Call Trace: [ 432.983525][T14857] [ 432.983531][T14857] dump_stack_lvl+0x241/0x360 [ 432.983550][T14857] ? __pfx_dump_stack_lvl+0x10/0x10 [ 432.983563][T14857] ? __pfx__printk+0x10/0x10 [ 432.983580][T14857] __lock_acquire+0x15a8/0x2100 [ 432.983605][T14857] lock_acquire+0x1ed/0x550 [ 432.983622][T14857] ? dev_set_allmulti+0x11c/0x270 [ 432.983643][T14857] ? __pfx_lock_acquire+0x10/0x10 [ 432.983660][T14857] ? dev_set_rx_mode+0x57/0x2e0 [ 432.983683][T14857] ? __pfx___might_resched+0x10/0x10 [ 432.983699][T14857] ? mark_lock+0x9a/0x360 [ 432.983712][T14857] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 432.983730][T14857] ? netif_set_allmulti+0x224/0x380 [ 432.983749][T14857] __mutex_lock+0x19c/0x1010 [ 432.983763][T14857] ? dev_set_allmulti+0x11c/0x270 [ 432.983781][T14857] ? __pfx___dev_notify_flags+0x10/0x10 [ 432.983800][T14857] ? __local_bh_enable_ip+0x168/0x200 [ 432.983815][T14857] ? dev_set_allmulti+0x11c/0x270 [ 432.983832][T14857] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 432.983845][T14857] ? netif_set_allmulti+0x224/0x380 [ 432.983863][T14857] ? __pfx___mutex_lock+0x10/0x10 [ 432.983877][T14857] ? veth_set_multicast_list+0x9/0x10 [ 432.983890][T14857] ? dev_set_rx_mode+0x233/0x2e0 [ 432.983908][T14857] ? netif_set_allmulti+0x264/0x380 [ 432.983928][T14857] dev_set_allmulti+0x11c/0x270 [ 432.983948][T14857] team_change_rx_flags+0x1a8/0x330 [ 432.983964][T14857] ? team_change_rx_flags+0x29/0x330 [ 432.983978][T14857] ? __pfx_team_change_rx_flags+0x10/0x10 [ 432.983993][T14857] netif_set_allmulti+0x20e/0x380 [ 432.984014][T14857] dev_set_allmulti+0x143/0x270 [ 432.984033][T14857] br_add_if+0x317/0xef0 [ 432.984048][T14857] ? validate_linkmsg+0x828/0xa40 [ 432.984066][T14857] do_set_master+0x579/0x730 [ 432.984086][T14857] do_setlink+0xfee/0x40f0 [ 432.984112][T14857] ? __pfx_do_setlink+0x10/0x10 [ 432.984133][T14857] ? __pfx___might_resched+0x10/0x10 [ 432.984149][T14857] ? __pfx___mutex_trylock_common+0x10/0x10 [ 432.984165][T14857] ? rcu_is_watching+0x15/0xb0 [ 432.984179][T14857] ? trace_contention_end+0x3c/0x120 [ 432.984193][T14857] ? __mutex_lock+0x397/0x1010 [ 432.984208][T14857] ? __pfx_aa_get_newest_label+0x10/0x10 [ 432.984229][T14857] ? rtnl_newlink+0xc4c/0x1d90 [ 432.984245][T14857] ? __pfx___mutex_lock+0x10/0x10 [ 432.984262][T14857] ? ns_capable+0x8a/0xf0 [ 432.984277][T14857] ? rtnl_link_get_net_capable+0x168/0x340 [ 432.984296][T14857] rtnl_newlink+0x15a6/0x1d90 [ 432.984311][T14857] ? stack_depot_save_flags+0x37/0x940 [ 432.984334][T14857] ? __pfx_rtnl_newlink+0x10/0x10 [ 432.984350][T14857] ? __netlink_deliver_tap+0x561/0x7f0 [ 432.984367][T14857] ? __pfx_validate_chain+0x10/0x10 [ 432.984380][T14857] ? __sock_sendmsg+0x221/0x270 [ 432.984395][T14857] ? ____sys_sendmsg+0x53a/0x860 [ 432.984407][T14857] ? __sys_sendmsg+0x269/0x350 [ 432.984420][T14857] ? do_syscall_64+0xf3/0x230 [ 432.984435][T14857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.984459][T14857] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 432.984477][T14857] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 432.984498][T14857] ? mark_lock+0x9a/0x360 [ 432.984511][T14857] ? __lock_acquire+0x1397/0x2100 [ 432.984538][T14857] ? __pfx_lock_release+0x10/0x10 [ 432.984561][T14857] ? __pfx_rtnl_newlink+0x10/0x10 [ 432.984577][T14857] rtnetlink_rcv_msg+0x791/0xcf0 [ 432.984594][T14857] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 432.984611][T14857] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 432.984630][T14857] ? ref_tracker_free+0x643/0x7e0 [ 432.984644][T14857] netlink_rcv_skb+0x206/0x480 [ 432.984661][T14857] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 432.984684][T14857] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 432.984707][T14857] ? netlink_deliver_tap+0x2e/0x1b0 [ 432.984724][T14857] netlink_unicast+0x7f6/0x990 [ 432.984742][T14857] ? __pfx_netlink_unicast+0x10/0x10 [ 432.984756][T14857] ? __virt_addr_valid+0x45f/0x530 [ 432.984769][T14857] ? __phys_addr_symbol+0x2f/0x70 [ 432.984781][T14857] ? __check_object_size+0x47a/0x730 [ 432.984799][T14857] netlink_sendmsg+0x8de/0xcb0 [ 432.984820][T14857] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.984838][T14857] ? aa_sock_msg_perm+0x91/0x160 [ 432.984857][T14857] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.984873][T14857] __sock_sendmsg+0x221/0x270 [ 432.984890][T14857] ____sys_sendmsg+0x53a/0x860 [ 432.984906][T14857] ? __pfx_____sys_sendmsg+0x10/0x10 [ 432.984918][T14857] ? __fget_files+0x2a/0x410 [ 432.984936][T14857] ? __fget_files+0x2a/0x410 [ 432.984955][T14857] __sys_sendmsg+0x269/0x350 [ 432.984970][T14857] ? __pfx___sys_sendmsg+0x10/0x10 [ 432.984992][T14857] ? trace_sys_enter+0x74/0x120 [ 432.985004][T14857] ? __pfx_lock_release+0x10/0x10 [ 432.985024][T14857] ? trace_sys_enter+0x74/0x120 [ 432.985036][T14857] ? rcu_is_watching+0x15/0xb0 [ 432.985049][T14857] ? trace_sys_enter+0x25/0x120 [ 432.985062][T14857] do_syscall_64+0xf3/0x230 [ 432.985077][T14857] ? clear_bhb_loop+0x35/0x90 [ 432.985094][T14857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.985110][T14857] RIP: 0033:0x7fea7278d169 [ 432.985123][T14857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.985135][T14857] RSP: 002b:00007fea705f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 432.985149][T14857] RAX: ffffffffffffffda RBX: 00007fea729a6080 RCX: 00007fea7278d169 [ 432.985158][T14857] RDX: 0000000000000000 RSI: 0000400000000100 RDI: 0000000000000009 [ 432.985167][T14857] RBP: 00007fea7280e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 432.985176][T14857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 432.985183][T14857] R13: 0000000000000000 R14: 00007fea729a6080 R15: 00007fffc6e6f858 [ 432.985198][T14857] [ 433.645719][T14857] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 433.659834][T14857] bridge0: port 3(team0) entered blocking state [ 433.666243][T14857] bridge0: port 3(team0) entered forwarding state [ 440.417307][ T1295] ieee802154 phy0 wpan0: encryption failed: -22