last executing test programs: 5m18.285875491s ago: executing program 0 (id=760): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @none, 0x701, 0x1}, 0xe) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000140007800800114000000000050015002c0000000500010006000000050005000a00000005000400000000000900020073793a69702c6d616300"/92], 0x5c}}, 0x0) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x1}, 0x14}}, 0x24004044) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r2) recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{&(0x7f0000000300)=@isdn, 0x80, &(0x7f0000002480)=[{&(0x7f0000000380)=""/46, 0x2e}, {&(0x7f0000002600)=""/170, 0xaa}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/4094, 0xffe}], 0x4, &(0x7f00000024c0)=""/109, 0x6d}, 0xd4d7}], 0x1, 0x12001, &(0x7f0000000140)={0x77359400}) sendmsg$IEEE802154_START_REQ(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f00000025c0)=ANY=[@ANYBLOB="35b80193df09bc3455", @ANYRES16=r5, @ANYBLOB="b00b29bd7000fedbdf250d0000000500180005000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0xc1) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r2) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010028bd7000fedbdf2501000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4) 5m18.188681921s ago: executing program 0 (id=763): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) recvmmsg(r4, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000001c0)={0xf0}, 0x8) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001600)={0xfffffffffffffe34, r3, 0x1, 0x70bd23, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_UDP_SPORT={0x0, 0x1a, 0x4e21}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_IP6_DADDR={0x0, 0x20, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @L2TP_ATTR_OFFSET={0x0, 0x3, 0x6}, @L2TP_ATTR_OFFSET={0x0, 0x3, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x5) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r5 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000001440)=[{{&(0x7f0000001580)=@hci={0x1f, 0xffffffffffffffff, 0xa77c631676d59402}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000200)="1b40d514f19b8ca4242db3b377c6927753b2790dca5cab647374666895501bf8c9a2333c453f9e6eb0b660183bee7c5129cf12a725b0b5b1cb6d126470f7efb3c98c5bac14fc155c", 0x48}, {&(0x7f0000000180)="73192db53200c56eca246878f811d0c685bc5f4814f033", 0x17}, {&(0x7f0000000600)="0e554c0b30d72665d76e3a354a72386a0860e987116c6c4f4f8175b175fa88f1bb50218286fe61b3b31d599e919be90d8d042484b8f276591309055c1321f4991232dc38621fbf1ffb4c8d4485932eaae05d713283b3a45f83123a183370b9a0472379cf958e9005444031b15cc3c81feeac46515a80b638639e47edf522eed5913ba8beb15071affe5fbd0538451e0748e0c3f7e80464a0d10fe3879aef86cf85caaaad89b37efce5c588b5", 0xac}], 0x3}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)="72ae76d2a40f188fa229dde0ced8627598ac92636cc3dc63e9529aba90c67bb6d0d8b4826ab03e022e69a63f26bb90d1769efeb9e0fae737b8e3f3f48540006d853b33140074ac1c55a7f97f7f9911068ad2ce35af754c0f25", 0x59}], 0x1, &(0x7f0000000700)=[{0x48, 0x10e, 0x3, "5c31561359499833a6e0d9513e3c747119ab3d4ee419a1fa31f3643ce0823e95216a91189a70bc1e4caaa5bfd85e8f3d58"}, {0x38, 0x1, 0xac, "deab04b62266319d9ea561a50765adbc365665d929b6bbb6e583ae8ac9a19d67d8f7887cb0"}, {0x50, 0x11, 0x2, "84b5d6f93870be5d9690c96341c0795ce8bf4c073295e3d4eb627d0ddb654eb517ae79491a73a5289db4db95de4f97e82e54f7c84ccd2b5d8cab3e72ee24ad"}, {0x70, 0x10e, 0x4, "cc676a413c6679fb9b20d445e536920a0f067d8be8e96db2d058dfd83e4bf3b90d7e8ce89ac6f3ebb94203778ef7e49012e5259b38eeabda93ebffcfcfb4c3db2afe857af03a6486cb6e16b1583ccfd37fa95f1e8ba58e5f4583860169ba7e"}, {0x78, 0x111, 0x0, "24e23899faf916b657de6f7cb0faaff3c82230ffe3bfd835175d7b6b4495bdd751489bbb949ddcaea47058b2508bb61a3fec6dd86a08a6064a2c19d2190b86d8db8b9fb143a7a0d3cf0d4f9ffe1a8b14e21a42e1677456df0f184b81a1b7528dba330c59"}, {0xb0, 0x119, 0x0, "58354c918cc5c48eb549d4af908f0aae3829e9927c8a2d456fc12dab2b6ce09d2c6e85a8250f954b4b38f28fcc6edbe505040deabe2d8c5d959b74261b91ad16775b58250d8a033edbead3fd66904d893fc2b3e07ac8c41a7884b82b169b19c2d8b042f7156bd93476ea6b57d3110b92baf3228e29acaf839c3d9f97310d53a727622e57684c12cc954f357938d30e0f3f9e48b1f0a7a9e03a"}], 0x268}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000980)="96a81c9bddc62b8d7f391624dc1aa391b06e5b101dc9297e6259ea3ba12f4aa1f40b0ae67648254f76d78b17cefdab2319bc134b96ffc621023b4ce6247e570f8e7d9f8318d983cae5a2d1c6344930213dafad7f7333dc512393a38ab4d723df31f4aaf6385ffd28bdafd5f0472beb3f2c9e0e58b2c2296469ef5a513a5c4dc561131253a04d3370b0f4fa8acf489244d726a91fcb258cd87036dfcb81ba2aae5f9adcfe455a", 0xa6}, {&(0x7f0000000a40)="ee5effb6e795ee96d5c4628bbbf15fefa058f8af63b4456438b80bcd531ff062ce541a", 0x23}, {&(0x7f0000000a80)="844717cf798ec441c865e0b45c597c80b37158b6bc2e2db1b00f5004a7e1d498864f424837733c9fde1ddc9ccdc1622141c0df987e20ef3b9a62edb81707f5d63f9150eb20136bbd101e921f3bc015084e6b435a5bdfec7eed598d5770b6926aae28bf792198ce85f523f681ea3659a23a825e3f994dffb9451b5021be3310340644f3a282bcb2d37de09cf9b036b0f92ad13178cfaf72169c2a59aa0005201cb99d0845f391f3f49a046c5345", 0xad}, {&(0x7f0000000b40)="76f546ddfbc58a2c310a6f39876a0d75594b39ef9df25191da1184c307d96e47acd0eb08c461ac8d012f5045f716025ce100ed550f0a9fbfd5fbec5b60c417672e46cc2155ef507f7f14387407883e6d637d8e214b885880656023fcff45035b4bb0b59d779e9e5a8c139ed24428c85765b97665a17a5bb90f45aac5", 0x7c}, {&(0x7f0000000bc0)="81aefeab9a6d44fe40ddba08af993351b0ab80829378f8e8b45613e7a6e32da30e99174193e2357e45f28608fd760fd2209b085e66e9848b9c0289972deea1c4e611d68aedd08ae4e1518b722cfb230967b17a20a6f089f5a8997fa6707cce7fb6cbaf608e7f48e73f53b7f7c0d6cad942aa", 0x72}], 0x5, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x258}}, {{&(0x7f0000000f40)=@in6={0xa, 0x4e21, 0x40, @rand_addr=' \x01\x00', 0x7}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000fc0)="85d7db2dc5ce145c6dfb591bbb9e59546b1d4a770b74b817ae06fdb8d9dd063ac56ea44b2fa1", 0x26}, {&(0x7f0000001000)}, {&(0x7f0000001040)="cb13df9688f5157513dcc17af502babb37e8092287e41386113853b4a7fb901fe90c53fd0a7931162b9123e1f2a27e5fa139c2a485c81dd2827ed694e7eeaf1d88eb9832e1b6fc8437cdc54eb4f97ee09601f6d47d045c8ed8ad42250092c95ae35d6c0def14b43bbc7d8590083cbd5bd623d405398557ae87ab400af46b7ac743d7efbd43d1242c68dccabacc3a3fd2da", 0x91}, {&(0x7f0000001100)="28eaf443e8ca6cdd2043fe615afb01f2371e1d7c306c4160197b4ce30f0b28bb606143f06428d58a2d687d89c86c22134228e3bc58588481285538318298e4c21818ecffb9298e1cc4e96ba02dc7cbf8ef0d629dda2c2f07d727763e4b5b92cbf64b90fe49d3f4472d377438813ad47ea83e28ef3f2cb4885081bcffc62ec9b3e3a2e3234f3ce6004ed51da6b0b67e24c1fd657628dd222ccbce98994534e6fd4df4d87661ebe9cbd9e85e588ff04028d25adb47695c34f3f76e293ea1a109115018cc27b0dee9cd39344fd9150da54d78fd4e185cbb779b2a6f2542e18a421126ed8b5df02ee678ab91d928a7ebc7db", 0xf0}], 0x4}}, {{&(0x7f0000001240)=@nl=@unspec, 0x80, &(0x7f0000001400)=[{&(0x7f00000012c0)="ab34ee1ce33e1c9c91262fc3266f3a5a5a8ac819a8bc51bedac4896a20849523c54349a4ddef7e3d7d6b83ae731e218dba5bd4dbb64c46f711d70b", 0x3b}, {&(0x7f0000001300)="a61984", 0x3}, {&(0x7f0000001340)="f4d190f84a14b4d7c067ce6ba945a0b3a539a025c50a19090ac358ebf8314d013d8907437acfb01306bdf676eb5ad5f41d2d2d211fad4c9b43e5531141993efafc5b765e9f228eea2188d4aedba7f694bdc01dca95c1ab1e7b848d5205faa269dd04fc9c2a2b443c3a8f2724ea53379f88521b986ce3ea1a0297d2d6a03736962b069776a50be97b193407abfff55280379106668ddf037158dfd0f4f087", 0x9e}], 0x3, &(0x7f0000003340)=[{0x60, 0x107, 0x1d6d93f8, "35884c8a5704b6ee1310d91a29f17a61698f4ca3a823c1220155cd5021583420864ec4f51920c9f3f512da68b83bf08bbfed26c0ae4cb372cc9020165e7da8a1b5b1cc0433793ae8093f7b5bdfe891"}, {0x60, 0x113, 0x8, "120f6e21e1c8d5b85c38a2b425b2f17f928da20e3e83e403a3ce239469add586e72b06564c532d4ef474a725bfaa3cf27320394359fa65fdb07d8f701283d52126704dd19b0905600e3f835a"}, {0x1010, 0x88, 0x5, "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"}], 0x10d0}}], 0x5, 0x40890) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3200000000a4000000060a090400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a300000000014000000110001"], 0x118}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r10, 0x117, 0x5, 0x0, 0xf) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800900010067656e65766500000cfe018008890200010000001400030067656e65766531000000000000000000"], 0x50}}, 0x0) read$alg(r5, &(0x7f0000002300)=""/4128, 0x1020) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 5m17.573231957s ago: executing program 2 (id=784): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x891}, 0x20000010) 5m17.57192223s ago: executing program 2 (id=786): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000100)={'syzkaller0\x00', @link_local}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x2, 0x5}, 0x48) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000480)={'ip6_vti0\x00', 0x0}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x34, r8, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBPORT={0x5, 0x3}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x34}, 0x1, 0x40030000000000}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route_sched(r5, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r9}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 5m17.430065132s ago: executing program 2 (id=792): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@link_local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "01a600", 0x8, 0x11, 0x0, @local, @mcast2, {[], {0x4e23, 0x4e20, 0x8}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x84, @remote, 0x0, 0x0, 'lblc\x00', 0x20, 0xfffffffe, 0x8000007f}, 0x2c) r6 = socket(0x27, 0x6, 0x0) sendmmsg$inet(r6, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f00000004c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) recvmmsg(r5, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000780)=""/132, 0x84}, {&(0x7f0000000a00)=""/254, 0xfe}, {&(0x7f0000000b00)=""/240, 0xf0}, {&(0x7f0000000c00)=""/104, 0x68}, {&(0x7f0000000680)=""/49, 0x31}, {&(0x7f0000000700)=""/29, 0x1d}, {&(0x7f0000000840)=""/20, 0x14}, {&(0x7f0000000c80)=""/179, 0xb3}], 0x8}, 0x9}, {{&(0x7f0000000dc0)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000e40)=""/78, 0x4e}, {&(0x7f00000008c0)=""/48, 0x30}, {&(0x7f0000000ec0)=""/80, 0x50}], 0x3, &(0x7f0000000f40)=""/148, 0x94}, 0x8}, {{&(0x7f0000001000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001080)=""/79, 0x4f}, {&(0x7f0000001100)=""/109, 0x6d}, {&(0x7f0000001180)=""/44, 0x2c}, {&(0x7f00000011c0)=""/216, 0xd8}, {&(0x7f00000012c0)=""/250, 0xfa}], 0x5, &(0x7f0000001440)=""/78, 0x4e}, 0x7}], 0x3, 0x40000000, &(0x7f0000001580)={0x77359400}) bind$alg(r7, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000015c0)={0x0, r3}, 0x10) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r9, 0x40089413, &(0x7f0000001600)) r10 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711065000000000095"], 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) writev(r8, &(0x7f0000000740)=[{&(0x7f0000000180)="207bc9875a5ce52ae56fbd9cb2643c7a7f0fd4b02938f64c6086829480cb80704ca7ad3e442cc6ab395c8643f738611ae6cc69d742f98ecd2ea9fc51ac6efe1cd209086a37510ee5df36b7c66ca565a399a57ad477699cb7445949895fc3dc14c4bcdf770e42439f6d493c4d13f7e19a11a08a2be4615407fbb100daaef983c6a969586ea8b2e3b31b81b0d1832b8e29d6d37163d387dec6cd571c090b611605599658f3bb509c110f71cf47b31bbf0bccd53101e63257f991a6b093842e13db43df22b858779f124e9d2c7b1745", 0xce}, {&(0x7f0000000580)="76b165c213f88afa4c53688f124937850b1a56eb70", 0x15}, {&(0x7f00000006c0)='d', 0x1}], 0x3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r4, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xdb, &(0x7f0000000380)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x9f, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='freezer.self_freezing\x00', 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)=@getroute={0x14, 0x1a, 0x20, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x200088c0}, 0x8010) bind$xdp(r8, &(0x7f0000000500)={0x2c, 0xd, r11, 0x40, r12}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_kthread_stop_ret\x00', r4, 0x0, 0x2000003}, 0x18) accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000040)=0x10, 0x80800) 5m17.32283221s ago: executing program 0 (id=796): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) (async) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) recvmsg$unix(r0, &(0x7f0000000380)={&(0x7f0000000700), 0x6e, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/30, 0x1e}, {&(0x7f0000000480)=""/161, 0xa1}], 0x2, &(0x7f0000000640)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}], 0x90}, 0x40) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff080004400000008108000840000000032000018006000340000200001400018008000100ac1414aa08000200ffffffff08000440000000075c000a8008000140000000015000028014000180080001007f0000010800020064e100000c0002202c0001002f0000002c000180040000002001000000000000000008000000010214000400"/176], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e"], 0x1c}}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000001c0)={'dummy0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000001c0)={'dummy0\x00'}) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r13, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, 0x3f7, 0x300, 0x70bd2b, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4020004) (async) sendmsg$AUDIT_MAKE_EQUIV(r13, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, 0x3f7, 0x300, 0x70bd2b, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4020004) getsockopt$sock_timeval(r10, 0x1, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 5m17.222520041s ago: executing program 4 (id=798): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000007000000ff0f00000700000000000000e4142e1b02a075b4665919a144e79fba43195035ba9e70f6eddff0f1ebf797f6e663671e6b9ff438a26c52c4dcee"], 0x48) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r1 = socket$kcm(0x10, 0x400000002, 0x0) (rerun: 32) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000d80)="170000007a006bcd9e3fe3dc6e08170007000054250000", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4040, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000040)={'pimreg\x00', @link_local}) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2100000001040000050000dfbfffffff02000000d5faa3efe6a48cd9285c46f2d8c8734a0660f7c532358bc7390437a017041be6", @ANYRES32=0x1, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000030000000100"/28], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r4, &(0x7f0000000340)="4bbd552bc81f73d50bc80c7931fd3dc30505bb364ede5c98551b7b576ada77776f5a64f27aca1fd91c3b734c1994df589096d3b10cfeda02bcfcb6ab7c5f7275ed8761176ee376794bfcb25ab745064197ebce08caff2725dd54b0f00adb1096b68ab4b217d1d37c24dad11cfff3eaadc1a34d17a6a8930ee53c6545831b1da6fead4410d43b3988de6d391e46aebce0baab086bfcfcfecf1c6f35454bc4b0bccec37247bc559a06be3d82c68366604890006f035c11b9ceb3ecf7b1eab58065fd1449060b4365dc512812f6"}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r3}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r3, 0x0, 0x0}, 0x20) (async, rerun: 64) close(0xffffffffffffffff) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 5m17.188085237s ago: executing program 4 (id=801): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) bind$tipc(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r2, 0x501, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0xffffffff, 0x3, 0x101, 0x400}}}}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4098) 5m17.081110046s ago: executing program 4 (id=803): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x40, 0x20, 0x1, 0x70bd23, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x2}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0xfffffff8}]}, 0x40}, 0x1, 0x0, 0x0, 0x24048844}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000400)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x30, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x6, 0x2, [{}, {0x0, 0x5}]}]}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000005c0)={0x314, r3, 0x200, 0x18, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x3, 0x3e}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x342}, @NL80211_ATTR_SCAN_SSIDS={0x28, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x1}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x21c, 0x84, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x44, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x10000}, @NL80211_BAND_LC={0x8, 0x5, 0x7}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x7}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x401}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x10001}, @NL80211_BAND_LC={0x8, 0x5, 0xffffffff}, @NL80211_BAND_LC={0x8, 0x5, 0x7}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="44e81750a116"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x6}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="302dce75da45"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}]}, {0x74, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xfa9e}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x9}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xfffffffa}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x80000000}, @NL80211_BAND_LC={0x8, 0x5, 0x3}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xd}]}]}, {0x9c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="8487e6bf3c99"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x8000000}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x4}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x1000}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xfffffff8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x1}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x1}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x5}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x400}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="bf1bc1bd305e"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x3}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x3}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="a4c618cbde1e"}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1b, 0x1, @random="20626becfe7f12640231c5c1662c81d73156efd3c0008d"}]}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x8c, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x7f, 0x3, "53f48238da8d4e1934aeeb881ab071f1d8aedd8d82d48118654444530206343c61b7689f178c7a4b819c183adb88a7d3fe1cda656fec4868fc2b661522a70da6931660d3fa89120bd2ef3043561794bb82d2f98a69a5676c9fef033a7bd3291cc762957b757d8c4d892d8985a6617ceaa4008e890f72df64c2d96e"}, @NL80211_BAND_2GHZ={0x5, 0x0, "f6"}]}]}, 0x314}, 0x1, 0x0, 0x0, 0x40001}, 0x1) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x80111500, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) ppoll(&(0x7f0000000300)=[{r8, 0x8102}], 0x1, 0x0, 0x0, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x9, [@enum={0x5, 0x2, 0x0, 0x6, 0x4, [{0x2, 0x7}, {0x3, 0x10001}]}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x1}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xf, 0x4}]}, @ptr={0x2, 0x0, 0x0, 0x2, 0x2}, @func={0xd, 0x0, 0x0, 0xc, 0x4}, @var={0x20d, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x61, 0x5f, 0x0, 0x2e, 0x5f, 0x0, 0x61]}}, &(0x7f0000000140)=""/132, 0x89, 0x84, 0x1, 0x9, 0x10000}, 0x28) r11 = socket$inet6(0xa, 0x80803, 0x87) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) r14 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) recvmsg$unix(r14, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000100)=""/151, 0x97}], 0x1}, 0x10020) setsockopt$PNPIPE_ENCAP(r14, 0x113, 0x1, &(0x7f0000000440), 0x4) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r12, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000002c000100000000000000152bf3d07e8718eff6e63c8ec76a506c", @ANYRESHEX=r0, @ANYBLOB="0b000080976b6408686030001800018011000d80905176c518740da397a9423603000000"], 0x3c}], 0x1}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x2, 0x2, 0x547b31180522e04c, 0x0, 0x0, 0x0, r15}, {0x0, 0x4, 0x0, 0x0, 0x7}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast}, 0x0, @in6=@private1}}, 0xe8) ioctl$AUTOFS_IOC_READY(r10, 0x9360, 0x9) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710431000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x11, '\x00', 0x0, @sk_msg, r10}, 0x94) 5m17.015516783s ago: executing program 3 (id=806): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x93b4ff7d46c0bf5d}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0xc6c26ce7baab2a11, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x1}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x5}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xf}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 5m16.930283231s ago: executing program 4 (id=807): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETLINK(r0, 0x400454cd, 0x304) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10) getsockopt(r2, 0x1, 0x4, 0x0, &(0x7f00000000c0)) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014"], 0x30}}, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) bind$inet(r6, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) getsockname$packet(r6, 0x0, &(0x7f0000000380)) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) close(0x3) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) 5m16.929718298s ago: executing program 3 (id=808): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000001000000000000000000000000000007006153a6148e90e0ddc8336cfea45260e738541aeae5d24e454a1a67c526c7e51f99d6fa119eb4cfdd196289a8d5af5b198975433e2161b584de1ac69cbd7422dc109fef1ae5"], 0x50) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4040}, 0x20008000) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r1) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) (async) ioctl$TUNSETLINK(r3, 0x400454cd, 0x304) (async) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000100)={'ipvlan0\x00', @remote}) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}, @NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'geneve1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r7, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000400010000001c001a8018000a80140007"], 0x58}, 0x1, 0x2}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) (async) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 5m16.914980149s ago: executing program 3 (id=810): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000180)='`', 0xcc, 0x0, &(0x7f0000000240)={0x6, 0x0, r2, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x60, r6, 0x4c1dad3e3d6a7499, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}}, {0xffffffffffffff7c, 0x2, @in6={0xa, 0x4e23, 0x2, @local, 0x5}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008884}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, 0x0, 0x4c000) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r3) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', r2, 0x29, 0x6, 0x1, 0x6, 0x10, @local, @dev={0xfe, 0x80, '\x00', 0x40}, 0x700, 0x7, 0x6, 0x2}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, r7, 0xb38, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7a}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}]}, 0x68}, 0x1, 0x0, 0x0, 0x48810}, 0x20000004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552da15f6", @ANYRES32=0x0, @ANYBLOB="000000293c000000280012800a00010076786c616e00000018000280140013"], 0x48}}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r9, &(0x7f0000000140), 0x4924b68, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r10 = socket(0x2, 0x80805, 0x0) r11 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r10, 0x84, 0x19, &(0x7f0000000100)={r12, 0x671a}, 0x8) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) 5m16.808626278s ago: executing program 3 (id=812): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0x2c, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r1}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x24, r4, 0x407, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000000000000000004001a80100003800c0005800800000000000000100003803000018005000c000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a400000000060000c"], 0x270}}, 0x0) 5m16.805640239s ago: executing program 3 (id=813): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1c, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}, @TCA_BPF_ACT={0x4}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@ipv4_newnexthop={0x24, 0x68, 0x109, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8, 0x10}]}, 0x24}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'veth0_to_bond\x00', 0x4000}) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r6, 0x114, 0x1, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETSTEERINGEBPF(r7, 0x800454e0, &(0x7f00000000c0)=r7) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=@newtclass={0x30, 0x28, 0x10, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xc, 0x5}, {0xffe0, 0xb}, {0x10, 0xf}}, [@tclass_kind_options=@c_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000004}, 0x4040) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv4_delrule={0x2c, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_FLOW={0x8, 0x18, 0x3}, @FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e20}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000002000010000000000000000000a0000000000000000000000056d5f0000000000"], 0x24}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'lo\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0xff, 0x20, "3259851885ff8e54954adc4b8db49c86de690c866fcee502b43347add4946941"}}) 5m16.753557392s ago: executing program 4 (id=815): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) r4 = accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000540)) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="08002660ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x840) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x4, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0) recvfrom$inet(r6, &(0x7f0000000340)=""/42, 0x2a, 0x2, &(0x7f0000000500)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_int(r6, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x8, 0x80000, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000140)=@req={0x4, 0x3, 0xfffffff8, 0x8000}, 0x10) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010001ffffdffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f00001c0012800e000100697036677265746170000000080002800400120008000a00", @ANYRES32=r10, @ANYBLOB="cb76223a138bf0920f350cc8a9170284085d1d94ad8e0d1233162322d6ec538f448a97ebd2c4098764c3b923094e279d71a0cece3ac62434803cde5efd54ef8fe3109505a223a9f581316416e293d20756c2908d0f9bb5b925ee193f9dd5834200b79b770b06eb9599640f67c052"], 0x44}, 0x1, 0x0, 0x0, 0x20004005}, 0x4000) 5m16.64966396s ago: executing program 3 (id=818): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x28502, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x72, 0xa, 0x3) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x2c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0xd, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x6, 0xfb}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) 5m16.633152968s ago: executing program 4 (id=820): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x297f, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @local, 0x9}], 0x1c) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40000103) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom(r0, 0x0, 0x0, 0x40016300, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa0}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x38}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r5, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000013c0)={0x24, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x24}}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x10e) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002740)=""/4090, 0xffa}, {&(0x7f0000000300)=""/130, 0x82}], 0x2}}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)=""/97, 0x61}, {&(0x7f0000001740)=""/4080, 0xff0}, {&(0x7f0000004740)=""/4073, 0xfe9}], 0x3}, 0x8}], 0x3, 0x2, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="88000000", @ANYRES16=r3, @ANYBLOB="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"], 0x88}, 0x1, 0x0, 0x0, 0xc050}, 0x40000d0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610448000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) 5m16.536382212s ago: executing program 2 (id=821): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001680)=[{{&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)=""/89, 0x59}, {&(0x7f00000001c0)=""/210, 0xd2}], 0x2}, 0x9}, {{&(0x7f00000002c0)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000000340)=""/112, 0x70}, {&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000500)=""/153, 0x99}, {&(0x7f00000005c0)=""/4096, 0x1000}], 0x4, &(0x7f00000015c0)=""/130, 0x82}, 0x400}], 0x2, 0x22, &(0x7f0000001700)={r1, r2+60000000}) getsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f0000000180)) 5m16.468859814s ago: executing program 2 (id=823): setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x19}, @empty, 0x2, "4f6fb4d1af0f724e6118ecfbac0200843af297baebb0efa284da1403011a00", 0x0, 0x4, 0x81, 0x81}, 0x3c) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/time\x00') ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 5m16.377678167s ago: executing program 0 (id=825): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var={0x0, 0x0, 0x0, 0xe, 0xfffffffd}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {0x100000}, {}]}, @func, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2000000}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x28) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32, @ANYBLOB="050001"], 0x38}}, 0x0) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r2, 0xd8, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0xffffffffffffff0e, 0x0}}, 0x10) 5m16.376517629s ago: executing program 2 (id=826): pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711215000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) pipe(&(0x7f0000000040)) (async) socket$packet(0x11, 0x3, 0x300) (async) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711215000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) (async) 5m16.363303839s ago: executing program 0 (id=827): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000440)={0x1, 0x4, 0x0, 0x0, 0x3}) accept4$netrom(0xffffffffffffffff, &(0x7f0000000000)={{}, [@remote, @netrom, @netrom, @netrom, @bcast, @null]}, &(0x7f0000000080)=0x48, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000440)={0x1, 0x4, 0x0, 0x0, 0x3}) (async) accept4$netrom(0xffffffffffffffff, &(0x7f0000000000)={{}, [@remote, @netrom, @netrom, @netrom, @bcast, @null]}, &(0x7f0000000080)=0x48, 0x800) (async) 5m16.283045523s ago: executing program 0 (id=828): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0x6}, {0x4, 0xe}}}, 0x24}}, 0x40004) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$ax25_int(r1, 0x101, 0x19, &(0x7f0000000640), &(0x7f0000000680)=0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8}, [@ldst={0x6, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 4m54.95247602s ago: executing program 32 (id=828): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0x6}, {0x4, 0xe}}}, 0x24}}, 0x40004) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$ax25_int(r1, 0x101, 0x19, &(0x7f0000000640), &(0x7f0000000680)=0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8}, [@ldst={0x6, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 4m54.927719247s ago: executing program 33 (id=826): pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711215000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) pipe(&(0x7f0000000040)) (async) socket$packet(0x11, 0x3, 0x300) (async) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711215000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) (async) 4m54.88027415s ago: executing program 34 (id=818): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x28502, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x72, 0xa, 0x3) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x2c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0xd, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x6, 0xfb}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) 4m54.81644846s ago: executing program 35 (id=820): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x297f, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @local, 0x9}], 0x1c) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40000103) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom(r0, 0x0, 0x0, 0x40016300, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa0}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x38}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r5, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000013c0)={0x24, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x24}}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x10e) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002740)=""/4090, 0xffa}, {&(0x7f0000000300)=""/130, 0x82}], 0x2}}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)=""/97, 0x61}, {&(0x7f0000001740)=""/4080, 0xff0}, {&(0x7f0000004740)=""/4073, 0xfe9}], 0x3}, 0x8}], 0x3, 0x2, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="88000000", @ANYRES16=r3, @ANYBLOB="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"], 0x88}, 0x1, 0x0, 0x0, 0xc050}, 0x40000d0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610448000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) 2.121879589s ago: executing program 8 (id=4795): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000063015e00000000009500000000000000b57e61be1672c7f644ff255f3d1c73a14e5dfb59770e66bf0b0d"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.017704513s ago: executing program 8 (id=4797): r0 = accept(0xffffffffffffffff, &(0x7f0000000180)=@tipc=@id, &(0x7f0000000200)=0x80) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@int=0xc, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xb9}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 2.008221663s ago: executing program 8 (id=4800): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="580000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000380012800b000100697036746e6c0000280002800500090000000000050004008000000014000300ff"], 0x58}}, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8916, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710431000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a118001500060014c3ff0000120800030043000040a80019000400014006000d00036010fab94dcf5c0461c1d67f6f940030a2cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f6d7f3ef48286112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4260000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c0aaac99eddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb06000000588a6364", 0xd8}], 0x1}, 0x8881) 1.811062943s ago: executing program 7 (id=4802): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = socket(0x10, 0x804, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x89}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES64=r3, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}, 0x1, 0x0, 0x0, 0x20008820}, 0x0) sendto$packet(r0, &(0x7f0000000480)="7eeb99b6008cff010000f0d01d76", 0xe, 0x94, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x63) 1.464393261s ago: executing program 7 (id=4804): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009d00e2cdb2ff5e6ad6cf3d000000000400a275f4e9b99d40ec9835000000000000000000cbef722fa54618404c171c7e7412206bb738aa055783507ada21c15da79c7daae7dbfdf2703062509120ab22941854c12acb43fc23ba3a21ebab146b6486f4ab32132b1bc9b42a65791b823dca8a1a2168e0771165ef3076b9cae783888aad9e7d72b6b795a80a"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) (async) r1 = socket$kcm(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000003700000000000000a6a000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90) (async) r2 = socket$inet(0x2b, 0x801, 0x0) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r3, &(0x7f0000000340)="18000000010005", 0x7) (async) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) (async) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, 0x0, 0x20) (async, rerun: 64) r4 = socket$key(0xf, 0x3, 0x2) (rerun: 64) sendmsg$key(r4, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) recvmmsg(r4, &(0x7f0000000740)=[{{&(0x7f00000005c0)=@tipc, 0x80, &(0x7f0000000800)=[{&(0x7f0000001740)=""/4081, 0xff1}, {&(0x7f0000000640)=""/251, 0xfb}, {&(0x7f0000000300)=""/52, 0x34}, {&(0x7f0000000180)=""/51, 0x33}, {&(0x7f0000000240)=""/140, 0x8c}], 0x5}}], 0x4000000000000b7, 0x2, 0x0) read(r4, &(0x7f0000000200)=""/7, 0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000880)={0x244, 0x10, 0x400, 0x70bd2d, 0x25dfdbfd, {0x12}, [@nested={0x139, 0x134, 0x0, 0x1, [@nested={0x4, 0x72}, @generic="7c81b51f9d70afb3857553f6ed1c581d47490076f33ffe6a24b7445a9a37b3bce43d9842c8f90885c4abe5a0957ccda55db23adfa3a32a301a116a914b82b45d9de9e79a77cc4999e257b20fa9f300b06b335ea5b6bee0ea4422dad3de24601b89d0740e77be", @generic="cdbfe0d5b9bda3b1405818356739155a1173237ead34589d2578492a095f3da011343547c661e28d040c62767afb19e2cfa71563aa783c8c904a4ee7f45f756b865a46b2ba0cacd44b0f377c64a7e5b3d6911db21b07fde95da2a029588e65282b6cef6659fd895b1ff2972eb0efe56e570b80d22f19c773f7db951869385bed8e0ec7a788ce49feb0eb423b04d0daa6769891aa59f9e24eb7031963c1061f5ffca5fae66b42b865c0a528a22e3ff502401c95aa778e2da37eeadab6e31e4bb2d73f23661625a4bb6fb23a"]}, @generic="fcd191517be5b2dfbfe7ad407604c5530e227988db6a2e8e4e3f949a392b03eda65f1aed893facca14c1f8a6ac528a30bc7d498ab94f51e63e57b8d6b38739680eac780b0be2dbe32226cb34c6a4eb294f67feecd58cdd07f7cd14197c8fe3e72975815ee3e0579f24771aaf250171651f21ef856cd6e4280df435c2f152e69be9abd8d3652f41eda0d16148a8a3086d11b2095d2f72436f524ed23d83a92fdc55d26981db3b53e53a14000f27014a5e88823a9c179d4ffda47a128b20eff1969960862e19c8ba21d0fb38dfca3cdeeb7ae298ce62365aa749e937e20cc9f5dd9b7ce7a7970822ed1c380ab2af8e1285e0b52c8f"]}, 0x244}, 0x1, 0x0, 0x0, 0x4008005}, 0x800) (async) setsockopt$inet_mreqsrc(r2, 0x0, 0x25, &(0x7f0000000380)={@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1c}}, 0xc) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x50, &(0x7f0000000000)={0x0, 0x0}, 0x10) (async) r7 = accept4$inet6(r6, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000400)=0x1c, 0x800) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e23, 0x4, @local, 0x40}, 0x1c) sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000040)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x43}, @multicast1}}}], 0x20}, 0x20002800) 1.259724682s ago: executing program 5 (id=4806): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) (async) r1 = socket(0x2d, 0x2, 0x0) recvmmsg(r1, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x41, 0x0) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r4) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x44, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000040}, 0x50) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000140)={r3}, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={r3, 0x7}, &(0x7f0000000080)=0x8) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) getsockopt$inet6_tcp_int(r0, 0x6, 0x6, 0x0, &(0x7f0000000040)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.232520592s ago: executing program 7 (id=4807): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000004a76"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x7, 0x0, 0x0, {0x0, 0xea60}, {}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "4acede967c288ef4"}}, 0x20000408}}, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)={0x38, r2, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x38}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000140)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000080)='syzkaller\x00', 0x9}, 0x94) 1.14339785s ago: executing program 7 (id=4809): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x800b, 0x60388}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPOIB_MODE={0x6}]}}}, @IFLA_LINK={0x8}]}, 0x44}}, 0x0) r1 = accept4$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000140)=0x10, 0x800) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x307, 0x2c, 0x6, 0x9, 0x7, @remote}, 0x10) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r2, 0x29, 0x20, &(0x7f0000000000)="1f40d5e334af84988340ea07a2381c6347df4ebcceb94f2b151f6928131ec0c9", 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 964.071438ms ago: executing program 7 (id=4810): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000003e0007012fbd7000fcdbdf25047c0000040000002000018006000600800a000014001900fe"], 0x38}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r4, &(0x7f0000000700)={0x2, 0x4e22, @remote}, 0x10) getpeername(r4, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000000c0)=ANY=[], 0x48}}, 0x4040000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x1, 0x70bd25, 0x7, {0x0, 0x0, 0x0, r7, 0x44198, 0x188f}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x811}, 0x40000c0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) getsockopt$inet6_mptcp_buf(r8, 0x11c, 0x1, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0xe, 0xb}}}, 0x24}}, 0x800) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x20, 0x34, 0x107, 0xffffffff, 0xfffffffe, {0x1, 0x7c}, [@nested={0xc, 0x3, 0x0, 0x1, [@nested={0x5, 0x149, 0x0, 0x1, [@generic="a8"]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0xfff1}, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r13) 877.665272ms ago: executing program 8 (id=4811): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x400b}, {0x8, 0x11, 0xffffffff}}}, 0x24}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) preadv(r2, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000600)=""/231, 0xe7}], 0x2, 0x10, 0x0) 819.145132ms ago: executing program 6 (id=4812): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="2e00000011008188040f46ecdb4cb9cca7480ef413000000e3bd6efb440009000e000a400d000000ba80000054eb", 0x2e}], 0x1}, 0x6400000c) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x1000) 764.773886ms ago: executing program 8 (id=4813): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRES8=0x0, @ANYRESDEC=r0, @ANYBLOB="493437a70a966c1d3f6fb1e4a24dd088a7e158d028f09b69567ed7d0bbfd55e53e1af99fd8d96bb7d154c570866f41eaa03a736ea169c3052a5d3b0beb8badeacf6f1d95a0486f81fd074e67bf9a7f86f7f0d40d360aeb94cd18ea2825edce2922bdfe92e702f144625a54fdf920898c36eb002416aaccaf94b56c8f89f6f2fd28ce62bbb5aca0b49fc2f02da0f8c7aa753663baaaadf7dba0ec99b3e4f4004bffd60daa9f48573a092c0b6f0cf5ce9a4f4ed0d0dab24187aa5c61b9bf19cb7d2ce2e9281df6f59f19afb880ea400699bea375f5f91e", @ANYRESDEC=r0, @ANYRESOCT=0x0, @ANYRES64=r0, @ANYRESHEX=r0, @ANYRES16=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r3 = socket(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x3, @remote, 0x9}, 0x1c) sendmmsg$inet(r3, &(0x7f0000001cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8202, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r8}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r9}, 0x10) close(r10) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000040)={'ip6gre0\x00', 0x400}) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000100)={'wlan0\x00', 0x400}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xffff, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8}, {{0x1, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000380)={'syztnl0\x00', &(0x7f00000004c0)={'sit0\x00', r11, 0x20, 0x20, 0x6, 0x2, {{0x10, 0x4, 0x2, 0x3b, 0x40, 0x64, 0x0, 0x1, 0x4, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x28, 0xed, 0x0, 0x8, [0x7, 0xfffffffe, 0x1, 0xd944, 0x0, 0x0, 0x9, 0x2, 0x4]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) 690.947942ms ago: executing program 5 (id=4814): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfffa}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000340)={r2, r2, 0x8, 0xffffffffffffff8a, &(0x7f0000000000)="e6", 0x9, 0x1, 0xd45, 0x1012, 0xc7, 0x2, 0x7, 'syz1\x00'}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000280)={0x14, 0x32, 0x1, 0x70bd2a, 0x25dbdbfe, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x24004044) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000782d6666ac0b2a76000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x4, 0x4, 0x4, 0x8004, 0x2000, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) close(r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="da467702e2520108dcebc5560e4f93142974b51221138c2cdf5b4d5781b800c423ace69c1eba8d0c505baa2acd", 0x2d}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="beaa38543627a7a662afe0d83fc3e43fc6c358893ae9cb8787f4659b80c54d51815d240ba45b930936aecd07ff84b35954a5a75c1ba4252e11ab09ebfa468f58829bb24aebceb96a9d4a5a856abe6aed", 0x50}], 0x1}, 0x20048050) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x20040000) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, 0x0) recvmsg$unix(r8, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)=""/47, 0x2f}, {&(0x7f00000007c0)=""/200, 0xc8}, {&(0x7f00000008c0)=""/248, 0xf8}, {&(0x7f00000006c0)=""/57, 0x39}], 0x4}, 0x40000042) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 618.597549ms ago: executing program 6 (id=4815): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) write(r1, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000001080008001d000000", 0x24) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRESOCT=r1, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000a000000000008000b002417"], 0x44}, 0x1, 0x2000000000000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) (async) write(r1, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000001080008001d000000", 0x24) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRESOCT=r1, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000a000000000008000b002417"], 0x44}, 0x1, 0x2000000000000000}, 0x0) (async) 509.696943ms ago: executing program 1 (id=4817): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0xfff5, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 509.191331ms ago: executing program 5 (id=4818): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x5e1e, 0x0, @mcast2, 0x1}, 0x1c) getsockopt$sock_buf(r1, 0x1, 0x19, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000280)={'ip6tnl0\x00', 0x7f}) 508.31707ms ago: executing program 6 (id=4819): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) setsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f0000000000)=0x10, 0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) splice(r3, &(0x7f0000000040), r2, 0x0, 0x800000000ff, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r4}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff0f316844268cb89e14f008004ce0050000000000001177fbac141416e000030a89079f03b180004408050300845013f2325f009409050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) close(r5) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0xffa0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_delroute={0x24, 0x19, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3f00}, [@RTA_PRIORITY={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xd8e5}, 0x0) bind$inet6(r7, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000400)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @remote, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x8}}}}}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r5, 0x0, 0x0}, 0x10) 444.897148ms ago: executing program 5 (id=4820): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_opts(r0, 0x0, 0x1, 0x0, &(0x7f00000010c0)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000040)={0x3, [0x3, 0x12, 0x4]}, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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", @ANYBLOB="8b04eb81763b20b150992d8528a04e5ae646a72dcd5dbd1b2a7dffc36a10ce66837c22ad832c47789576a8ffdebc85c998b5598f3e6ee001", @ANYRESOCT=0x0, @ANYBLOB="a9cb516f9ca2", @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x35}, 0x94) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a0000000400000006000000ff00000042"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0), &(0x7f00000000c0)="7f665902e9dba408deb0fa6a5cf578154e842e7de3547b29a384523ae916f77b305fb1ac8c94224b1b3837040c55ce55a299760f03e54baf76918f91f73959fa0b9441af8db5305783fefab243dbaa802ee38a367c988a5ce0533ad0b22e3f0d0539be04f51be3ee4aacf862c02fa3307f96", 0x619, r3}, 0x38) 398.294858ms ago: executing program 8 (id=4821): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_buf(r0, 0x29, 0x11, 0x0, &(0x7f00000001c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x30, r3, 0x1, 0x0, 0x25dfdbfd, {0x1, 0x0, 0x41}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x25}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) r9 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r9, &(0x7f0000000080)=[{&(0x7f00000014c0)=""/4081, 0xff1}], 0x1, 0x5, 0x45) sendfile(r7, r8, 0x0, 0x800) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x1c}}, 0x0) write$nci(r4, &(0x7f0000000240)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x5, @v={0x1, 0x1, 0x3, 0x6, 0x7, 0x3, 0x7e, {0x5, 0x9, "30ea56ccf61cab1d"}, 0x3, 0x3e, 0x8, 0x4, 0x1, "eb"}}, 0x1a) r11 = socket(0x840000000002, 0x3, 0x100) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x50, &(0x7f00000000c0)={0x0, 0x0}, 0x10) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2, @in6=@mcast2, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x0, 0x32}, @in6=@local, {0xfffffffffffffffe, 0xfffffffffffffffc}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x84}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 329.627907ms ago: executing program 6 (id=4822): syz_emit_ethernet(0x86, &(0x7f0000001500)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xd}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x2000, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "8908981864d689ac43445c1c26e95299e94ccad8794114ae3061e328af342f99", "e4d0ce57abcb41f7f5c8ab8f63dd38a1", {"bb3ce5a4bbb68671a2892fa0317a823c", "be9d98ca816f77013a778b6c40b49ea9"}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYBLOB="0008040600020000150035", @ANYRES32=0x0], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c085) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4051}, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e22, 0x9, @private2, 0x4}}}, 0x32) 325.414512ms ago: executing program 5 (id=4823): r0 = epoll_create1(0x0) r1 = socket(0x1, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r2, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4000}, [@NFTA_RULE_USERDATA={0x0, 0x7, 0x1, 0x0, "e9e24f316395f9d1b540cb57daee46bf2085f9a732fcca79994f56abf880bbdf3466e014a3e11df355e24d036f976e60cec9d19f39148e9c4f4fce85772730b5743527911ff888d99a0c2e067c"}, @NFTA_RULE_EXPRESSIONS={0x1b, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0xf5}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) shutdown(r1, 0x0) close(r0) syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r0}, 0x8) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x78, r5, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0x5c, 0x22, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xe6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}]}, {0x4}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x4008001}, 0x40000) 324.32823ms ago: executing program 6 (id=4824): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x592, 0x4, 0x1d9, 0x202, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x4, 0x5}, 0x50) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000080)) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1a, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff}, [@map_val={0x18, 0x2, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @alu={0x4, 0x0, 0x7, 0x0, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @ldst={0x1, 0x0, 0x6, 0x1, 0x2, 0x0, 0xfffffffffffffffc}, @ldst={0x2, 0x2, 0x0, 0x8, 0x5, 0x80, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @generic={0xda, 0x9, 0xd, 0x7, 0x5}]}, &(0x7f00000001c0)='syzkaller\x00', 0xf9c, 0x1e, &(0x7f0000000200)=""/30, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xc, 0x5, 0x1fbb}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r0, r0, r0, r0, r0], 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x41, 0xd8, &(0x7f00000003c0)="6b236bd9781af4bc8effee6aa0c5604b9a2be63c9edb1308245bc91caa72d8e86191551cd644498a07d2a2e2979b73e1cd6a7f6217975936693db43199c35cc0ed", &(0x7f0000000440)=""/216, 0x0, 0x0, 0x46, 0x61, &(0x7f0000000540)="b892f2614de8f6d7658ed5826b05c7bbbfa0d8c55a319d9c2efb6db31d446f38fa15f476981f3d31852e6497333a230fd4f24f6e80cb0699aaa8ae2d56162c62358ddc139650", &(0x7f00000005c0)="43b105b1eb9be4e11c9fc176b5646bdea45bb87fc66b01e78b538dd30b9b31cc2025fa874221dd58000c7ca5962d6e49b055ecaff2a3ace4ec73e6abe3f6a2b437ad1e0fbae69007a75252bd4534a990c8ed17e4ece2593225a3983db97d0f576f", 0x2, 0x0, 0xf}, 0x50) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000700)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@ipv4={""/10, ""/2, @multicast1}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@dev}}, &(0x7f0000000840)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in6=@mcast2, 0x4e22, 0x3, 0x4e20, 0xfffa, 0xa, 0x80, 0x20, 0x87, r3, r5}, {0x4, 0x0, 0x61, 0x6, 0x1, 0xa4b, 0x8, 0xff}, {0xffffffffffffffff, 0x1a37, 0x7, 0x7}, 0xd4, 0x6e6bb5, 0x2, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x32}, 0x4d2, 0x32}, 0x8, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3501, 0x523a6ea5121a824, 0x3, 0x9, 0x7fff, 0x6fd8}}, 0xe8) (async) syz_emit_ethernet(0x5a, &(0x7f0000000980)={@remote, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@canfd={0xd, {{0x1, 0x1}, 0xb, 0x3, 0x0, 0x0, "82dad457521f742ace9cf62afd440635ebad195f57da3bdb7a7fbdc9f0d88878caabe0c55ab0a17defda593ad094d7eeb178401c750dcbbe69ffc2815d79a942"}}}}, &(0x7f0000000a00)={0x0, 0x1, [0xfbe, 0x593, 0xfffffffb, 0x85c]}) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000a40)={0x0, 0x67, "50203f0adc27d301d503b484690e02aa4dbec4abce89a642d0515bfbc14d3f8f76e69d092db9e0e877874b0efb09a82999f4ab96a5f522e8b4b7423569b3c6b24ba3f504a376393164c2b7552d074e495e5472003ec0365d00c4363df14dd9e230f792c71d0daa"}, &(0x7f0000000ac0)=0x6f) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000b00)={0x80, 0x9, 0x0, 0x7, r7}, &(0x7f0000000b40)=0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000b80)={r8, 0x5, 0x8, 0x4, 0xd, 0x1}, 0x14) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x12, 0x21, &(0x7f0000000bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @alu={0x7, 0x0, 0x6, 0x0, 0xb, 0x6, 0xfffffffffffffff2}, @ldst={0x3, 0x3, 0x1, 0x7, 0x6, 0x18}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000d00)='syzkaller\x00', 0x4, 0x57, &(0x7f0000000d40)=""/87, 0x0, 0x2, '\x00', r4, @cgroup_sock_addr=0xb, r6, 0x8, &(0x7f0000000dc0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000e00)={0x1, 0xb, 0x8001, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000e40)=[r0, r0, r0, r0, r0, r0], &(0x7f0000000e80)=[{0x3, 0x2, 0x4, 0x1}, {0x0, 0x3, 0xb, 0x7}, {0x4, 0x2, 0x6, 0xa}, {0x1, 0x5, 0xb, 0x4}], 0x10, 0x9}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000f80)={r10, 0xffffffffffffffff, 0x16, 0x0, @void}, 0x10) (async) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000001000), r9) sendmsg$BATADV_CMD_GET_NEIGHBORS(r9, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x40, r11, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x41}, 0x1) (async) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000001100), 0x480000, 0x0) ioctl$TUNSETLINK(r12, 0x400454cd, 0x33a) (async) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000001140)) bind$inet6(r2, &(0x7f0000001180)={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10000}, 0x1c) (async) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, &(0x7f00000011c0), &(0x7f0000001200)=0x4) sendmsg$TIPC_CMD_RESET_LINK_STATS(r9, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x30, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", ""]}, 0x30}}, 0x4000040) ioctl$F2FS_IOC_MOVE_RANGE(r12, 0xc020f509, &(0x7f0000001340)={r1, 0x10, 0x87ed, 0x101}) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f0000001380)={r8, @in={{0x2, 0x4e20, @broadcast}}, 0x3, 0x3, 0x3, 0x0, 0xd7}, &(0x7f0000001440)=0x98) getsockopt$inet_sctp_SCTP_ASSOCINFO(r13, 0x84, 0x1, &(0x7f0000001480)={r14, 0x0, 0x9, 0x7, 0x1, 0x3}, &(0x7f00000014c0)=0x14) (async) socket$unix(0x1, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r13, 0x84, 0x7c, &(0x7f0000001500)={r8, 0x0, 0xd0a}, &(0x7f0000001540)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r13, 0x84, 0x77, &(0x7f0000001580)={r15, 0x5, 0x4, [0x0, 0x8, 0x0, 0x100]}, &(0x7f00000015c0)=0x10) 315.801424ms ago: executing program 1 (id=4825): syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbb020000000000000008060001080006040008aaaaaaaaaabbad1414bbbbbbbbbbbbbb0a"], 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_emit_ethernet(0x68, &(0x7f0000000380)={@empty, @broadcast, @void, {@x25={0x805, {0x0, 0x4, 0x1f, "abd1298fe7b30cc2cb6ac3b0d2e4f2dace3131450ece1310d4a541457c8cdae29c9871ca8f55b70f9e0a280b62bfdf5149df18fc0280140c382ca4b5ce31ea81669006660161c0bcf7c0bc1799d3b34e0e807ce1cf1398"}}}}, &(0x7f0000000280)={0x1, 0x4, [0x262, 0x99b, 0x4b1, 0x743]}) bind$xdp(0xffffffffffffffff, 0x0, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000300)=0x2000, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket(0x10, 0x803, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x80000000, '\x00', r3, 0xffffffffffffffff, 0x0, 0x1, 0x2}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@generic={&(0x7f0000000140)='./file0\x00', r5}, 0x18) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x8}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbb020000000000000008060001080006040008aaaaaaaaaabbad1414bbbbbbbbbbbbbb0a"], 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) syz_emit_ethernet(0x68, &(0x7f0000000380)={@empty, @broadcast, @void, {@x25={0x805, {0x0, 0x4, 0x1f, "abd1298fe7b30cc2cb6ac3b0d2e4f2dace3131450ece1310d4a541457c8cdae29c9871ca8f55b70f9e0a280b62bfdf5149df18fc0280140c382ca4b5ce31ea81669006660161c0bcf7c0bc1799d3b34e0e807ce1cf1398"}}}}, &(0x7f0000000280)={0x1, 0x4, [0x262, 0x99b, 0x4b1, 0x743]}) (async) bind$xdp(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000300)=0x2000, 0x4) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)) (async) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) (async) socket(0x10, 0x803, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x80000000, '\x00', r3, 0xffffffffffffffff, 0x0, 0x1, 0x2}, 0x50) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@generic={&(0x7f0000000140)='./file0\x00', r5}, 0x18) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x8}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0) (async) 288.949706ms ago: executing program 6 (id=4826): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01002ebd7000000000001400000018000180140002006e657464657673696d3000000000000008000200c4d40000"], 0x34}, 0x1, 0x0, 0x0, 0x104}, 0x4000000) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f0000000340)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x2, 0xf}, 0x80, 0x0}, 0x15) ioctl$SIOCRSACCEPT(r2, 0x89e3) 217.843997ms ago: executing program 1 (id=4827): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000480)={&(0x7f0000000040)={0xa, 0x4e20, 0x89a8, @remote, 0x2}, 0x4f, 0x0}, 0x20008814) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff080004400000008108000840000000032000018006"], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00158018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000540)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x6071, 0x0, 0xe7}}}}}}, 0x0) 205.278244ms ago: executing program 5 (id=4828): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc8040) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x85, 0x0, &(0x7f0000000440)=0x9b) sendmmsg(r1, &(0x7f0000002880)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000540)="bade3d1c972f42703f77f272f5c4ced6e1a45f85b8ab100936e23ea33bd08b1011e27807ba6321e15067c3dbbc98d2ceb210ce25ec89d98c67ac9f9685657ae92099e74535", 0x45}], 0x1}}], 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000078000000030a01010000000000000000010000000900030073797a310000000028000480080002400000000208000140000000051400030076657468315f746f5f626174616476000900010073797a300000000008000a4000000002"], 0xc0}}, 0x0) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x8000000000000003, {}, 0xfd}, 0x18) close(r4) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 189.832826ms ago: executing program 1 (id=4829): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000a26de55b6f8cfc953a00611980000400003601804bc2c0fd79a9aed15b60c40ff9207178efdffd016e7a67c7cf6186ee3cf547"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0xb}, 0x94) 125.496036ms ago: executing program 1 (id=4830): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) recvmsg(r0, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f0000001d00)=[{{&(0x7f00000001c0)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000140)="3e885b120dd3a0a6ba916713c5a7a9", 0xf}, {&(0x7f0000000240)="bb9402a5e92ef18d2ee285996d", 0xd}, {&(0x7f0000000280)="a4952e68b61aa067cfda74b55615e697eebed5d4148ad9674ff63793309c5d1811c2", 0x22}], 0x3, &(0x7f0000000300)=[@txtime={{0x18, 0x1, 0x3d, 0x401}}, @timestamping={{0x14, 0x1, 0x25, 0xf65e}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0x48}}, {{&(0x7f0000000380)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth0_virt_wifi\x00'}}, 0x80, &(0x7f0000001900)=[{&(0x7f0000000400)="1f7a11e846753328fdf3fbdcf9be9161d7bab0d200a0ecafb46819758c1084cb9bce8ecb177c7cf128263902c28b7aaa529308128bf995b76344f0cd4c7ff6233ae8af92aa331f49c924523efc5590f264055b3f26513d4d1bcf6eca63a86926374e071a71716ef80753c42feff76cc9f19b03cc25f5534937d87e8976628311b4e483f44ae23e426c915a0389c0606758149c788668237214b980ae0d767ab0fd0dc6ae153fe68f81479a616e310c5e7508ffc703f50eb5273651f9afeec7964af5562750feeeef511697fe86e687beb78d583da0af6df2d626a5a4b2411378160eee7ca8c88d156570fab24d1686c956318abe2416d19d8a9ed39e2d9f06e31ffcb4d70942fe9fb2b993914be3cc238057f472ba371f04938880d58cce0b26744ad18d4feead10ad82c34998fcaa86881de0ae24b4b1d78e4a60d0888bc71411e67274b3d60a1506c11926b9587e18a68c162cf4544aa79931102694a8b88c88ff13f8903628a6016059c8852c7035a7890ebf4b2e28469d2250cc90de14f0e2a46ef2ae7c5e8cfac07ab56ff858af815a17478f89d4f3eece602399bf1230676b4abae2a4d5cc37d9b9fc2cefa1c0ee790a44dda0152c7b66b810a16502958068af7581ee1cef86add7bd7504e79d2e904335f310dcbb42bd7485004472e586f4a8f2a568f140c64e0f03b301c6a38a254d76d8bad560b50b2b8c1a61db2d72be4a977ab9187787b98f60cd0f24a0513b97d77c9e716656cd5afa6025588179963d8b60790cf3181e62e72482059e5710a7ea9e11f84c4cf3483945bc493c26325bc8d571d0150ec8c265d0e306f3fdd043ac0fabd137b918648189e48b9e92b8755da1277c489a940e0ae4260a904638d213997ce6dc0e1bd5e6d90af70b043555263bc720516cd72412570a886684ebb7faec4333c2d0ea8dc635661c929730ecc17baed39d18410c5d792ab27635c2ab710c20f2f09ba6a41da49516d90ff5947cb54c991d7f3f95a8070d2ef4318334d46bd43753c805364e1ff9169c82b1858d173152494d9cc0fe4660abcbfa226c2e5ac9da05fa47fd1c792db1c3b051d362b6bf4a56a74f6d99bd26bf513671864d8c886e40add9b23f4f94a66e95a863e8d56a8ec27deecce0e1e8e40f0ed2d3de3bce6be21abec2152937fb1bad458d50b22b265ebd47a6954fcb85a06db0f080dfa60f5bb4e266ef04d7c625efb2a74cef0d4a84f04ca9b06555070cf6862a2f94c12c10d01b699ad8f04d7eda17c52102468d945fd2656ee383908028e5e479dbed9fae9bcda7ad9d1f1e9a4cf65f6ad0f6593a83e911471eb47ec21fae5de116c5566cce2967a10532b63a7548bb3ba734c6f450f56e2a4914cabd621db5e0aadd92363fd00b26861cfe1098a076e251ca61311442bba64678a897f799f81517eb254017adc05abd5891133644dc4ed3309511dfb443290b1aee9f3dbb95b103cbebc5bd605f0ffec0bb3fb9e6e7073ca978f5ee859728433732d4ffd9dd56f9b226d080f173cc2454ce6a03b7c579462d0f313129c17616f0db8541fbbc660b888bdc6ae8d4c0f72bf9f85eb8476b3af81d9714444334ff29771861878a24eb6174a1514a470ad6bdd781a333128aa8a1b5442e33038e1cde8fa48f82016332fb93d987a70caa2a2cbfb6b384adb9ebab03ae765e337890a3121c6b8fa36f15a12e1252e86b9a2caa52117a940bfe08920df101dc334cc810c2fd73485c54b88e10d50f26db48344120cff3b744f1a7ca2fff0d63e263300f8282fc4f9a6226848c311ca209f10c630b40c8e45b73c4ea893e82240a3a846fcfc6d6e2b5e86fc52030b783d1e8be22f3fd95d2384afd9ce96b055308671d2db5edc3eeba52dc73fd40fb25d3b7215ad4b5858566f5884cfb746d40f0ba2dd01fc88c70e62042203209792f463ba4c8b38cd6155e722555df332cd88192e6b67c2f69e506d4f3a839cb71c78393c8a5980dc0c46f608f7923f18f1d2b28f3bacde65377124e591484d003f0482dc618fa3dea1dd3b48f595950212d3d5b75b0cd2d66a4048d60fb06b790dd4e385057c901cf13dc927d60251e5ffc98d1ef34b74897a4c4a0c035a3de0c6a770c3d168f9d1438695f9b45226fa87494becbc5c148b4d7311fdf4778cacdb51180824faacf785cba6a597fbf101b2de928a58a252bee25c571381a575867e9c6106c3baa450f911e5d1c35b9702526ad1afc89e0561a4bb2e32890d2283b10798f841b3e4d8d3ad00c1c3da51183b6cb1a2fcaf1cb4f7d9a7de0ae8d13212e9bad13bee3560c69bfb950d73212bdbc5952559268f1476bc6613e101b9c938ce78052a2f6361551ec427d6b9e275008efc7cbfb7997e69d1b6912b54aa3e203ea507cc124d19d19f0587b6845b6fac4665f1da19e3b38a783de3c1a36c438f5ee34866ea82be5ae0f3f857e931bfcd4114d61c76f2a885937c7f3f1017769a6066e8fc7b55b7caa2f6d41757ad11110f994eaccba1e20169c9c5a2e1faa16b41fbfeb8b7c75cc62911dcae2f5ee29012da123946c155f1bcbcf0b879111f987c716d3f89b9fc0f924ce04460b58359b368f202f381d8d6ce5d7eb2d0bc997016ee25b1d58d30d5f3c5aad5790e08c1e74aa9e069e3a9d279cf690a96ec1b38da7d77d3b0abab0aaf15e686aec0f382c68201de284ba38c1512e7e7008ea958ea41874498ffec380b6c4fd277c20f09cf405ad088fba24d0a3c8b57aac994c23bf11219fb0ff1d4d93a4b50d29b8e4d2bd17209c89b04183393279ae72bee640ff0b27d12d7450961aa8341b4e629cba88d5eb039e1211eb8202e7be4904e27f67daf3fad530eff8b9c64117e2919594cefa285cad09d28ef98981c6467dc2593dbface409a53bf3cb2cf6b47e41d8540f946fb8b8e319d1eff219d19a85cc77397df9ec963b283cae483031a6f00d9158b74a8a413344849ae403a72418c2aca873a5afcd4d56f7cb801d0d9db33e2bbf3aa81d650dab3e7e1ba126225d959d9ef7f949d616965791f6764fba8aef9db54d62a366f9df751c2979bfc254f8ff3dd45bc827944b561f6e6438e12e1043a9a1a2549faa497663de55d050b8316a2b7820eb551cf4f5dcc0065b8c3050173eefdb126bff7cb7cb735242214be78080d0d504f29619003c8909abc02f7b3f92559d8fc275e017f858b94fb8e2ee843bda77e13ab363fd2d006e86e6990dd24632d56d91bcce0a61cb7c8cbbc5947fe44bbb4c2d4a22c2e774f1c77c404229b85b604a20414cbfd207472c78b737c688960318e49d9128107570aced9659ddc59b4569171e946003a23a32a90f961400e77effe6bdde74f1db5a7d793529bc40933f60ceed63f39426af3cb7b4675deaabc52592316f3d5c49fd96154b5ec23fc28c665e353262279d7d0861b311b7b38945fd4326f30444216f8517f7f02e8e5d0494e5b500312e0a9c6f01782f7f2605befa28ac0985d01136e5b0dcd6a614ca7ebe25f34491ec6d69741c40bdf8efbb2ae6cd1baa6d1634de3f5159784fa09eb359be2b586b2ebbfa129656be1f57069e2c8d85f597dcf5803670a87ee289e8e3079c5f8307c6e37a1b1f33bdcde367d1866cae0961ae17d9a645a098529605e745fd6fce5cf46123638662804234e02c8dbf70d866670623958f1472bf9b739aa12bf589142bf834bab1cf15c1b7b8951a9906174e2745b91cc33fa4650e28442c09b84cd7fd73a2a1fb3b8e677bed78480509e12f1f8bda2e7e8f0877f25a637e08ab035e2f751b981ce1c2984038ae22a18771e1ab57cf23f96f456a6efe13863187ab8de847c9949ddaa398a2330dd1e13cadccb24b1739223fa4efbacf222307d4eb87a1723758434679759d0e1355d5bc4bd58762bd24ff0cde7345515e91e0ac91c7978ff3a0934a59b524fc66dbed0a8277da93f3db40a79a68c1f95b3dd7d7fb597631c6d0eea113aa5aa9d43824915460c7cc3e074b6f4afbbdbf7a3d86e966d5d50159fbf22c2019236b0adadc176f0be5fe0de49301a21397d170ee02a087d0bf2156dc777d98ad9a1355d4558ef3b7149a7e1a53bea25cf38d2627d66711791aa3d175e257be89b0ca7571772c7a344cee3a1fe13e6447c2db37988a52c9b33666b853e6b556900df673481c9ad413d4a022082e76be883485a1c64136e87583e589783290834551edfdf94410fb9d6943c542c9c796e42ce194dbbf453041f26187cfed8a9d8f9a7ff4b555771148d19f094da4a109b9372974728b081e7272056b1ed710c392fc8b4fa1b8d3b0d5e807140b978479e71229904c90ee3cb0817602f4547026c16d7ff483eae05dcc6aac1677acc5472775d968fa2c682241cd31415b48096839b6e7a5475830577c09b340ab556a7cc1b7d6c5c90634839ec6df11a33a5221fa1a36fefe74f83763c63f57c785f56021967d1af133d895ba9a8fb69d4d118b86c4c51392d6e0c8c090f34a17157aaa558e981073e145886f956f52c18262809827ee69f60863b830ba5afc47685875f103a8979e3da5ae000b085ad3d844387640c9a03bcc58850fbb3d024cb7d7f5926d951907b291e7f8100be4c17e582e12d1a42a99e5a07450cdcd90065ff5018feafefdfc6158d641bdec37252e673a49f1e64c16f9fde9c9c94228648d1c7a3190101180296360991db29bb2e63b1c1b1b20fa72893dbaeefb99af2534f85fe19090a3fc57d668fe3ea2055abd263ae536882e3eb6773daaa38a554167267cad8b157985f4e9f8ee0cfc53d4f5ae20a0bd1db2b3d388ac5d31babb514ad5bae2f37574d5d56f51ad958c10456998a0bacb6ab63e8388385c87d896020d980c49453e02997b3db69dc1eaef3c433593cdc09972ec8a50506d6ea253e6c32475186a97dd6b9790337852113673c500060f04597cec2c315cc29a8a23ae927aa12b0366f177a2ded29fb28db2e4a47660a65ce30791332dc533e74b2bc6ffe29ff1ed083cb5ebae53abb6852076bcb5850f855d461996356caae1dff4669cedef6ecf93ac8d4de1736dae53ba5bf41161cc1f8e0a55902500cadde2f464797c1f48fdaffbb9b8b97fac5083699cafd188fa608445f873691e399d47efaafcc6df710eaafbba46d4e9b0af0fa92c512ab87838dab73159a5bee1f62008eb586e9633c94e6a42a10f392ed334ae0fc271962862e8f95fb6323cbc5aab03bd0bb1c015943465e2a7a6c9068dc934de0b75d2c330eb865bcad3babf51029544a7c0f64ba4856278210eef174d80468e39e41e904f69955164cef3fab7a9d8bb6925229d8d1e4bb0c5c2ecf752502870bf1e0165f117f9c8586b9e6293fca4c85f4ecbef3e6d56e9d6bc9d5ba33a0cad287f7bc7e056ff4418a4df0e06b3cd88cf31a689b71dfb84bf453578b23cb3ccabd46330386fcf79e6d2f02eabb1a07232eaa4cf623995bce7781e11d6c2a473bda88ef0ed2749e05a2d094c7ae089c891b16172f85e80a75149aadc25d56d1d113610d1575bc1f4b7309eb3f2d8733749cc5c48894a5be194ba3edb9392d2ee26758ab153c4c1f3805bfe34c7825ae308215226b905e451351e307a5e6005c1e34596f69ec3721b5ae4506d90e30a9b0588235dd8aa717a44c2c1c6bca4d68bf2c760b46856393601cd6b21d108d19063f3c71205c33f6bc1b67c8886c8ef415309e0ee08435dce39fe1f73d0e8523609cb6746a3f3b175050e095f4d8239e8fdf21c8c88b159e13a27290bfef620cfd19e98e65fbdc296d54c1c311f3c269289d640abe2340928b61c", 0x1000}, {&(0x7f0000001400)="d5ea", 0x2}, {&(0x7f0000001440)="0067972ae77257b871a3bb5e9545e9929000b36acac9e9acac055d0188a3565d997cf829dd358eaed9c0d29a56457d17c0e6cf3f7817dcbdf48cbb1a3b090a01a4df6503e80ed62a9e4d07ad", 0x4c}, {&(0x7f00000014c0)="ab987cd693a0ec0695841cbe88f74c6b45bd87614e7e79ac00084eb8311f0ab5901bb3aafefe58ba5358cec14d0a0287c3b6a5a1997db9f04395007c3a0f5cc5bd015c3890dbcb1f", 0x48}, {&(0x7f0000001540)="e6c48f2efa88fa2a02d398da463afb3e5680179401fa1c29fbff22f59dfd72d6348a85faf2131f75236d2604740304ad3c04c75eacdc8e9832294e7c48bfcd5a62e2c6e0a8f43dc012eb2a7bef293f778b44855ab4f02ee74ff50e2665c846d4daf7f890b8ac73ceca2de4cfeba2135a212a46aa6348b1f17e90f23fddf51b04a06026f493b482cf6d0a53a18586084f406aaeb123d22479d2f86ef5d96ebcdf739f23257724a17803cbc3375d1235a7c86fe6e6de6e31dd", 0xb8}, {&(0x7f0000001600)="cfe0c75849fea7206652ec7bfbb56c4f876424a65bde62fbb4f4fa35aaafab2fd9a7b64c822f41f9b1bb160214112ba64fa2652f7ea32e6b1b3897940e00628d34ea8ff788d8f071592822068aa7937170855ede374ab9b3b5a3843a4defc4c61935446ec3c1b06320b55420d52edf505814ce77d0363a4b6940890abd", 0x7d}, {&(0x7f0000001680)}, {&(0x7f00000016c0)="709590479fcde6d0396742a4a4933f0a868afe386db8a709a8a6164b212b485b4b107f5dd5e84d7b0234aa8f60cfdde151cd9cca394c99999b7c1127fc1ece0a15e34373615076ca8f55e53005f84de6556986d94823e7b0410a80c7eb8dc9af92064661398050bbb88436958f4341f69fdc1c9a32adfbb8cf83ac0df37a5365e3387db3b42e33dfd6c80736a6d488526b14a894ec09f9e2ed2e6580353934102a045c670551118e762ed48ce0bd8780771f1d858777c87cfcd1538943830c96f1eb98df", 0xc4}, {&(0x7f00000017c0)}, {&(0x7f0000001800)="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", 0xfa}], 0xa, &(0x7f00000019c0)=[@txtime={{0x18}}, @txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffafc}}, @timestamping={{0x14, 0x1, 0x25, 0x7fffffff}}, @txtime={{0x18, 0x1, 0x3d, 0xf}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x4}}], 0xd8}}, {{&(0x7f0000001ac0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001b40)="68895c756bc1052e0ee4ea3908bb079ddd41f9cb879171d3056a8ef422751a0d2601430aec7bee236f40c95bacd4085b52f4b7a72b033fd3dd842698cc4420", 0x3f}, {&(0x7f0000001b80)="8b05b56a76475473b815359168499988d8b8dd666ca56624c8eb573ea43ff0b90561fac0cb869e17d68b360218a67c20b4096973b34d97d91599d65d5567440d60c484f5eb98c1adafabe9314b0378c414d3e3053bb7855ef2c26a1f0cdde5bdf17030ff8532232446eb6a5342a6cba88b69e4dcb93fdeb685c4b0cb207c85f0eea7b76beda10d90911506797abb6d0fadf9f7ba17c2fdd46440a497cc7a6f92606b8c", 0xa3}, {&(0x7f0000001c40)="d47fa603f5c8b0c1c1050c07898e5de0482888ce65a085de48f0665af22b843aa2", 0x21}], 0x3, &(0x7f0000001cc0)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}], 0x30}}], 0x3, 0x4050) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000000)={{0x200, 0x7fffffff}, 0x100, './file0\x00'}) 123.662874ms ago: executing program 1 (id=4831): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4d742dbd7000fddbdf250a00000008000300", @ANYRES32=r2], 0x30}, 0x1, 0x0, 0x0, 0x40006895}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}, @TCA_FQ_CE_THRESHOLD={0x8}, @TCA_FQ_QUANTUM={0x8, 0x2, 0x3001029}]}}]}, 0x48}}, 0x0) 0s ago: executing program 7 (id=4832): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x1, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @dev, @dev}}) connect$netlink(r1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r2, 0x0, 0xff, 0x0, 0x7, 0x0, @dev, @private0, 0x0, 0x1, 0xfffffffe}}) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x7fffffff, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team0\x00'}) r3 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000180)=0x80000039f8, 0x4) sendto$inet6(r3, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) sendto$l2tp6(r3, &(0x7f00000001c0)="3cf706913687a7dc2d59211e1421eeba5fdf535feddb6ea0f227a0449c0c4f0a2f942c9fd899ff7cc483e02fff70e899cf1ea91343414e372fb22d1bd48a88f5cdf3889eb8a5bab9d860178a3b0ae16f78c4b2590be2e0bfb0a8438751a1674b0f6ec07f269f8a1bd2c74acd2faf23b491f3cd2dea1b38a77e8b24d7de43ae37c90898423252393fe97c98140e07943358c04afb2742cc1747a8b8624ee10971", 0xa0, 0x4840, &(0x7f0000000040)={0xa, 0x0, 0xe7, @mcast2, 0xfffffffc, 0x1}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1d, 0x0, 0x0, 0x6}]}}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(r5, 0x11a, 0x2, &(0x7f0000000380)=0x304, 0x4) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x1, 0x3}, 0x1c) r7 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xfffa, 0xe}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_PORT_DST_MAX={0x6, 0x5a, 0x4e22}]}}]}, 0x4c}}, 0x24004000) socket$netlink(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): 1': attribute type 8 has an invalid length. [ 270.777421][T15940] __nla_validate_parse: 30 callbacks suppressed [ 270.777665][T15940] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2981'. [ 270.826587][T15948] netlink: 'syz.6.2983': attribute type 12 has an invalid length. [ 270.852098][T15948] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2983'. [ 270.864064][T15951] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2984'. [ 270.873740][T15952] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2982'. [ 270.879598][T15954] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2982'. [ 271.027756][T15974] netlink: 'syz.8.2988': attribute type 2 has an invalid length. [ 271.049393][T15974] netlink: 1184 bytes leftover after parsing attributes in process `syz.8.2988'. [ 271.094084][T15976] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2989'. [ 271.169225][T15987] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2993'. [ 271.405161][T16011] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3000'. [ 271.669377][T16041] 8021q: adding VLAN 0 to HW filter on device bond7 [ 271.692059][T16035] bond7: (slave gretap2): making interface the new active one [ 271.700595][T16035] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 271.710714][T16044] netlink: 500 bytes leftover after parsing attributes in process `syz.1.3010'. [ 272.598750][T16151] veth1_to_bond: entered allmulticast mode [ 272.612708][T16151] veth1_to_bond (unregistering): left allmulticast mode [ 272.670253][T16158] macvlan2: entered allmulticast mode [ 272.679292][T16158] bond0: (slave macvlan2): Opening slave failed [ 272.830726][T16178] IPv6: Can't replace route, no match found [ 273.133620][T16206] validate_nla: 9 callbacks suppressed [ 273.133638][T16206] netlink: 'syz.8.3065': attribute type 4 has an invalid length. [ 273.148947][T16208] netlink: 'syz.8.3065': attribute type 4 has an invalid length. [ 273.198933][T16214] bond0: (slave rose0): Error: Device can not be enslaved while up [ 273.211338][T16215] netlink: 'syz.8.3067': attribute type 21 has an invalid length. [ 273.232425][T16217] IPVS: set_ctl: invalid protocol: 94 10.1.1.0:20001 [ 273.514651][T12613] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 273.553207][T16250] tipc: Enabling of bearer rejected, failed to enable media [ 273.596052][ T5918] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 273.891553][ T5918] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 274.007364][T16303] tipc: Enabled bearer , priority 0 [ 274.031542][T16303] syzkaller0: entered promiscuous mode [ 274.039480][T16303] syzkaller0: entered allmulticast mode [ 274.053670][T16303] tipc: Resetting bearer [ 274.078860][T16302] tipc: Resetting bearer [ 274.087802][T16302] tipc: Disabling bearer [ 274.708541][T16356] veth7: entered promiscuous mode [ 274.713762][T16356] veth7: entered allmulticast mode [ 275.083304][T16374] netlink: 'syz.5.3119': attribute type 33 has an invalid length. [ 275.137112][T16382] sctp: [Deprecated]: syz.8.3115 (pid 16382) Use of int in maxseg socket option. [ 275.137112][T16382] Use struct sctp_assoc_value instead [ 275.850789][T16439] netlink: 'syz.7.3136': attribute type 12 has an invalid length. [ 275.867872][T16439] __nla_validate_parse: 39 callbacks suppressed [ 275.867891][T16439] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3136'. [ 276.219819][T16465] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.255135][T16465] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3144'. [ 276.362662][T16471] netlink: 'syz.7.3146': attribute type 4 has an invalid length. [ 276.377598][ T5184] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 276.385814][ T5184] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 276.393051][ T5184] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 276.411900][ T5184] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 276.419303][T16475] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3147'. [ 276.433340][ T5184] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 276.435028][T16475] netlink: 'syz.5.3147': attribute type 1 has an invalid length. [ 276.508620][T16475] 8021q: adding VLAN 0 to HW filter on device bond9 [ 276.517787][T16475] bond8: (slave bond9): making interface the new active one [ 276.527247][T16475] bond8: (slave bond9): Enslaving as an active interface with an up link [ 276.538369][T16472] lo speed is unknown, defaulting to 1000 [ 276.685636][T16494] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3153'. [ 276.733186][T16503] netlink: 'syz.7.3156': attribute type 1 has an invalid length. [ 276.741413][T16503] netlink: 232 bytes leftover after parsing attributes in process `syz.7.3156'. [ 276.772224][T16503] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3156'. [ 276.794199][T16501] netlink: 'syz.7.3156': attribute type 1 has an invalid length. [ 276.835824][T16501] netlink: 232 bytes leftover after parsing attributes in process `syz.7.3156'. [ 276.848163][T16501] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3156'. [ 276.850093][T16472] chnl_net:caif_netlink_parms(): no params data found [ 276.885602][T16517] nbd: device at index 6 is going down [ 276.939888][T16517] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3159'. [ 277.057194][T16472] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.067189][T16472] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.076281][T16472] bridge_slave_0: entered allmulticast mode [ 277.083729][T16472] bridge_slave_0: entered promiscuous mode [ 277.092659][T16472] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.101106][T16472] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.108421][T16472] bridge_slave_1: entered allmulticast mode [ 277.117243][T16472] bridge_slave_1: entered promiscuous mode [ 277.161541][T16472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.178085][T16472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.189079][T16544] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3166'. [ 277.251453][T16472] team0: Port device team_slave_0 added [ 277.273444][T16472] team0: Port device team_slave_1 added [ 277.292205][T16555] netlink: 'syz.8.3171': attribute type 1 has an invalid length. [ 277.322024][T16555] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 277.336099][T16472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.343056][T16472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.370869][T16472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.383369][T16472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.390849][T16472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.417729][T16472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.478635][T16472] hsr_slave_0: entered promiscuous mode [ 277.491946][T16472] hsr_slave_1: entered promiscuous mode [ 277.656895][T16472] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.683261][T16472] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 277.745274][T16472] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.764347][T16472] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 277.802325][T16589] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 277.819917][T16589] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 277.839756][T16472] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.851519][T16472] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 277.902360][ T30] audit: type=1804 audit(1755919734.728:5): pid=16598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.3185" name="/newroot/436/memory.events" dev="tmpfs" ino=2238 res=1 errno=0 [ 277.935372][ T30] audit: type=1800 audit(1755919734.728:6): pid=16598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3185" name="memory.events" dev="tmpfs" ino=2238 res=0 errno=0 [ 277.971435][T16472] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.986134][T16472] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 278.123100][T16472] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 278.136130][T16472] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 278.172310][T16472] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 278.186899][T16472] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 278.199979][T16623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.288178][T16472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.302360][T16472] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.311809][T16634] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 278.331694][ T4312] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.338829][ T4312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.361765][ T4312] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.368924][ T4312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.446384][T16643] lo speed is unknown, defaulting to 1000 [ 278.496574][ T5184] Bluetooth: hci0: command tx timeout [ 278.533327][T16638] bond5: entered promiscuous mode [ 278.544811][T16638] bond5: entered allmulticast mode [ 278.552370][T16638] 8021q: adding VLAN 0 to HW filter on device bond5 [ 278.661193][T16472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.709982][T16472] veth0_vlan: entered promiscuous mode [ 278.720291][T16472] veth1_vlan: entered promiscuous mode [ 278.765603][T16472] veth0_macvtap: entered promiscuous mode [ 278.784106][T16472] veth1_macvtap: entered promiscuous mode [ 278.831280][T16472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.845689][T16472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.860926][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.871687][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.881230][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.891073][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.984051][ T3034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.998852][ T3034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.036044][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.046116][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.178131][T16686] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 279.203802][T16686] openvswitch: netlink: Message has 5 unknown bytes. [ 279.647821][T16744] vlan2: entered allmulticast mode [ 279.653886][T16744] veth1: entered allmulticast mode [ 279.737045][T16756] x_tables: ip6_tables: NETMAP target: only valid in nat table, not syz1 [ 279.750801][T16756] IPv6: sit1: Disabled Multicast RS [ 279.757693][T16756] sit1: entered allmulticast mode [ 279.981751][ T30] audit: type=1107 audit(1755919736.808:7): pid=16777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=')8JCìü-Ã/ˆQhÊ»YŸÍ“o(í€û'°¦€{7žjæ|›DÖíE—³×às†ÔÖW€²Õu³6£ÙL\9EòY‚I%¤Ð%qÑ' [ 279.986465][T16778] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20003 [ 280.010221][T16779] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20003 [ 280.213138][T16797] validate_nla: 2 callbacks suppressed [ 280.213155][T16797] netlink: 'syz.8.3234': attribute type 1 has an invalid length. [ 280.268102][T16803] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 280.280954][T16803] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 280.304105][T16799] lo speed is unknown, defaulting to 1000 [ 280.367907][T16810] netlink: 'syz.8.3239': attribute type 21 has an invalid length. [ 280.393806][T16810] netlink: 'syz.8.3239': attribute type 5 has an invalid length. [ 280.414330][T16810] netlink: 'syz.8.3239': attribute type 5 has an invalid length. [ 280.424668][T16814] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.502387][T16821] netlink: 'syz.7.3240': attribute type 10 has an invalid length. [ 280.536269][T16821] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 280.560287][ T5184] Bluetooth: hci0: command tx timeout [ 280.766087][T16840] bridge1: entered promiscuous mode [ 280.771451][T16840] bridge1: entered allmulticast mode [ 280.835876][T16843] batadv_slave_0: entered promiscuous mode [ 280.922054][T16851] __nla_validate_parse: 23 callbacks suppressed [ 280.922073][T16851] netlink: 348 bytes leftover after parsing attributes in process `syz.8.3250'. [ 280.940758][T16857] netlink: 348 bytes leftover after parsing attributes in process `syz.8.3250'. [ 280.950756][T16841] batadv_slave_0: left promiscuous mode [ 281.067170][T16862] block nbd3: server does not support multiple connections per device. [ 281.075763][T16862] block nbd3: shutting down sockets [ 281.096745][T16870] netlink: 'syz.7.3256': attribute type 15 has an invalid length. [ 281.123938][T16870] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3256'. [ 281.166538][T16883] netlink: 'syz.8.3257': attribute type 3 has an invalid length. [ 281.361223][T16896] IPVS: Error connecting to the multicast addr [ 281.967541][T16930] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3272'. [ 281.976868][T16930] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 281.984043][T16930] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.999844][ T36] nci: nci_rsp_packet: unknown rsp opcode 0x221 [ 282.009819][T16931] xt_policy: too many policy elements [ 282.030462][T16933] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3273'. [ 282.634689][ T5184] Bluetooth: hci0: command tx timeout [ 282.919994][T16973] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3283'. [ 282.935192][T16972] netlink: 'syz.7.3285': attribute type 1 has an invalid length. [ 282.966792][T16978] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 282.977778][T16972] bond6: (slave vxcan7): The slave device specified does not support setting the MAC address [ 282.990777][T16972] bond6: (slave vxcan7): Error -95 calling set_mac_address [ 283.063449][T16984] gretap1: entered promiscuous mode [ 283.081922][T16984] bond6: (slave gretap1): making interface the new active one [ 283.092065][T16984] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 283.127412][T16990] netlink: 'syz.8.3290': attribute type 1 has an invalid length. [ 283.135843][T16990] netlink: 'syz.8.3290': attribute type 1 has an invalid length. [ 283.140814][T16972] macvlan4: entered promiscuous mode [ 283.162366][T16972] macvlan4: entered allmulticast mode [ 283.178883][T16972] bond6: entered promiscuous mode [ 283.185411][T16972] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 283.198483][T16972] bond6: (slave macvlan4): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 283.233917][T16972] bond6: left promiscuous mode [ 283.319605][T17009] veth0: entered promiscuous mode [ 283.320642][T17012] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3294'. [ 283.328655][T17009] veth0: left promiscuous mode [ 283.431358][T17019] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3298'. [ 283.542867][T17033] x_tables: ip6_tables: NETMAP target: only valid in nat table, not syz1 [ 283.625807][T17042] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3306'. [ 283.786937][T17055] nbd3: detected capacity change from 0 to 127 [ 283.830132][ T5184] block nbd3: Receive control failed (result -32) [ 283.880843][T17079] IPVS: set_ctl: invalid protocol: 29 127.0.0.1:20004 [ 283.925192][T17084] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3316'. [ 284.057800][T17090] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 284.067302][T17090] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 284.178731][T17113] openvswitch: netlink: Key type 85 is out of range max 32 [ 284.257242][T17120] hsr_slave_0 (unregistering): left promiscuous mode [ 284.352124][T17130] vlan3: entered promiscuous mode [ 284.358846][T17130] geneve1: entered promiscuous mode [ 284.365549][T17130] vlan3: entered allmulticast mode [ 284.372517][T17130] geneve1: entered allmulticast mode [ 284.462111][T17138] lo speed is unknown, defaulting to 1000 [ 284.535743][T17148] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 1 [ 284.721527][ T5184] Bluetooth: hci0: command tx timeout [ 284.783221][T17172] sctp: [Deprecated]: syz.1.3338 (pid 17172) Use of int in max_burst socket option. [ 284.783221][T17172] Use struct sctp_assoc_value instead [ 284.857221][T17174] hsr_slave_1 (unregistering): left promiscuous mode [ 284.913820][T17180] bridge9: entered promiscuous mode [ 284.927582][T17180] bridge9: entered allmulticast mode [ 285.456182][T17237] veth0: entered promiscuous mode [ 285.478149][T17241] lo speed is unknown, defaulting to 1000 [ 285.485837][T17241] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 285.493053][T17241] IPv6: NLM_F_CREATE should be set when creating new route [ 285.519697][T17237] veth0: left promiscuous mode [ 285.750689][T17277] validate_nla: 5 callbacks suppressed [ 285.750706][T17277] netlink: 'syz.6.3370': attribute type 1 has an invalid length. [ 285.769395][T17276] netlink: 'syz.6.3370': attribute type 1 has an invalid length. [ 285.799822][T17276] bond8 (unregistering): Released all slaves [ 285.838112][T17280] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 285.932484][T17305] pim6reg: entered allmulticast mode [ 285.963044][T17305] pim6reg: left allmulticast mode [ 285.989273][T17307] __nla_validate_parse: 10 callbacks suppressed [ 285.989290][T17307] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3379'. [ 286.071599][T17320] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 286.111822][T17331] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3384'. [ 286.304875][T17359] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3394'. [ 286.367089][T17363] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3394'. [ 286.377217][T17363] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3394'. [ 286.393248][T17363] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3394'. [ 286.503536][T17371] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3397'. [ 286.506111][T17373] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3397'. [ 286.592139][T17381] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 286.601651][T17382] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 286.657935][T17388] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3402'. [ 286.670605][T17388] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3402'. [ 286.794735][ T5184] Bluetooth: hci0: command tx timeout [ 286.858926][T17414] netlink: 'syz.8.3411': attribute type 4 has an invalid length. [ 287.049050][T17427] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.059996][T17427] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.076649][T17430] IPv6: NLM_F_CREATE should be specified when creating new route [ 287.130688][T17427] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.158033][T17427] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.222075][T17427] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.234468][T17427] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.290569][T17427] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.301584][T17427] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.355955][ T59] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.364365][ T59] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.376541][ T59] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.385714][ T59] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.397781][ T59] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.406462][ T59] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.418867][ T59] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.427534][ T59] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.699376][T17470] netlink: 'syz.1.3428': attribute type 1 has an invalid length. [ 287.728385][T17470] gretap1: entered promiscuous mode [ 287.738787][T17470] bond1: (slave gretap1): making interface the new active one [ 287.750972][T17470] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 287.764177][T17470] netlink: 'syz.1.3428': attribute type 3 has an invalid length. [ 287.777544][T17470] macvlan2: entered promiscuous mode [ 287.782862][T17470] macvlan2: entered allmulticast mode [ 287.789391][T17470] bond1: entered promiscuous mode [ 287.805560][T17470] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 287.817171][T17470] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 287.833491][T17470] bond1: left promiscuous mode [ 287.918606][T17486] netlink: 'syz.5.3433': attribute type 1 has an invalid length. [ 288.521090][T17541] netlink: 'syz.8.3449': attribute type 3 has an invalid length. [ 288.541111][T17543] netlink: 'syz.8.3449': attribute type 3 has an invalid length. [ 289.070065][T17596] netlink: 'syz.8.3468': attribute type 1 has an invalid length. [ 289.116853][T17596] 8021q: adding VLAN 0 to HW filter on device bond9 [ 289.216764][T17618] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 289.357363][T17633] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 289.713767][T17673] team0 (unregistering): Port device team_slave_0 removed [ 289.730029][T17673] team0 (unregistering): Port device team_slave_1 removed [ 289.775520][T17679] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.033043][T17713] team0: Device ip6gre3 is of different type [ 290.386316][T17752] netlink: 'syz.1.3517': attribute type 1 has an invalid length. [ 290.428291][T17755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.438811][T17755] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.474425][T17755] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 290.484979][T17755] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 290.498622][T17755] veth1_vlan: left promiscuous mode [ 290.505766][T17755] veth0_vlan: left promiscuous mode [ 290.511487][T17755] veth0_vlan: entered promiscuous mode [ 290.518762][T17755] veth1_vlan: entered promiscuous mode [ 290.526024][T17755] veth1_macvtap: left promiscuous mode [ 290.532111][T17755] veth0_macvtap: left promiscuous mode [ 290.538759][T17755] veth0_macvtap: entered promiscuous mode [ 290.545867][T17755] veth1_macvtap: entered promiscuous mode [ 290.556425][T17755] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 290.576121][T17755] 8021q: adding VLAN 0 to HW filter on device bond1 [ 290.588567][T17755] 8021q: adding VLAN 0 to HW filter on device bond2 [ 290.604492][T17755] veth7: left allmulticast mode [ 290.610299][T17755] ip6erspan0: left promiscuous mode [ 290.616374][T17755] ip6erspan0: left allmulticast mode [ 290.624969][T17755] 8021q: adding VLAN 0 to HW filter on device bond4 [ 290.632130][T17755] bond5: left promiscuous mode [ 290.639618][T17755] bond5: left allmulticast mode [ 290.646538][T17755] 8021q: adding VLAN 0 to HW filter on device bond6 [ 290.653815][T17755] gretap1: left promiscuous mode [ 290.711498][T17747] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 290.728928][ T1138] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.751682][ T1138] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.779552][ T1138] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.811361][ T1138] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.942658][T17784] validate_nla: 2 callbacks suppressed [ 290.942678][T17784] netlink: 'syz.1.3525': attribute type 25 has an invalid length. [ 290.994064][T17795] IPVS: set_ctl: invalid protocol: 12 10.1.1.0:20003 [ 291.001575][T17794] IPVS: set_ctl: invalid protocol: 12 10.1.1.0:20003 [ 291.023172][T17793] netlink: 'syz.8.3530': attribute type 33 has an invalid length. [ 291.031758][T17793] __nla_validate_parse: 171 callbacks suppressed [ 291.031778][T17793] netlink: 152 bytes leftover after parsing attributes in process `syz.8.3530'. [ 291.143853][T17811] netlink: 1 bytes leftover after parsing attributes in process `syz.8.3535'. [ 291.184425][T17814] !€ÿ: renamed from bond_slave_0 (while UP) [ 291.269339][T17826] erspan0: entered promiscuous mode [ 291.274816][T17826] erspan0: entered allmulticast mode [ 291.322323][T17833] openvswitch: netlink: Flow key attr not present in new flow. [ 291.538966][T17849] bridge_slave_0: entered promiscuous mode [ 291.544911][T17849] bridge_slave_0: entered allmulticast mode [ 291.831973][T17894] delete_channel: no stack [ 291.841122][T17893] delete_channel: no stack [ 292.019204][T17909] netlink: 220 bytes leftover after parsing attributes in process `syz.5.3563'. [ 292.039348][T17909] ip6gre3: entered allmulticast mode [ 292.282017][T17929] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3570'. [ 292.307173][T17936] syz_tun: entered allmulticast mode [ 292.318899][T17935] syz_tun: left allmulticast mode [ 292.512492][T17955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3578'. [ 292.828442][T17987] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3587'. [ 292.867588][T17987] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3587'. [ 293.153611][T18011] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.3596'. [ 293.169858][ T5867] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 293.186704][ T5867] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 293.193925][ T5867] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 293.215343][ T5867] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 293.222778][ T5867] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 293.256401][T18015] lo speed is unknown, defaulting to 1000 [ 293.283212][T18028] ip6gre2: entered allmulticast mode [ 293.381493][T18040] lo: entered promiscuous mode [ 293.389805][T18040] tunl0: entered promiscuous mode [ 293.398253][T18040] gre0: entered promiscuous mode [ 293.405915][T18040] gretap0: entered promiscuous mode [ 293.414082][T18040] erspan0: entered promiscuous mode [ 293.423126][T18040] ip_vti0: entered promiscuous mode [ 293.432562][T18041] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3602'. [ 293.578402][T18015] chnl_net:caif_netlink_parms(): no params data found [ 293.620921][T18015] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.628205][T18015] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.635629][T18015] bridge_slave_0: entered allmulticast mode [ 293.642176][T18015] bridge_slave_0: entered promiscuous mode [ 293.649796][T18015] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.657425][T18015] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.664985][T18015] bridge_slave_1: entered allmulticast mode [ 293.671612][T18015] bridge_slave_1: entered promiscuous mode [ 293.690916][T18015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.702065][T18015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.724633][T18015] team0: Port device team_slave_0 added [ 293.731602][T18015] team0: Port device team_slave_1 added [ 293.749276][T18015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.756826][T18015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.782727][T18015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.795559][T18015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.802512][T18015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.829046][T18015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.859033][T18015] hsr_slave_0: entered promiscuous mode [ 293.865221][T18015] hsr_slave_1: entered promiscuous mode [ 293.871168][T18015] debugfs: 'hsr0' already exists in 'hsr' [ 293.876961][T18015] Cannot create hsr debugfs directory [ 293.932385][T18015] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.943308][T18015] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.982026][T18066] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.3607'. [ 293.997603][T18015] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.008288][T18015] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.068712][T18015] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.079457][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 294.091418][T18015] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.203440][T18015] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.233486][T18081] netlink: 'syz.6.3611': attribute type 1 has an invalid length. [ 294.252130][T18015] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.399050][T18099] netlink: 'syz.5.3617': attribute type 1 has an invalid length. [ 294.490094][T18106] lo: entered promiscuous mode [ 294.514566][T18106] netlink: 'syz.1.3616': attribute type 2 has an invalid length. [ 294.533940][T18106] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 294.554651][T18106] netlink: 'syz.1.3616': attribute type 2 has an invalid length. [ 294.572641][T18106] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 294.603451][T18121] netlink: 'syz.6.3621': attribute type 1 has an invalid length. [ 294.613464][T18121] netlink: 'syz.6.3621': attribute type 2 has an invalid length. [ 294.623645][T18106] netlink: 'syz.1.3616': attribute type 2 has an invalid length. [ 294.633862][T18106] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 294.652072][T18106] netlink: 'syz.1.3616': attribute type 2 has an invalid length. [ 294.660022][T18106] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 294.682222][T18106] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 294.705460][T18106] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 294.722532][T18015] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 294.735625][T18106] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 294.774859][T18106] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 294.802867][T18015] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 294.816000][T18131] net veth1_virt_wifi .: renamed from virt_wifi0 [ 294.826738][T18106] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 294.860579][T18015] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 294.871460][T18015] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 294.891901][T18106] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 295.042889][T18140] syzkaller1: entered promiscuous mode [ 295.061093][T18140] syzkaller1: entered allmulticast mode [ 295.091023][T18015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.120929][T18015] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.155019][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.162139][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.230856][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.238032][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.274976][ T5184] Bluetooth: hci5: command tx timeout [ 295.491366][T18015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.868328][T18239] : renamed from bridge_slave_0 [ 295.961128][T18015] veth0_vlan: entered promiscuous mode [ 295.996575][T18015] veth1_vlan: entered promiscuous mode [ 296.039323][T18015] veth0_macvtap: entered promiscuous mode [ 296.058511][T18015] veth1_macvtap: entered promiscuous mode [ 296.092927][T18015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.113813][T18260] __nla_validate_parse: 12 callbacks suppressed [ 296.113831][T18260] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3664'. [ 296.122864][T18015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.145513][ T36] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.164633][T18267] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3664'. [ 296.178242][T18265] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3665'. [ 296.191063][ T36] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.200241][ T36] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.253951][ T36] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.301551][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.316455][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.343637][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.363900][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.379779][T18288] validate_nla: 66 callbacks suppressed [ 296.379799][T18288] netlink: 'syz.5.3670': attribute type 1 has an invalid length. [ 296.406797][T18289] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3669'. [ 296.423291][T18288] netlink: 'syz.5.3670': attribute type 2 has an invalid length. [ 296.434882][T18289] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3669'. [ 296.484759][T18292] delete_channel: no stack [ 296.500261][T18292] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 296.524146][T18292] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 296.537504][T18298] IPVS: Error joining to the multicast group [ 296.821093][T18336] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3681'. [ 296.881047][T18338] netlink: 'syz.8.3685': attribute type 33 has an invalid length. [ 296.891894][T18340] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3684'. [ 296.891941][T18338] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 296.930442][T18338] netlink: 'syz.8.3685': attribute type 33 has an invalid length. [ 296.949062][T18338] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 296.991741][T18348] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3689'. [ 297.089137][T18352] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3691'. [ 297.098786][T18355] netlink: 'syz.8.3690': attribute type 4 has an invalid length. [ 297.129379][T18356] netlink: 'syz.8.3690': attribute type 4 has an invalid length. [ 297.201296][T18356] netlink: 'syz.8.3690': attribute type 4 has an invalid length. [ 297.356954][ T5184] Bluetooth: hci5: command tx timeout [ 297.413995][T18381] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3699'. [ 297.675675][T18392] nbd4: detected capacity change from 0 to 127 [ 297.686573][ T5184] block nbd4: Receive control failed (result -32) [ 297.686573][ T5867] block nbd4: Receive control failed (result -32) [ 297.756820][ T5867] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 297.766738][ T5867] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 297.773963][ T5867] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 297.783225][ T5867] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 297.791365][ T5867] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 297.792005][T18415] batadv1: entered allmulticast mode [ 297.871113][T18408] lo speed is unknown, defaulting to 1000 [ 298.100639][T18449] netlink: 'syz.7.3717': attribute type 11 has an invalid length. [ 298.192958][T18458] netlink: 'syz.8.3721': attribute type 1 has an invalid length. [ 298.321945][T18408] chnl_net:caif_netlink_parms(): no params data found [ 298.399117][T18408] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.406500][T18408] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.413677][T18408] bridge_slave_0: entered allmulticast mode [ 298.421024][T18408] bridge_slave_0: entered promiscuous mode [ 298.428372][T18408] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.437182][T18408] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.444571][T18408] bridge_slave_1: entered allmulticast mode [ 298.451575][T18408] bridge_slave_1: entered promiscuous mode [ 298.480184][T18408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.491931][T18408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.561720][T18408] team0: Port device team_slave_0 added [ 298.584045][T18408] team0: Port device team_slave_1 added [ 298.622985][T18408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.630954][T18408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.657859][T18408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.673186][T18408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.680364][T18408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.706732][T18408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.788197][T18408] hsr_slave_0: entered promiscuous mode [ 298.794852][T18408] hsr_slave_1: entered promiscuous mode [ 298.800966][T18408] debugfs: 'hsr0' already exists in 'hsr' [ 298.807191][T18408] Cannot create hsr debugfs directory [ 298.964939][T18408] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.974907][T18408] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.034090][T18408] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.057191][T18408] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.120515][T18408] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.139715][T18408] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.152192][T18522] netlink: 'syz.1.3743': attribute type 6 has an invalid length. [ 299.211832][T18408] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.222507][T18408] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.348105][T18408] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 299.370620][T18408] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 299.380061][T18543] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 299.382268][T18408] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 299.387332][T18543] IPv6: NLM_F_CREATE should be set when creating new route [ 299.413133][T18542] vlan1: entered allmulticast mode [ 299.418850][T18542] gretap0: entered allmulticast mode [ 299.425552][T18408] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 299.434365][ T5184] Bluetooth: hci5: command tx timeout [ 299.505618][T18408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.535693][T18408] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.565284][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.572425][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.585062][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.592212][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.836280][ T5184] Bluetooth: hci4: command tx timeout [ 299.888154][T18408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.239751][T18408] veth0_vlan: entered promiscuous mode [ 300.253317][T18408] veth1_vlan: entered promiscuous mode [ 300.284189][T18408] veth0_macvtap: entered promiscuous mode [ 300.293614][T18408] veth1_macvtap: entered promiscuous mode [ 300.308469][T18408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.319202][T18408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.332807][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.341853][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.357244][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.372036][ T59] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.429773][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.447098][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.471258][T18624] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 300.475866][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.512816][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.002742][ T5867] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 301.016700][ T5867] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 301.024096][ T5867] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 301.032148][ T5867] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 301.042805][ T5867] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 301.106635][T18659] lo speed is unknown, defaulting to 1000 [ 301.125883][T18666] __nla_validate_parse: 17 callbacks suppressed [ 301.125902][T18666] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3778'. [ 301.182568][T18668] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3779'. [ 301.404794][T18687] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3784'. [ 301.497856][T18659] chnl_net:caif_netlink_parms(): no params data found [ 301.506615][T18695] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3786'. [ 301.530811][ T5867] Bluetooth: hci5: command tx timeout [ 301.643605][T18659] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.660420][T18659] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.673273][T18659] bridge_slave_0: entered allmulticast mode [ 301.691116][T18659] bridge_slave_0: entered promiscuous mode [ 301.705807][T18659] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.722722][T18659] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.733013][T18659] bridge_slave_1: entered allmulticast mode [ 301.740543][T18659] bridge_slave_1: entered promiscuous mode [ 301.809855][T18659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.852845][T18659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.867419][T18728] validate_nla: 68 callbacks suppressed [ 301.867481][T18728] netlink: 'syz.7.3796': attribute type 1 has an invalid length. [ 301.888941][T18728] netlink: 236 bytes leftover after parsing attributes in process `syz.7.3796'. [ 301.915734][ T5867] Bluetooth: hci4: command tx timeout [ 301.933273][T18659] team0: Port device team_slave_0 added [ 301.944175][T18659] team0: Port device team_slave_1 added [ 301.967205][T18735] netlink: 'syz.1.3797': attribute type 12 has an invalid length. [ 301.977138][T18659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.988488][T18659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.015669][T18659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.027264][T18737] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3797'. [ 302.036442][T18737] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3797'. [ 302.055600][T18659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.067723][T18659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.098950][T18659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.123096][T18746] netlink: 'syz.8.3801': attribute type 1 has an invalid length. [ 302.135450][T18746] netlink: 'syz.8.3801': attribute type 10 has an invalid length. [ 302.143301][T18746] netlink: 'syz.8.3801': attribute type 4 has an invalid length. [ 302.152252][T18746] netlink: 136 bytes leftover after parsing attributes in process `syz.8.3801'. [ 302.171141][T18659] hsr_slave_0: entered promiscuous mode [ 302.179682][T18659] hsr_slave_1: entered promiscuous mode [ 302.186081][T18659] debugfs: 'hsr0' already exists in 'hsr' [ 302.191892][T18659] Cannot create hsr debugfs directory [ 302.363107][T18659] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.373365][T18659] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 302.383633][T18659] netdevsim netdevsim6 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 302.452455][T18659] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.463939][T18659] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 302.482451][T18659] netdevsim netdevsim6 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 302.549068][T18659] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.561975][T18659] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 302.572488][T18659] netdevsim netdevsim6 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 302.628331][T18659] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.650824][T18659] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 302.668408][T18659] netdevsim netdevsim6 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 302.682603][T18783] netlink: 'syz.7.3814': attribute type 4 has an invalid length. [ 302.701400][T18787] netlink: 'syz.5.3816': attribute type 4 has an invalid length. [ 302.789138][T18793] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3819'. [ 302.799620][T18795] netlink: 'syz.1.3820': attribute type 23 has an invalid length. [ 302.902237][T18659] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 302.935363][T18659] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 302.948273][T18659] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 302.958991][T18659] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 303.089619][T18823] tipc: Started in network mode [ 303.095031][T18823] tipc: Node identity 32a951b54847, cluster identity 4711 [ 303.102332][T18823] tipc: Enabled bearer , priority 0 [ 303.115060][ T5867] Bluetooth: hci1: command tx timeout [ 303.130782][T18823] syzkaller0: entered promiscuous mode [ 303.139450][T18823] syzkaller0: entered allmulticast mode [ 303.153407][T18659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.173617][T18659] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.188119][T18822] tipc: Resetting bearer [ 303.196815][T18822] tipc: Disabling bearer [ 303.212607][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.219787][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.239450][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.246624][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.385360][T18842] netlink: 'syz.8.3829': attribute type 1 has an invalid length. [ 303.428837][T18842] netlink: 17 bytes leftover after parsing attributes in process `syz.8.3829'. [ 303.622858][T18659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.660279][T18860] dvmrp0: entered allmulticast mode [ 303.867092][ T13] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 303.878649][T18882] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 303.903011][T18885] lo speed is unknown, defaulting to 1000 [ 303.962965][T18889] veth0: entered promiscuous mode [ 304.005849][ T5867] Bluetooth: hci4: command tx timeout [ 304.023701][T18659] veth0_vlan: entered promiscuous mode [ 304.049894][T18659] veth1_vlan: entered promiscuous mode [ 304.113090][T18659] veth0_macvtap: entered promiscuous mode [ 304.131640][T18659] veth1_macvtap: entered promiscuous mode [ 304.153410][T18659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.190711][T18884] veth0: left promiscuous mode [ 304.236576][T18659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.293528][ T2991] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.309049][ T2991] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.353736][ T2991] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.386885][ T2991] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.607491][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.623328][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.715322][ T3034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.745536][ T3034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.785264][T18939] dvmrp0: entered allmulticast mode [ 304.809661][T18939] syzkaller0: entered promiscuous mode [ 304.831791][T18939] syzkaller0: entered allmulticast mode [ 304.882314][T18951] netlink: 'syz.6.3769': attribute type 33 has an invalid length. [ 304.903893][T18950] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 304.924962][T18964] net_ratelimit: 62 callbacks suppressed [ 304.924983][T18964] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 305.072344][T18976] syzkaller0: entered promiscuous mode [ 305.077906][T18976] syzkaller0: entered allmulticast mode [ 305.204794][ T5867] Bluetooth: hci1: command tx timeout [ 305.481463][T18996] syzkaller0: entered promiscuous mode [ 305.487322][T18996] syzkaller0: entered allmulticast mode [ 306.029847][T19018] 8021q: adding VLAN 0 to HW filter on device bond8 [ 306.051727][T19018] 8021q: adding VLAN 0 to HW filter on device bond8 [ 306.060505][T19018] bond8: (slave vxcan7): The slave device specified does not support setting the MAC address [ 306.072453][T19018] bond8: (slave vxcan7): Error -95 calling set_mac_address [ 306.080132][ T5867] Bluetooth: hci4: command tx timeout [ 306.106064][T19027] veth9: entered promiscuous mode [ 306.113948][T19027] bond8: (slave veth9): Enslaving as an active interface with a down link [ 306.130922][T19027] 8021q: adding VLAN 0 to HW filter on device bond8 [ 306.230848][T19037] __nla_validate_parse: 9 callbacks suppressed [ 306.230866][T19037] netlink: 76 bytes leftover after parsing attributes in process `syz.8.3887'. [ 306.292012][T19043] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3890'. [ 306.523309][T19058] tap0: tun_chr_ioctl cmd 1074025678 [ 306.530857][T19058] tap0: group set to 0 [ 306.812911][T19072] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3899'. [ 306.899054][T19076] validate_nla: 3 callbacks suppressed [ 306.899074][T19076] netlink: 'syz.5.3900': attribute type 9 has an invalid length. [ 306.913357][T19076] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3900'. [ 307.275167][ T5867] Bluetooth: hci1: command tx timeout [ 307.283844][T19098] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 307.341788][T19101] netlink: 236 bytes leftover after parsing attributes in process `syz.5.3905'. [ 307.356309][T19102] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3907'. [ 307.399527][T19102] vlan4: entered allmulticast mode [ 307.424898][T19102] bridge0: entered allmulticast mode [ 307.432731][T19102] bridge3: port 1(vlan4) entered blocking state [ 307.448288][T19107] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3907'. [ 307.462481][T19105] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3910'. [ 307.469749][T19102] bridge3: port 1(vlan4) entered disabled state [ 307.481203][T19102] vlan4: entered promiscuous mode [ 307.487139][T19102] bridge0: entered promiscuous mode [ 307.509771][T19106] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3909'. [ 307.520649][T19106] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3909'. [ 308.160244][T19144] netlink: 'syz.6.3922': attribute type 29 has an invalid length. [ 308.169324][T19145] netlink: 'syz.6.3922': attribute type 29 has an invalid length. [ 308.178972][T19145] netlink: 'syz.6.3922': attribute type 29 has an invalid length. [ 308.235042][T19145] netlink: 'syz.6.3922': attribute type 29 has an invalid length. [ 308.253143][T19145] netlink: 'syz.6.3922': attribute type 29 has an invalid length. [ 308.282571][T19145] netlink: 'syz.6.3922': attribute type 29 has an invalid length. [ 308.325853][T19145] netlink: 'syz.6.3922': attribute type 29 has an invalid length. [ 308.333997][T19145] netlink: 'syz.6.3922': attribute type 29 has an invalid length. [ 308.349688][T19145] netlink: 'syz.6.3922': attribute type 29 has an invalid length. [ 308.472864][T19163] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 308.564971][T19173] bond0: entered allmulticast mode [ 308.570228][T19173] bond_slave_0: entered allmulticast mode [ 308.582049][T19173] bond_slave_1: entered allmulticast mode [ 308.887503][T19190] bond0: (slave wlan1): Releasing backup interface [ 308.943064][T19190] bond6: (slave gretap1): Releasing active interface [ 308.986611][T19190] bond8: (slave veth9): Releasing active interface [ 309.043400][T19209] tipc: Enabled bearer , priority 0 [ 309.067033][T19209] syzkaller0: entered promiscuous mode [ 309.072536][T19209] syzkaller0: entered allmulticast mode [ 309.113127][T19209] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 309.159110][T19209] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 309.170644][T19221] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 309.181352][T19209] tipc: Resetting bearer [ 309.231943][T19208] tipc: Resetting bearer [ 309.246673][T19208] tipc: Disabling bearer [ 309.258424][T19227] syz_tun: entered promiscuous mode [ 309.265487][T19227] syz_tun: entered allmulticast mode [ 309.356463][ T5867] Bluetooth: hci1: command tx timeout [ 309.362689][T19234] veth11: entered promiscuous mode [ 309.374470][T19234] bond9: (slave veth11): Enslaving as a backup interface with a down link [ 309.402897][T19233] bond9: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 309.462887][T19240] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 309.654151][T19258] netlink: 'syz.7.3961': attribute type 11 has an invalid length. [ 309.668382][T19258] netlink: 'syz.7.3961': attribute type 11 has an invalid length. [ 309.731215][T19260] netlink: 'syz.7.3961': attribute type 11 has an invalid length. [ 309.749288][T19260] netlink: 'syz.7.3961': attribute type 11 has an invalid length. [ 309.805452][ T1138] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 309.823308][ T1138] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 309.834754][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 310.252878][T19313] hsr_slave_1 (unregistering): left promiscuous mode [ 310.437083][T19332] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 310.554852][T12615] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 310.566666][T19348] dvmrp0: left allmulticast mode [ 310.619065][T12615] IPVS: starting estimator thread 0... [ 310.721424][T19356] IPVS: using max 48 ests per chain, 115200 per kthread [ 310.794954][T12615] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 311.007192][T19380] 8021q: adding VLAN 0 to HW filter on device bond10 [ 311.041172][ T59] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.078807][T19381] bond10: (slave geneve3): making interface the new active one [ 311.105489][T19381] bond10: (slave geneve3): Enslaving as an active interface with an up link [ 311.127094][T19384] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 311.127967][T19385] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 311.148523][ T59] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.221192][ T59] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.240936][ T59] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.250928][T19413] netlink: 'syz.8.4004': attribute type 11 has an invalid length. [ 311.272131][T19413] __nla_validate_parse: 27 callbacks suppressed [ 311.272150][T19413] netlink: 224 bytes leftover after parsing attributes in process `syz.8.4004'. [ 311.616511][T19444] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 311.860249][T19475] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4020'. [ 311.901809][T19478] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4023'. [ 312.011426][T19490] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4026'. [ 312.029333][T19490] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.036822][T19490] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.126306][T19501] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4031'. [ 312.226423][T19504] syzkaller0: entered promiscuous mode [ 312.232157][T19504] syzkaller0: entered allmulticast mode [ 312.267277][ T2991] syzkaller0: tun_net_xmit 48 [ 312.429684][T19538] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 313.674515][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 316.474639][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 321.594430][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 333.114759][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 337.594924][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 363.195171][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 365.114695][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 369.594339][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 375.359769][T19555] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 375.428128][T19561] veth1_macvtap: left promiscuous mode [ 375.435013][T19561] macsec0: entered promiscuous mode [ 375.441212][T19561] macsec0: entered allmulticast mode [ 375.453362][T19561] veth1_macvtap: entered promiscuous mode [ 375.469655][T19561] veth1_macvtap: entered allmulticast mode [ 375.477564][T19561] macsec0: left promiscuous mode [ 375.482657][T19561] macsec0: left allmulticast mode [ 375.494989][T19561] veth1_macvtap: left allmulticast mode [ 375.521247][T19562] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 375.545675][T19566] mac80211_hwsim hwsim38 wlan1: entered allmulticast mode [ 375.557671][T19567] openvswitch: netlink: IPv4 tun info is not correct [ 375.569026][T19566] validate_nla: 19 callbacks suppressed [ 375.569046][T19566] netlink: 'syz.1.4051': attribute type 10 has an invalid length. [ 375.582631][T19566] mac80211_hwsim hwsim38 wlan1: left allmulticast mode [ 375.597359][T19566] bridge_slave_0: left allmulticast mode [ 375.603053][T19566] bridge_slave_0: left promiscuous mode [ 375.609541][T19566] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.620320][T19566] bridge_slave_1: left allmulticast mode [ 375.626932][T19566] bridge_slave_1: left promiscuous mode [ 375.632784][T19566] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.644003][T19566] bond0: (slave bond_slave_0): Releasing backup interface [ 375.656766][T19566] bond0: (slave bond_slave_1): Releasing backup interface [ 375.666936][T19566] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.674946][T19566] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.683419][T19566] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.691319][T19566] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.705801][T19566] bond1: (slave gretap1): Releasing active interface [ 375.714956][T19566] vlan4: left promiscuous mode [ 375.719757][T19566] bridge0: left promiscuous mode [ 375.725476][T19566] bridge3: port 1(vlan4) entered disabled state [ 375.917897][T19576] netlink: 3 bytes leftover after parsing attributes in process `syz.5.4057'. [ 375.918114][T19577] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4055'. [ 375.987869][T19585] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20000 [ 375.999235][T19585] IPVS: set_ctl: invalid protocol: 47 172.20.20.21:20001 [ 376.010280][T19587] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4059'. [ 376.133800][T19587] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4059'. [ 376.216925][T19601] netlink: 'syz.8.4064': attribute type 1 has an invalid length. [ 376.232986][T19601] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4064'. [ 376.264893][T19601] macvtap1: entered promiscuous mode [ 376.274866][T19601] vlan0: entered promiscuous mode [ 376.280874][T19601] macvtap1: entered allmulticast mode [ 376.288484][T19601] vlan0: entered allmulticast mode [ 376.294099][T19601] veth0_vlan: entered allmulticast mode [ 376.378578][T19608] netlink: 'syz.8.4067': attribute type 1 has an invalid length. [ 376.866603][T19624] netlink: 'syz.1.4072': attribute type 1 has an invalid length. [ 376.976474][T19632] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4077'. [ 377.001521][T19636] sctp: [Deprecated]: syz.5.4076 (pid 19636) Use of int in maxseg socket option. [ 377.001521][T19636] Use struct sctp_assoc_value instead [ 377.021541][T19638] Bluetooth: MGMT ver 1.23 [ 377.155918][T19652] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 377.493079][T19658] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4086'. [ 377.499498][T19663] netlink: 'syz.8.4089': attribute type 1 has an invalid length. [ 377.511823][T19663] netlink: 244 bytes leftover after parsing attributes in process `syz.8.4089'. [ 377.514126][T19658] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4086'. [ 377.597496][T19663] NCSI netlink: No device for ifindex 808453125 [ 377.679094][T19678] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4090'. [ 377.732671][T19681] netlink: 'syz.8.4092': attribute type 1 has an invalid length. [ 377.767967][T19688] syz_tun: entered allmulticast mode [ 377.774788][T19687] syz_tun: left allmulticast mode [ 378.004060][T19709] netlink: 'syz.8.4100': attribute type 5 has an invalid length. [ 378.033300][T19709] geneve2: entered promiscuous mode [ 378.048696][T19709] geneve2: entered allmulticast mode [ 378.067549][ T4312] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 378.094820][ T4312] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 378.103473][ T4312] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 378.147916][ T4312] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 378.391988][ T5184] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 378.410378][ T5184] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 378.419853][ T5184] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 378.427598][ T5184] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 378.435109][ T5184] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 378.460939][T19727] lo speed is unknown, defaulting to 1000 [ 378.661312][T19743] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 378.787004][T19727] chnl_net:caif_netlink_parms(): no params data found [ 378.949657][T19764] lo speed is unknown, defaulting to 1000 [ 378.982263][T19727] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.001268][T19727] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.018899][T19727] bridge_slave_0: entered allmulticast mode [ 379.036083][T19727] bridge_slave_0: entered promiscuous mode [ 379.052432][T19727] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.069202][T19727] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.085585][T19727] bridge_slave_1: entered allmulticast mode [ 379.101638][T19727] bridge_slave_1: entered promiscuous mode [ 379.118445][T19770] netlink: 'syz.8.4116': attribute type 12 has an invalid length. [ 379.245898][T19727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.258847][T19796] netlink: 'syz.8.4119': attribute type 11 has an invalid length. [ 379.292678][T19727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.307841][T19808] RDS: rds_bind could not find a transport for fe80::20, load rds_tcp or rds_rdma? [ 379.380845][T19727] team0: Port device team_slave_0 added [ 379.413056][T19727] team0: Port device team_slave_1 added [ 379.493094][T19727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.514709][T19727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.542071][T19727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.573224][T19727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.583914][T19727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.616528][T19727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.708962][T19835] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 379.733528][T19727] hsr_slave_0: entered promiscuous mode [ 379.752951][T19727] hsr_slave_1: entered promiscuous mode [ 379.762154][T19727] debugfs: 'hsr0' already exists in 'hsr' [ 379.768780][T19727] Cannot create hsr debugfs directory [ 379.829552][T19842] netlink: 'syz.8.4133': attribute type 21 has an invalid length. [ 379.885655][T19842] IPv6: addrconf: prefix option has invalid lifetime [ 380.082521][T19727] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.152203][T19727] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.181349][T19868] veth4: entered promiscuous mode [ 380.196365][T19868] veth5: entered promiscuous mode [ 380.201595][T19868] veth5: entered allmulticast mode [ 380.229612][T19727] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.278292][T19727] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.378509][T19727] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 380.388995][T19727] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 380.408925][T19727] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 380.420703][T19727] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 380.438230][T19884] gretap0: entered promiscuous mode [ 380.485299][ T5184] Bluetooth: hci2: command tx timeout [ 380.561580][T19727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.598101][T19727] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.615031][T19911] openvswitch: netlink: Actions may not be safe on all matching packets [ 380.636474][T19806] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.643601][T19806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.657297][T19806] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.664473][T19806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.685620][T19913] nbd: couldn't find a device at index 6 [ 381.008681][T19727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.261021][T19955] __nla_validate_parse: 17 callbacks suppressed [ 381.261038][T19955] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4161'. [ 381.519982][T19976] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 381.538923][T19727] veth0_vlan: entered promiscuous mode [ 381.569262][T19978] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 381.587467][T19727] veth1_vlan: entered promiscuous mode [ 381.646774][T19727] veth0_macvtap: entered promiscuous mode [ 381.663829][T19727] veth1_macvtap: entered promiscuous mode [ 381.702855][T19727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.717787][T19727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.730029][T19988] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4170'. [ 381.732239][T19991] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4171'. [ 381.739981][T19988] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4170'. [ 381.765552][T19798] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.788454][T19988] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4170'. [ 381.790846][T19798] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.798503][T19993] netlink: 6032 bytes leftover after parsing attributes in process `syz.5.4172'. [ 381.812860][T19798] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.830226][T19798] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.889660][T19804] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.921024][T19804] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.968613][T19800] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.998693][T19800] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.007495][T19997] netlink: 'syz.6.4174': attribute type 1 has an invalid length. [ 382.025879][T19997] nbd: error processing sock list [ 382.031802][T19997] block nbd5: shutting down sockets [ 382.059041][T20001] netlink: 'syz.1.4176': attribute type 1 has an invalid length. [ 382.069184][T20005] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4178'. [ 382.079061][T20005] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4178'. [ 382.089362][T20001] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4176'. [ 382.166299][T20015] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4179'. [ 382.199978][T20015] geneve2: entered promiscuous mode [ 382.226142][T20015] geneve2: entered allmulticast mode [ 382.556303][ T5184] Bluetooth: hci2: command 0x041b tx timeout [ 382.671036][T20067] sctp: [Deprecated]: syz.1.4193 (pid 20067) Use of int in maxseg socket option. [ 382.671036][T20067] Use struct sctp_assoc_value instead [ 382.743083][T20069] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 382.812083][T20078] team0: No ports can be present during mode change [ 382.906129][T20086] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 382.932157][T20086] batadv1: entered allmulticast mode [ 382.980512][T20093] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 383.141705][T20109] netlink: 'syz.1.4207': attribute type 7 has an invalid length. [ 383.153039][T20109] netlink: 'syz.1.4207': attribute type 8 has an invalid length. [ 383.167826][T20113] tipc: Started in network mode [ 383.172998][T20113] tipc: Node identity 12cbca3384fc, cluster identity 4711 [ 383.181730][T20113] tipc: Enabled bearer , priority 0 [ 383.201749][T20113] syzkaller0: entered promiscuous mode [ 383.215031][T20113] syzkaller0: entered allmulticast mode [ 383.302246][T20113] tipc: Resetting bearer [ 383.319559][T20113] tipc: Disabling bearer [ 383.503909][T20147] vlan6: entered promiscuous mode [ 383.509803][T20147] bridge0: entered promiscuous mode [ 384.509701][T20173] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20003 [ 384.592538][T20179] pim6reg: entered allmulticast mode [ 384.634871][ T5184] Bluetooth: hci2: command 0x041b tx timeout [ 384.694035][T20189] netlink: 'syz.7.4235': attribute type 1 has an invalid length. [ 384.736864][T20195] tipc: Cannot configure node identity twice [ 384.767360][T20200] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 384.898513][T20214] batadv1: entered allmulticast mode [ 384.949655][T20218] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 385.031662][T20229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.060233][T20229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.072853][T20235] IPVS: Error joining to the multicast group [ 385.191746][T20243] gretap0: entered promiscuous mode [ 385.211906][T20243] 0ªî{X¹¦: renamed from gretap0 [ 385.236103][T20243] 0ªî{X¹¦: left promiscuous mode [ 385.251521][T20243] 0ªî{X¹¦: entered allmulticast mode [ 385.274061][T20243] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 385.379251][T20255] netlink: 'syz.1.4257': attribute type 9 has an invalid length. [ 385.698375][T20278] lo speed is unknown, defaulting to 1000 [ 385.768505][T20291] netlink: 'syz.5.4269': attribute type 10 has an invalid length. [ 385.808126][T20291] veth0_vlan: entered allmulticast mode [ 385.883555][T20291] veth0_vlan: left promiscuous mode [ 385.916054][T20291] veth0_vlan: entered promiscuous mode [ 385.936775][T20291] team0: Device veth0_vlan failed to register rx_handler [ 386.628614][T20371] __nla_validate_parse: 29 callbacks suppressed [ 386.628633][T20371] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4293'. [ 386.716172][ T5184] Bluetooth: hci2: command 0x041b tx timeout [ 386.760758][T20373] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4294'. [ 386.966148][T20395] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4304'. [ 387.002164][T20395] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4304'. [ 387.028250][T20405] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4302'. [ 387.043063][T20404] IPv6: sit1: Disabled Multicast RS [ 387.058183][T20404] sit1: entered allmulticast mode [ 387.090923][T20409] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4305'. [ 387.168448][T20411] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4307'. [ 387.178164][T20411] netlink: 'syz.1.4307': attribute type 7 has an invalid length. [ 387.187143][T20411] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4307'. [ 387.340891][T20431] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 387.363861][T20437] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 387.468215][T20441] lo speed is unknown, defaulting to 1000 [ 387.895668][T20477] lo: entered promiscuous mode [ 387.902920][T20477] tunl0: entered promiscuous mode [ 387.933433][T20477] gre0: entered promiscuous mode [ 387.964286][T20477] gretap0: entered promiscuous mode [ 387.982935][T20477] erspan0: entered promiscuous mode [ 387.999371][T20477] ip_vti0: entered promiscuous mode [ 388.078973][T20501] : renamed from hsr0 (while UP) [ 388.227664][T20516] veth0_to_bridge: entered promiscuous mode [ 388.257747][T20516] veth0_to_bridge: left promiscuous mode [ 388.331616][T20526] syz.5.4342 (20526) used obsolete PPPIOCDETACH ioctl [ 388.500723][T20546] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 388.532487][T20546] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 388.549642][T20546] gretap1: entered promiscuous mode [ 388.554948][T20546] gretap1: entered allmulticast mode [ 388.617477][T20559] netlink: 'syz.6.4352': attribute type 21 has an invalid length. [ 388.630275][T20559] netlink: 'syz.6.4352': attribute type 1 has an invalid length. [ 388.703267][T20564] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4353'. [ 388.796798][ T5184] Bluetooth: hci2: command 0x041b tx timeout [ 388.809691][T20576] batadv_slave_0: entered promiscuous mode [ 388.820257][T20575] batadv_slave_0: left promiscuous mode [ 388.900264][T20585] netlink: 'syz.6.4362': attribute type 5 has an invalid length. [ 389.028042][T20602] lo speed is unknown, defaulting to 1000 [ 389.217476][T20619] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4371'. [ 389.430473][T20643] netlink: 'syz.1.4380': attribute type 6 has an invalid length. [ 389.678920][T20665] netlink: 'syz.6.4388': attribute type 19 has an invalid length. [ 389.692432][T19803] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.703708][T19803] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.715103][T19803] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.726660][T20660] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 389.736513][T19803] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.789512][T20678] IPVS: set_ctl: invalid protocol: 135 100.1.1.1:20001 [ 389.836241][T20682] netlink: 'syz.6.4391': attribute type 3 has an invalid length. [ 389.883513][T20686] netlink: 'syz.1.4393': attribute type 4 has an invalid length. [ 389.901496][T20685] macvtap2: entered promiscuous mode [ 389.917527][T20685] macvtap2: entered allmulticast mode [ 390.001063][T20685] batadv_slave_0: entered promiscuous mode [ 390.082242][T20703] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 390.237931][T20717] netlink: 'syz.7.4407': attribute type 1 has an invalid length. [ 390.493254][T20744] netlink: 'syz.7.4415': attribute type 21 has an invalid length. [ 390.607370][T20758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 390.706026][T20683] batadv_slave_0: left promiscuous mode [ 391.262135][T20802] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 391.298490][T20805] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 391.532150][ T43] IPVS: starting estimator thread 0... [ 391.624548][T20822] IPVS: using max 42 ests per chain, 100800 per kthread [ 393.298190][T20852] validate_nla: 2 callbacks suppressed [ 393.298207][T20852] netlink: 'syz.6.4455': attribute type 3 has an invalid length. [ 393.313539][T20844] netlink: 'syz.5.4452': attribute type 28 has an invalid length. [ 393.334672][T20844] netlink: 'syz.5.4452': attribute type 3 has an invalid length. [ 393.342547][T20844] __nla_validate_parse: 18 callbacks suppressed [ 393.342564][T20844] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4452'. [ 393.472741][T20863] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4459'. [ 393.538868][T20869] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4461'. [ 393.553311][T20870] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4461'. [ 393.670111][T20878] netlink: 'syz.6.4465': attribute type 83 has an invalid length. [ 393.694711][ T43] IPVS: starting estimator thread 0... [ 393.784669][T20880] IPVS: using max 36 ests per chain, 86400 per kthread [ 394.039950][T20904] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 394.128888][T20912] netlink: 96 bytes leftover after parsing attributes in process `syz.8.4476'. [ 394.147979][T20912] 8021q: VLANs not supported on sit0 [ 394.156632][T20913] openvswitch: netlink: IP tunnel dst address not specified [ 394.222592][T20914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 394.343121][T20926] netlink: 'syz.7.4481': attribute type 4 has an invalid length. [ 394.506177][T20931] team_slave_0: entered promiscuous mode [ 394.511908][T20931] team_slave_1: entered promiscuous mode [ 394.556890][T20922] nbd5: detected capacity change from 0 to 127 [ 394.569397][T20931] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4483'. [ 394.580402][T20931] tipc: Invalid UDP bearer configuration [ 394.580447][T20931] tipc: Enabling of bearer rejected, failed to enable media [ 394.597860][ T5184] block nbd5: Receive control failed (result -32) [ 394.605903][ T5867] block nbd5: Receive control failed (result -32) [ 394.661746][T20935] netlink: 'syz.7.4484': attribute type 4 has an invalid length. [ 394.697623][T20935] netlink: 'syz.7.4484': attribute type 4 has an invalid length. [ 394.739721][T20944] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.4487'. [ 394.786872][T20946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4489'. [ 394.815195][T20947] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4484'. [ 394.824609][T20946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4489'. [ 394.846838][T20946] netlink: 'syz.1.4489': attribute type 1 has an invalid length. [ 394.888692][T20949] openvswitch: netlink: IP tunnel dst address not specified [ 394.963744][T20955] smc: net device erspan0 applied user defined pnetid SYZ0 [ 395.109263][T20968] netlink: 'syz.8.4495': attribute type 11 has an invalid length. [ 395.550964][T21007] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 395.736657][T21022] netlink: 'syz.8.4512': attribute type 28 has an invalid length. [ 395.758760][T21022] netlink: 'syz.8.4512': attribute type 3 has an invalid length. [ 395.956651][T21039] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 396.039097][T21049] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 396.250677][T21075] FAULT_INJECTION: forcing a failure. [ 396.250677][T21075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 396.279187][T21075] CPU: 1 UID: 0 PID: 21075 Comm: syz.8.4531 Not tainted syzkaller #0 PREEMPT(full) [ 396.279213][T21075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 396.279227][T21075] Call Trace: [ 396.279249][T21075] [ 396.279258][T21075] dump_stack_lvl+0x189/0x250 [ 396.279300][T21075] ? __pfx____ratelimit+0x10/0x10 [ 396.279323][T21075] ? __pfx_dump_stack_lvl+0x10/0x10 [ 396.279343][T21075] ? __pfx__printk+0x10/0x10 [ 396.279364][T21075] ? __might_fault+0xb0/0x130 [ 396.279391][T21075] ? rcu_is_watching+0x15/0xb0 [ 396.279410][T21075] should_fail_ex+0x414/0x560 [ 396.279433][T21075] _copy_from_user+0x2d/0xb0 [ 396.279452][T21075] ___sys_sendmsg+0x158/0x2a0 [ 396.279473][T21075] ? __pfx____sys_sendmsg+0x10/0x10 [ 396.279507][T21075] ? __fget_files+0x2a/0x420 [ 396.279529][T21075] ? __fget_files+0x3a0/0x420 [ 396.279558][T21075] __x64_sys_sendmsg+0x19b/0x260 [ 396.279577][T21075] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 396.279599][T21075] ? __pfx_ksys_write+0x10/0x10 [ 396.279619][T21075] ? rcu_is_watching+0x15/0xb0 [ 396.279638][T21075] ? rcu_is_watching+0x15/0xb0 [ 396.279656][T21075] do_syscall_64+0xfa/0x3b0 [ 396.279679][T21075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.279696][T21075] ? clear_bhb_loop+0x60/0xb0 [ 396.279715][T21075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.279735][T21075] RIP: 0033:0x7efdc578ebe9 [ 396.279750][T21075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.279764][T21075] RSP: 002b:00007efdc654b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 396.279783][T21075] RAX: ffffffffffffffda RBX: 00007efdc59b5fa0 RCX: 00007efdc578ebe9 [ 396.279796][T21075] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 396.279806][T21075] RBP: 00007efdc654b090 R08: 0000000000000000 R09: 0000000000000000 [ 396.279817][T21075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.279828][T21075] R13: 00007efdc59b6038 R14: 00007efdc59b5fa0 R15: 00007ffc5552b4d8 [ 396.279847][T21075] [ 396.760168][T21118] sctp: [Deprecated]: syz.1.4541 (pid 21118) Use of int in max_burst socket option. [ 396.760168][T21118] Use struct sctp_assoc_value instead [ 396.782253][T21120] sctp: [Deprecated]: syz.7.4543 (pid 21120) Use of int in maxseg socket option. [ 396.782253][T21120] Use struct sctp_assoc_value instead [ 397.031515][T21144] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 397.606721][T21187] netlink: 'syz.6.4565': attribute type 11 has an invalid length. [ 397.619699][T21187] nbd: must specify an index to disconnect [ 397.703665][T21196] lo: left promiscuous mode [ 397.858415][T21196] bond0: (slave bridge_slave_1): Releasing backup interface [ 397.921320][T21196] vlan2: left allmulticast mode [ 397.927355][T21196] veth1: left allmulticast mode [ 397.932356][T21196] vlan3: left promiscuous mode [ 397.941380][T21196] geneve1: left promiscuous mode [ 397.948606][T21196] vlan3: left allmulticast mode [ 397.953464][T21196] geneve1: left allmulticast mode [ 397.962010][T21196] gretap1: left promiscuous mode [ 397.971211][T21196] vlan4: left allmulticast mode [ 397.976379][T21196] bridge0: left allmulticast mode [ 397.982832][T21196] vlan6: left promiscuous mode [ 397.987763][T21196] bridge0: left promiscuous mode [ 397.995745][T19798] netdevsim netdevsim1 ÿÿÿÿÿÿ: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.022878][T19798] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.035360][T19798] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.048510][T19798] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.406782][T21249] __nla_validate_parse: 15 callbacks suppressed [ 398.406802][T21249] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4582'. [ 398.423304][T21255] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4585'. [ 398.428339][T21249] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4582'. [ 398.434385][T21255] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4585'. [ 398.443440][T21257] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4584'. [ 398.454838][T21256] validate_nla: 1 callbacks suppressed [ 398.454854][T21256] netlink: 'syz.1.4583': attribute type 1 has an invalid length. [ 398.475841][T21256] netlink: 212 bytes leftover after parsing attributes in process `syz.1.4583'. [ 398.487951][T21256] netlink: 'syz.1.4583': attribute type 1 has an invalid length. [ 398.499909][T21249] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4582'. [ 398.510697][T21249] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4582'. [ 398.515866][T21260] openvswitch: netlink: IP tunnel TTL not specified. [ 398.539170][T21249] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4582'. [ 398.563089][T21249] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4582'. [ 398.783376][T21292] netlink: 'syz.6.4597': attribute type 10 has an invalid length. [ 398.823252][T21292] bridge_slave_1: left allmulticast mode [ 398.829857][T21292] bridge_slave_1: left promiscuous mode [ 398.836511][T21292] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.851014][T21292] bridge_slave_1: entered allmulticast mode [ 398.857722][T21292] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 398.896345][T19800] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 398.908886][T21301] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 399.666324][T21319] netlink: 'syz.6.4605': attribute type 25 has an invalid length. [ 400.147107][T21370] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 400.349796][T21388] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 400.368378][T21388] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 400.378003][T21395] FAULT_INJECTION: forcing a failure. [ 400.378003][T21395] name failslab, interval 1, probability 0, space 0, times 0 [ 400.385181][T21388] gretap2: entered promiscuous mode [ 400.396514][T21388] gretap2: entered allmulticast mode [ 400.403942][T21395] CPU: 0 UID: 0 PID: 21395 Comm: syz.1.4627 Not tainted syzkaller #0 PREEMPT(full) [ 400.403965][T21395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 400.403974][T21395] Call Trace: [ 400.403981][T21395] [ 400.403988][T21395] dump_stack_lvl+0x189/0x250 [ 400.404010][T21395] ? __pfx____ratelimit+0x10/0x10 [ 400.404031][T21395] ? __pfx_dump_stack_lvl+0x10/0x10 [ 400.404049][T21395] ? __pfx__printk+0x10/0x10 [ 400.404070][T21395] ? __pfx___might_resched+0x10/0x10 [ 400.404086][T21395] ? lock_acquire+0x5f/0x360 [ 400.404108][T21395] should_fail_ex+0x414/0x560 [ 400.404128][T21395] should_failslab+0xa8/0x100 [ 400.404153][T21395] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 400.404174][T21395] ? __request_module+0x2d1/0x5e0 [ 400.404200][T21395] kstrdup+0x42/0x100 [ 400.404218][T21395] __request_module+0x2d1/0x5e0 [ 400.404253][T21395] ? __pfx___request_module+0x10/0x10 [ 400.404284][T21395] ? xt_find_target+0x1fa/0x240 [ 400.404303][T21395] xt_request_find_target+0xc1/0x130 [ 400.404322][T21395] nft_target_select_ops+0x155/0x5d0 [ 400.404347][T21395] nf_tables_expr_parse+0x71e/0xa70 [ 400.404365][T21395] ? nf_tables_expr_parse+0x15a/0xa70 [ 400.404384][T21395] ? __pfx_nf_tables_expr_parse+0x10/0x10 [ 400.404401][T21395] ? nf_tables_newrule+0x1186/0x2890 [ 400.404418][T21395] ? trace_kmalloc+0x1f/0xd0 [ 400.404437][T21395] ? __kvmalloc_node_noprof+0x331/0x5f0 [ 400.404460][T21395] ? nla_strcmp+0x106/0x140 [ 400.404486][T21395] nf_tables_newrule+0x12e0/0x2890 [ 400.404517][T21395] ? __pfx_nf_tables_newrule+0x10/0x10 [ 400.404534][T21395] ? nfnl_pernet+0x23/0x240 [ 400.404553][T21395] ? rcu_is_watching+0x15/0xb0 [ 400.404569][T21395] ? nfnl_pernet+0x23/0x240 [ 400.404593][T21395] ? __nla_parse+0x40/0x60 [ 400.404618][T21395] nfnetlink_rcv+0x1132/0x2520 [ 400.404653][T21395] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 400.404678][T21395] ? kasan_save_track+0x4f/0x80 [ 400.404697][T21395] ? kasan_save_track+0x3e/0x80 [ 400.404714][T21395] ? __kasan_slab_alloc+0x6c/0x80 [ 400.404747][T21395] ? netlink_deliver_tap+0x2e/0x1b0 [ 400.404769][T21395] ? rcu_is_watching+0x15/0xb0 [ 400.404784][T21395] ? netlink_deliver_tap+0x2e/0x1b0 [ 400.404807][T21395] ? lock_release+0x4b/0x3e0 [ 400.404827][T21395] ? net_generic+0x1e/0x240 [ 400.404844][T21395] ? net_generic+0x1e/0x240 [ 400.404864][T21395] netlink_unicast+0x82c/0x9e0 [ 400.404887][T21395] ? __pfx_netlink_unicast+0x10/0x10 [ 400.404908][T21395] ? netlink_sendmsg+0x642/0xb30 [ 400.404929][T21395] ? skb_put+0x11b/0x210 [ 400.404944][T21395] netlink_sendmsg+0x805/0xb30 [ 400.404970][T21395] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.404993][T21395] ? aa_sock_msg_perm+0xf1/0x1d0 [ 400.405008][T21395] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 400.405024][T21395] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.405045][T21395] __sock_sendmsg+0x21c/0x270 [ 400.405064][T21395] ____sys_sendmsg+0x505/0x830 [ 400.405083][T21395] ? __pfx_____sys_sendmsg+0x10/0x10 [ 400.405102][T21395] ? import_iovec+0x74/0xa0 [ 400.405118][T21395] ___sys_sendmsg+0x21f/0x2a0 [ 400.405136][T21395] ? __pfx____sys_sendmsg+0x10/0x10 [ 400.405166][T21395] ? __fget_files+0x2a/0x420 [ 400.405187][T21395] ? __fget_files+0x3a0/0x420 [ 400.405212][T21395] __x64_sys_sendmsg+0x19b/0x260 [ 400.405228][T21395] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 400.405248][T21395] ? __pfx_ksys_write+0x10/0x10 [ 400.405266][T21395] ? rcu_is_watching+0x15/0xb0 [ 400.405284][T21395] ? rcu_is_watching+0x15/0xb0 [ 400.405301][T21395] do_syscall_64+0xfa/0x3b0 [ 400.405325][T21395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.405342][T21395] ? clear_bhb_loop+0x60/0xb0 [ 400.405359][T21395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.405374][T21395] RIP: 0033:0x7fab2838ebe9 [ 400.405389][T21395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.405404][T21395] RSP: 002b:00007fab265f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 400.405422][T21395] RAX: ffffffffffffffda RBX: 00007fab285b5fa0 RCX: 00007fab2838ebe9 [ 400.405435][T21395] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 400.405446][T21395] RBP: 00007fab265f6090 R08: 0000000000000000 R09: 0000000000000000 [ 400.405457][T21395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.405467][T21395] R13: 00007fab285b6038 R14: 00007fab285b5fa0 R15: 00007fffc70f13a8 [ 400.405487][T21395] [ 400.956549][ T5867] Bluetooth: hci1: command 0x0401 tx timeout [ 401.072758][T21420] pim6reg: entered allmulticast mode [ 401.108657][T21420] pim6reg: left allmulticast mode [ 401.132521][T21422] netlink: 'syz.7.4634': attribute type 12 has an invalid length. [ 401.446809][T21453] pimreg3: entered allmulticast mode [ 401.919424][T21501] netlink: 'syz.1.4658': attribute type 83 has an invalid length. [ 401.978683][T21506] netdevsim netdevsim8 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 402.343300][T21551] netem: change failed [ 402.357964][T21548] netlink: 'syz.8.4673': attribute type 10 has an invalid length. [ 402.381339][T21548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.442327][T21558] FAULT_INJECTION: forcing a failure. [ 402.442327][T21558] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 402.455897][T21558] CPU: 1 UID: 0 PID: 21558 Comm: syz.8.4674 Not tainted syzkaller #0 PREEMPT(full) [ 402.455922][T21558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 402.455932][T21558] Call Trace: [ 402.455939][T21558] [ 402.455946][T21558] dump_stack_lvl+0x189/0x250 [ 402.455969][T21558] ? __pfx____ratelimit+0x10/0x10 [ 402.455990][T21558] ? __pfx_dump_stack_lvl+0x10/0x10 [ 402.456007][T21558] ? __pfx__printk+0x10/0x10 [ 402.456027][T21558] ? __might_fault+0xb0/0x130 [ 402.456052][T21558] ? rcu_is_watching+0x15/0xb0 [ 402.456069][T21558] should_fail_ex+0x414/0x560 [ 402.456092][T21558] _copy_from_user+0x2d/0xb0 [ 402.456110][T21558] ___sys_sendmsg+0x158/0x2a0 [ 402.456129][T21558] ? __pfx____sys_sendmsg+0x10/0x10 [ 402.456161][T21558] ? __fget_files+0x2a/0x420 [ 402.456184][T21558] ? __fget_files+0x3a0/0x420 [ 402.456211][T21558] __x64_sys_sendmsg+0x19b/0x260 [ 402.456229][T21558] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 402.456251][T21558] ? __pfx_ksys_write+0x10/0x10 [ 402.456270][T21558] ? rcu_is_watching+0x15/0xb0 [ 402.456287][T21558] ? rcu_is_watching+0x15/0xb0 [ 402.456303][T21558] do_syscall_64+0xfa/0x3b0 [ 402.456325][T21558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.456341][T21558] ? clear_bhb_loop+0x60/0xb0 [ 402.456360][T21558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.456376][T21558] RIP: 0033:0x7efdc578ebe9 [ 402.456392][T21558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.456407][T21558] RSP: 002b:00007efdc654b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 402.456426][T21558] RAX: ffffffffffffffda RBX: 00007efdc59b5fa0 RCX: 00007efdc578ebe9 [ 402.456439][T21558] RDX: 0000000004000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 402.456451][T21558] RBP: 00007efdc654b090 R08: 0000000000000000 R09: 0000000000000000 [ 402.456462][T21558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.456472][T21558] R13: 00007efdc59b6038 R14: 00007efdc59b5fa0 R15: 00007ffc5552b4d8 [ 402.456491][T21558] [ 402.759878][T21581] netlink: 'syz.1.4680': attribute type 1 has an invalid length. [ 402.993559][T21608] tipc: Started in network mode [ 402.999170][T21608] tipc: Node identity , cluster identity 4711 [ 403.007941][T21608] tipc: Failed to obtain node identity [ 403.013533][T21608] tipc: Enabling of bearer rejected, failed to enable media [ 403.069849][T21614] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.509661][T21650] __nla_validate_parse: 79 callbacks suppressed [ 403.509681][T21650] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4705'. [ 403.708622][T21670] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4712'. [ 403.718583][T21671] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4712'. [ 403.736694][T21670] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.4712'. [ 403.814259][T21675] FAULT_INJECTION: forcing a failure. [ 403.814259][T21675] name failslab, interval 1, probability 0, space 0, times 0 [ 403.833188][T21675] CPU: 1 UID: 0 PID: 21675 Comm: syz.8.4714 Not tainted syzkaller #0 PREEMPT(full) [ 403.833222][T21675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 403.833232][T21675] Call Trace: [ 403.833239][T21675] [ 403.833246][T21675] dump_stack_lvl+0x189/0x250 [ 403.833267][T21675] ? __pfx____ratelimit+0x10/0x10 [ 403.833290][T21675] ? __pfx_dump_stack_lvl+0x10/0x10 [ 403.833308][T21675] ? __pfx__printk+0x10/0x10 [ 403.833331][T21675] ? __pfx___might_resched+0x10/0x10 [ 403.833347][T21675] ? lock_acquire+0x5f/0x360 [ 403.833370][T21675] should_fail_ex+0x414/0x560 [ 403.833393][T21675] should_failslab+0xa8/0x100 [ 403.833416][T21675] __kmalloc_cache_noprof+0x70/0x3d0 [ 403.833437][T21675] ? nfnetlink_rcv+0xeff/0x2520 [ 403.833459][T21675] nfnetlink_rcv+0xeff/0x2520 [ 403.833491][T21675] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 403.833518][T21675] ? ref_tracker_free+0x63a/0x7d0 [ 403.833552][T21675] ? __netlink_deliver_tap+0x807/0x850 [ 403.833575][T21675] ? netlink_deliver_tap+0x2e/0x1b0 [ 403.833598][T21675] ? lock_release+0x4b/0x3e0 [ 403.833625][T21675] netlink_unicast+0x82c/0x9e0 [ 403.833650][T21675] ? __pfx_netlink_unicast+0x10/0x10 [ 403.833672][T21675] ? netlink_sendmsg+0x642/0xb30 [ 403.833693][T21675] ? skb_put+0x11b/0x210 [ 403.833711][T21675] netlink_sendmsg+0x805/0xb30 [ 403.833738][T21675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 403.833761][T21675] ? aa_sock_msg_perm+0xf1/0x1d0 [ 403.833778][T21675] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 403.833797][T21675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 403.833820][T21675] __sock_sendmsg+0x21c/0x270 [ 403.833842][T21675] ____sys_sendmsg+0x505/0x830 [ 403.833861][T21675] ? __pfx_____sys_sendmsg+0x10/0x10 [ 403.833883][T21675] ? import_iovec+0x74/0xa0 [ 403.833903][T21675] ___sys_sendmsg+0x21f/0x2a0 [ 403.833922][T21675] ? __pfx____sys_sendmsg+0x10/0x10 [ 403.833955][T21675] ? __fget_files+0x2a/0x420 [ 403.833979][T21675] ? __fget_files+0x3a0/0x420 [ 403.834006][T21675] __x64_sys_sendmsg+0x19b/0x260 [ 403.834025][T21675] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 403.834047][T21675] ? __pfx_ksys_write+0x10/0x10 [ 403.834066][T21675] ? rcu_is_watching+0x15/0xb0 [ 403.834086][T21675] ? rcu_is_watching+0x15/0xb0 [ 403.834103][T21675] do_syscall_64+0xfa/0x3b0 [ 403.834126][T21675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.834144][T21675] ? clear_bhb_loop+0x60/0xb0 [ 403.834164][T21675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.834179][T21675] RIP: 0033:0x7efdc578ebe9 [ 403.834194][T21675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.834214][T21675] RSP: 002b:00007efdc654b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 403.834234][T21675] RAX: ffffffffffffffda RBX: 00007efdc59b5fa0 RCX: 00007efdc578ebe9 [ 403.834247][T21675] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 403.834258][T21675] RBP: 00007efdc654b090 R08: 0000000000000000 R09: 0000000000000000 [ 403.834269][T21675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 403.834279][T21675] R13: 00007efdc59b6038 R14: 00007efdc59b5fa0 R15: 00007ffc5552b4d8 [ 403.834299][T21675] [ 404.218853][T21691] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 404.242337][T21693] netlink: 'syz.8.4718': attribute type 9 has an invalid length. [ 404.252945][T21693] netlink: 212260 bytes leftover after parsing attributes in process `syz.8.4718'. [ 404.300309][T21698] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4719'. [ 404.302341][T21700] netlink: 'syz.8.4721': attribute type 1 has an invalid length. [ 404.424834][T21697] netlink: 19 bytes leftover after parsing attributes in process `syz.5.4717'. [ 404.515619][T21714] syzkaller1: entered promiscuous mode [ 404.521130][T21714] syzkaller1: entered allmulticast mode [ 404.629749][T21723] netlink: 'syz.7.4730': attribute type 3 has an invalid length. [ 404.640735][T21712] FAULT_INJECTION: forcing a failure. [ 404.640735][T21712] name failslab, interval 1, probability 0, space 0, times 0 [ 404.657559][T21712] CPU: 1 UID: 0 PID: 21712 Comm: syz.5.4728 Not tainted syzkaller #0 PREEMPT(full) [ 404.657583][T21712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 404.657592][T21712] Call Trace: [ 404.657598][T21712] [ 404.657604][T21712] dump_stack_lvl+0x189/0x250 [ 404.657627][T21712] ? __pfx____ratelimit+0x10/0x10 [ 404.657648][T21712] ? __pfx_dump_stack_lvl+0x10/0x10 [ 404.657665][T21712] ? __pfx__printk+0x10/0x10 [ 404.657688][T21712] ? __pfx___might_resched+0x10/0x10 [ 404.657703][T21712] ? lock_acquire+0x5f/0x360 [ 404.657724][T21712] should_fail_ex+0x414/0x560 [ 404.657746][T21712] should_failslab+0xa8/0x100 [ 404.657767][T21712] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 404.657787][T21712] ? __pfx_nf_tables_abort+0x10/0x10 [ 404.657803][T21712] ? __alloc_skb+0x112/0x2d0 [ 404.657826][T21712] __alloc_skb+0x112/0x2d0 [ 404.657848][T21712] netlink_ack+0x146/0xa50 [ 404.657871][T21712] ? __kasan_kmalloc+0x93/0xb0 [ 404.657895][T21712] nfnetlink_rcv+0x2290/0x2520 [ 404.657929][T21712] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 404.657954][T21712] ? ref_tracker_free+0x63a/0x7d0 [ 404.657986][T21712] ? __netlink_deliver_tap+0x807/0x850 [ 404.658007][T21712] ? netlink_deliver_tap+0x2e/0x1b0 [ 404.658029][T21712] ? lock_release+0x4b/0x3e0 [ 404.658054][T21712] netlink_unicast+0x82c/0x9e0 [ 404.658090][T21712] ? __pfx_netlink_unicast+0x10/0x10 [ 404.658111][T21712] ? netlink_sendmsg+0x642/0xb30 [ 404.658133][T21712] ? skb_put+0x11b/0x210 [ 404.658149][T21712] netlink_sendmsg+0x805/0xb30 [ 404.658175][T21712] ? __pfx_netlink_sendmsg+0x10/0x10 [ 404.658199][T21712] ? aa_sock_msg_perm+0xf1/0x1d0 [ 404.658216][T21712] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 404.658233][T21712] ? __pfx_netlink_sendmsg+0x10/0x10 [ 404.658256][T21712] __sock_sendmsg+0x21c/0x270 [ 404.658277][T21712] ____sys_sendmsg+0x505/0x830 [ 404.658297][T21712] ? __pfx_____sys_sendmsg+0x10/0x10 [ 404.658318][T21712] ? import_iovec+0x74/0xa0 [ 404.658337][T21712] ___sys_sendmsg+0x21f/0x2a0 [ 404.658355][T21712] ? __pfx____sys_sendmsg+0x10/0x10 [ 404.658388][T21712] ? __fget_files+0x2a/0x420 [ 404.658411][T21712] ? __fget_files+0x3a0/0x420 [ 404.658438][T21712] __x64_sys_sendmsg+0x19b/0x260 [ 404.658457][T21712] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 404.658478][T21712] ? __pfx_ksys_write+0x10/0x10 [ 404.658498][T21712] ? rcu_is_watching+0x15/0xb0 [ 404.658517][T21712] ? rcu_is_watching+0x15/0xb0 [ 404.658534][T21712] do_syscall_64+0xfa/0x3b0 [ 404.658557][T21712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.658574][T21712] ? clear_bhb_loop+0x60/0xb0 [ 404.658593][T21712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.658609][T21712] RIP: 0033:0x7f06f518ebe9 [ 404.658625][T21712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.658640][T21712] RSP: 002b:00007f06f33f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 404.658659][T21712] RAX: ffffffffffffffda RBX: 00007f06f53b5fa0 RCX: 00007f06f518ebe9 [ 404.658672][T21712] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 404.658684][T21712] RBP: 00007f06f33f6090 R08: 0000000000000000 R09: 0000000000000000 [ 404.658695][T21712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 404.658705][T21712] R13: 00007f06f53b6038 R14: 00007f06f53b5fa0 R15: 00007ffd7b930488 [ 404.658726][T21712] [ 404.658905][T21723] netlink: 'syz.7.4730': attribute type 1 has an invalid length. [ 405.093690][T21735] batadv1: entered allmulticast mode [ 405.112290][T21740] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4733'. [ 405.244803][T21746] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4737'. [ 405.651577][T21789] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4751'. [ 405.882568][T21805] IPVS: set_ctl: invalid protocol: 1 172.30.1.6:20001 [ 405.966875][T21809] FAULT_INJECTION: forcing a failure. [ 405.966875][T21809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 405.981336][T21809] CPU: 1 UID: 0 PID: 21809 Comm: syz.1.4757 Not tainted syzkaller #0 PREEMPT(full) [ 405.981362][T21809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 405.981372][T21809] Call Trace: [ 405.981379][T21809] [ 405.981386][T21809] dump_stack_lvl+0x189/0x250 [ 405.981411][T21809] ? __pfx____ratelimit+0x10/0x10 [ 405.981434][T21809] ? __pfx_dump_stack_lvl+0x10/0x10 [ 405.981454][T21809] ? __pfx__printk+0x10/0x10 [ 405.981474][T21809] ? __might_fault+0xb0/0x130 [ 405.981499][T21809] ? rcu_is_watching+0x15/0xb0 [ 405.981518][T21809] should_fail_ex+0x414/0x560 [ 405.981542][T21809] _copy_from_user+0x2d/0xb0 [ 405.981562][T21809] kstrtouint_from_user+0xc4/0x170 [ 405.981586][T21809] ? __might_fault+0xb0/0x130 [ 405.981613][T21809] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 405.981641][T21809] ? vfs_write+0x211/0xb30 [ 405.981661][T21809] ? rcu_is_watching+0x15/0xb0 [ 405.981679][T21809] proc_fail_nth_write+0x88/0x200 [ 405.981698][T21809] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 405.981716][T21809] ? security_file_permission+0x75/0x290 [ 405.981738][T21809] ? preempt_count_add+0x91/0x1a0 [ 405.981762][T21809] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 405.981781][T21809] vfs_write+0x27b/0xb30 [ 405.981806][T21809] ? __pfx_vfs_write+0x10/0x10 [ 405.981831][T21809] ? __fget_files+0x3a0/0x420 [ 405.981853][T21809] ? __fget_files+0x2a/0x420 [ 405.981880][T21809] ksys_write+0x145/0x250 [ 405.981901][T21809] ? __pfx_ksys_write+0x10/0x10 [ 405.981921][T21809] ? rcu_is_watching+0x15/0xb0 [ 405.981939][T21809] ? rcu_is_watching+0x15/0xb0 [ 405.981956][T21809] do_syscall_64+0xfa/0x3b0 [ 405.981977][T21809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.981993][T21809] ? clear_bhb_loop+0x60/0xb0 [ 405.982012][T21809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.982028][T21809] RIP: 0033:0x7fab2838d69f [ 405.982041][T21809] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 405.982056][T21809] RSP: 002b:00007fab265f6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 405.982076][T21809] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fab2838d69f [ 405.982089][T21809] RDX: 0000000000000001 RSI: 00007fab265f60a0 RDI: 0000000000000004 [ 405.982100][T21809] RBP: 00007fab265f6090 R08: 0000000000000000 R09: 0000000000000000 [ 405.982111][T21809] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 405.982121][T21809] R13: 00007fab285b6038 R14: 00007fab285b5fa0 R15: 00007fffc70f13a8 [ 405.982142][T21809] [ 406.742268][T21786] vlan5: entered allmulticast mode [ 406.747795][T21786] mac80211_hwsim hwsim46 wlan0: entered allmulticast mode [ 407.491702][T21895] netlink: 'syz.7.4784': attribute type 4 has an invalid length. [ 407.513205][T21894] tipc: Started in network mode [ 407.523266][T21894] tipc: Node identity ac1414aa, cluster identity 4711 [ 407.530979][T21894] tipc: Enabling of bearer rejected, failed to enable media [ 407.551376][T21901] FAULT_INJECTION: forcing a failure. [ 407.551376][T21901] name failslab, interval 1, probability 0, space 0, times 0 [ 407.586764][T21901] CPU: 0 UID: 0 PID: 21901 Comm: syz.5.4786 Not tainted syzkaller #0 PREEMPT(full) [ 407.586788][T21901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 407.586799][T21901] Call Trace: [ 407.586805][T21901] [ 407.586813][T21901] dump_stack_lvl+0x189/0x250 [ 407.586837][T21901] ? __pfx____ratelimit+0x10/0x10 [ 407.586860][T21901] ? __pfx_dump_stack_lvl+0x10/0x10 [ 407.586879][T21901] ? __pfx__printk+0x10/0x10 [ 407.586903][T21901] ? fs_reclaim_acquire+0x7d/0x100 [ 407.586927][T21901] ? __pfx___might_resched+0x10/0x10 [ 407.586942][T21901] ? lock_acquire+0x5f/0x360 [ 407.586965][T21901] should_fail_ex+0x414/0x560 [ 407.586987][T21901] should_failslab+0xa8/0x100 [ 407.587009][T21901] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 407.587032][T21901] ? rcu_is_watching+0x15/0xb0 [ 407.587048][T21901] ? ethnl_default_set_doit+0x3d6/0x890 [ 407.587074][T21901] kmemdup_noprof+0x2b/0x70 [ 407.587092][T21901] ethnl_default_set_doit+0x3d6/0x890 [ 407.587112][T21901] genl_family_rcv_msg_doit+0x215/0x300 [ 407.587135][T21901] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 407.587159][T21901] ? bpf_lsm_capable+0x9/0x20 [ 407.587179][T21901] ? security_capable+0x7e/0x2e0 [ 407.587204][T21901] genl_rcv_msg+0x60e/0x790 [ 407.587224][T21901] ? __pfx_genl_rcv_msg+0x10/0x10 [ 407.587242][T21901] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 407.587260][T21901] ? __asan_memcpy+0x40/0x70 [ 407.587277][T21901] ? __pfx_ref_tracker_free+0x10/0x10 [ 407.587303][T21901] netlink_rcv_skb+0x208/0x470 [ 407.587325][T21901] ? __pfx_genl_rcv_msg+0x10/0x10 [ 407.587342][T21901] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 407.587366][T21901] ? lock_release+0x4b/0x3e0 [ 407.587391][T21901] ? down_read+0x1ad/0x2e0 [ 407.587407][T21901] genl_rcv+0x28/0x40 [ 407.587424][T21901] netlink_unicast+0x82c/0x9e0 [ 407.587449][T21901] ? __pfx_netlink_unicast+0x10/0x10 [ 407.587470][T21901] ? netlink_sendmsg+0x642/0xb30 [ 407.587492][T21901] ? skb_put+0x11b/0x210 [ 407.587509][T21901] netlink_sendmsg+0x805/0xb30 [ 407.587536][T21901] ? __pfx_netlink_sendmsg+0x10/0x10 [ 407.587561][T21901] ? aa_sock_msg_perm+0xf1/0x1d0 [ 407.587578][T21901] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 407.587594][T21901] ? __pfx_netlink_sendmsg+0x10/0x10 [ 407.587618][T21901] __sock_sendmsg+0x21c/0x270 [ 407.587640][T21901] ____sys_sendmsg+0x505/0x830 [ 407.587660][T21901] ? __pfx_____sys_sendmsg+0x10/0x10 [ 407.587681][T21901] ? import_iovec+0x74/0xa0 [ 407.587702][T21901] ___sys_sendmsg+0x21f/0x2a0 [ 407.587720][T21901] ? __pfx____sys_sendmsg+0x10/0x10 [ 407.587753][T21901] ? __fget_files+0x2a/0x420 [ 407.587776][T21901] ? __fget_files+0x3a0/0x420 [ 407.587807][T21901] __x64_sys_sendmsg+0x19b/0x260 [ 407.587825][T21901] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 407.587846][T21901] ? __pfx_ksys_write+0x10/0x10 [ 407.587866][T21901] ? rcu_is_watching+0x15/0xb0 [ 407.587885][T21901] ? rcu_is_watching+0x15/0xb0 [ 407.587903][T21901] do_syscall_64+0xfa/0x3b0 [ 407.587926][T21901] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.587943][T21901] ? clear_bhb_loop+0x60/0xb0 [ 407.587963][T21901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.587979][T21901] RIP: 0033:0x7f06f518ebe9 [ 407.587994][T21901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.588009][T21901] RSP: 002b:00007f06f33f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 407.588028][T21901] RAX: ffffffffffffffda RBX: 00007f06f53b5fa0 RCX: 00007f06f518ebe9 [ 407.588042][T21901] RDX: 0000000004000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 407.588054][T21901] RBP: 00007f06f33f6090 R08: 0000000000000000 R09: 0000000000000000 [ 407.588065][T21901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.588081][T21901] R13: 00007f06f53b6038 R14: 00007f06f53b5fa0 R15: 00007ffd7b930488 [ 407.588102][T21901] [ 408.249448][T21939] syz.8.4800: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 408.259366][T21942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 408.272026][T21939] CPU: 1 UID: 0 PID: 21939 Comm: syz.8.4800 Not tainted syzkaller #0 PREEMPT(full) [ 408.272054][T21939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 408.272066][T21939] Call Trace: [ 408.272072][T21939] [ 408.272080][T21939] dump_stack_lvl+0x189/0x250 [ 408.272108][T21939] ? __pfx_dump_stack_lvl+0x10/0x10 [ 408.272128][T21939] ? __pfx__printk+0x10/0x10 [ 408.272149][T21939] ? lock_release+0x4b/0x3e0 [ 408.272174][T21939] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 408.272195][T21939] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 408.272216][T21939] warn_alloc+0x214/0x310 [ 408.272240][T21939] ? stack_depot_save_flags+0x40/0x860 [ 408.272265][T21939] ? __pfx_warn_alloc+0x10/0x10 [ 408.272290][T21939] ? kasan_save_track+0x4f/0x80 [ 408.272311][T21939] ? xskq_create+0x56/0x170 [ 408.272332][T21939] ? xsk_init_queue+0xb0/0x110 [ 408.272352][T21939] ? xsk_setsockopt+0x4dc/0x8d0 [ 408.272370][T21939] ? do_sock_setsockopt+0x17c/0x1b0 [ 408.272387][T21939] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 408.272402][T21939] ? do_syscall_64+0xfa/0x3b0 [ 408.272426][T21939] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.272447][T21939] __vmalloc_node_range_noprof+0x125/0x12f0 [ 408.272488][T21939] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 408.272512][T21939] ? xskq_create+0x56/0x170 [ 408.272534][T21939] ? __kasan_kmalloc+0x93/0xb0 [ 408.272558][T21939] vmalloc_user_noprof+0xad/0xf0 [ 408.272582][T21939] ? xskq_create+0xbf/0x170 [ 408.272604][T21939] xskq_create+0xbf/0x170 [ 408.272627][T21939] xsk_init_queue+0xb0/0x110 [ 408.272649][T21939] xsk_setsockopt+0x4dc/0x8d0 [ 408.272670][T21939] ? __pfx_xsk_setsockopt+0x10/0x10 [ 408.272690][T21939] ? __pfx_aa_sk_perm+0x10/0x10 [ 408.272713][T21939] ? lock_release+0x4b/0x3e0 [ 408.272736][T21939] ? aa_sock_opt_perm+0xff/0x1b0 [ 408.272753][T21939] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 408.272771][T21939] ? __pfx_xsk_setsockopt+0x10/0x10 [ 408.272800][T21939] do_sock_setsockopt+0x17c/0x1b0 [ 408.272819][T21939] __x64_sys_setsockopt+0x13f/0x1b0 [ 408.272839][T21939] do_syscall_64+0xfa/0x3b0 [ 408.272864][T21939] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.272880][T21939] ? clear_bhb_loop+0x60/0xb0 [ 408.272900][T21939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.272917][T21939] RIP: 0033:0x7efdc578ebe9 [ 408.272933][T21939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.272949][T21939] RSP: 002b:00007efdc654b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 408.272968][T21939] RAX: ffffffffffffffda RBX: 00007efdc59b5fa0 RCX: 00007efdc578ebe9 [ 408.272981][T21939] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 408.272993][T21939] RBP: 00007efdc5811e19 R08: 0000000000000004 R09: 0000000000000000 [ 408.273005][T21939] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 408.273016][T21939] R13: 00007efdc59b6038 R14: 00007efdc59b5fa0 R15: 00007ffc5552b4d8 [ 408.273037][T21939] [ 408.273111][T21939] Mem-Info: [ 408.336952][T21942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 408.348285][T21939] active_anon:8864 inactive_anon:0 isolated_anon:0 [ 408.348285][T21939] active_file:3467 inactive_file:39986 isolated_file:0 [ 408.348285][T21939] unevictable:768 dirty:32 writeback:0 [ 408.348285][T21939] slab_reclaimable:13824 slab_unreclaimable:147352 [ 408.348285][T21939] mapped:29203 shmem:1367 pagetables:1010 [ 408.348285][T21939] sec_pagetables:0 bounce:0 [ 408.348285][T21939] kernel_misc_reclaimable:0 [ 408.348285][T21939] free:1261006 free_pcp:17513 free_cma:0 [ 408.439824][T21942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 408.441673][T21939] Node 0 active_anon:35556kB inactive_anon:0kB active_file:13868kB inactive_file:159740kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116812kB dirty:124kB writeback:0kB shmem:3932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15604kB pagetables:3808kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 408.691244][T21939] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 408.722962][T21939] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 408.754016][T21939] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 408.760586][T21939] Node 0 DMA32 free:1133408kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35304kB inactive_anon:0kB active_file:13868kB inactive_file:158176kB unevictable:1536kB writepending:120kB present:3129332kB managed:2557460kB mlocked:0kB bounce:0kB free_pcp:54572kB local_pcp:26496kB free_cma:0kB [ 408.803248][T21939] lowmem_reserve[]: 0 0 1 1 1 [ 408.820250][T21939] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1564kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 408.855509][T21939] lowmem_reserve[]: 0 0 0 0 0 [ 408.864036][T21939] Node 1 Normal free:3895244kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16216kB local_pcp:9976kB free_cma:0kB [ 408.896255][T21939] lowmem_reserve[]: 0 0 0 0 0 [ 408.901029][T21939] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 408.917711][T21939] Node 0 DMA32: 427*4kB (UM) 377*8kB (UM) 64*16kB (UME) 59*32kB (UME) 28*64kB (UM) 386*128kB (UME) 259*256kB (UM) 69*512kB (UM) 27*1024kB (UM) 7*2048kB (U) 228*4096kB (UM) = 1136340kB [ 408.958787][T21939] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 408.986649][T21939] Node 1 Normal: 207*4kB (UME) 60*8kB (UME) 45*16kB (UME) 129*32kB (UME) 47*64kB (UME) 8*128kB (UME) 6*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (E) 947*4096kB (M) = 3895244kB [ 409.031347][T21939] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 409.074511][T21939] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 409.083936][T21939] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 409.127322][T21939] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 409.147906][T21939] 47717 total pagecache pages [ 409.152636][T21939] 0 pages in swap cache [ 409.185233][T21939] Free swap = 124996kB [ 409.189431][T21939] Total swap = 124996kB [ 409.193588][T21939] 2097051 pages RAM [ 409.203691][T21967] __nla_validate_parse: 9 callbacks suppressed [ 409.203708][T21967] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4808'. [ 409.224801][T21939] 0 pages HighMem/MovableOnly [ 409.232649][T21939] 425660 pages reserved [ 409.256664][T21939] 0 pages cma reserved [ 409.460497][T21988] netlink: 'syz.6.4812': attribute type 10 has an invalid length. [ 409.509514][T21990] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4810'. [ 409.509793][T21986] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.539096][T21990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 409.606288][T21990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.650606][T21996] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4815'. [ 409.675641][T21996] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4815'. [ 409.958269][T22035] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4823'. [ 409.980361][T22037] netlink: 'syz.1.4827': attribute type 1 has an invalid length. [ 409.990424][T22037] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.085401][T22045] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4828'. [ 410.337369][T22054] 0ªî{X¹¦: left allmulticast mode [ 410.358571][T22054] ------------[ cut here ]------------ [ 410.364066][T22054] WARNING: CPU: 0 PID: 22054 at net/ipv6/route.c:4857 rt6_multipath_rebalance+0x455/0x8b0 [ 410.374003][T22054] Modules linked in: [ 410.377945][T22054] CPU: 0 UID: 0 PID: 22054 Comm: syz.7.4832 Not tainted syzkaller #0 PREEMPT(full) [ 410.387353][T22054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 410.397446][T22054] RIP: 0010:rt6_multipath_rebalance+0x455/0x8b0 [ 410.403709][T22054] Code: ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 85 fe ff ff 4c 89 e7 e8 3d 62 f2 f7 e9 78 fe ff ff e8 73 f9 8e f7 eb 05 e8 6c f9 8e f7 90 <0f> 0b 90 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 45 c9 4b 01 [ 410.423355][T22054] RSP: 0018:ffffc9000bdd6620 EFLAGS: 00010246 [ 410.429462][T22054] RAX: ffffffff8a30b1bd RBX: dffffc0000000000 RCX: 0000000000080000 [ 410.437466][T22054] RDX: ffffc900129b9000 RSI: 000000000007ffff RDI: 0000000000080000 [ 410.445461][T22054] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 410.453440][T22054] R10: dffffc0000000000 R11: fffff520017bacbc R12: ffff8880563a0cde [ 410.461426][T22054] R13: ffff888056a8a090 R14: 0000000000000000 R15: 1ffff1100ad51412 [ 410.469418][T22054] FS: 00007f068e1f66c0(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 410.478383][T22054] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 410.484998][T22054] CR2: 00007f068e1f5f98 CR3: 0000000057d60000 CR4: 00000000003526f0 [ 410.492988][T22054] Call Trace: [ 410.496291][T22054] [ 410.499227][T22054] fib6_ifup+0x14a/0x180 [ 410.503499][T22054] ? __pfx_fib6_ifup+0x10/0x10 [ 410.508284][T22054] fib6_clean_node+0x24d/0x590 [ 410.513050][T22054] ? __pfx_fib6_clean_node+0x10/0x10 [ 410.518375][T22054] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 410.524285][T22054] ? rcu_is_watching+0x15/0xb0 [ 410.529060][T22054] fib6_walk_continue+0x678/0x910 [ 410.534100][T22054] fib6_walk+0x149/0x290 [ 410.538387][T22054] __fib6_clean_all+0x234/0x380 [ 410.543257][T22054] ? __fib6_clean_all+0x9b/0x380 [ 410.548231][T22054] ? __pfx_fib6_ifup+0x10/0x10 [ 410.552994][T22054] ? __pfx___fib6_clean_all+0x10/0x10 [ 410.558456][T22054] ? __pfx_fib6_clean_node+0x10/0x10 [ 410.563777][T22054] ? __pfx_fib6_ifup+0x10/0x10 [ 410.568561][T22054] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 410.574214][T22054] rt6_sync_up+0x128/0x160 [ 410.578638][T22054] ? __pfx_rt6_sync_up+0x10/0x10 [ 410.583566][T22054] ? ipv6_mc_up+0x3da/0x580 [ 410.588091][T22054] addrconf_notify+0xd55/0x1010 [ 410.592955][T22054] notifier_call_chain+0x1b3/0x3e0 [ 410.598071][T22054] netif_state_change+0x284/0x3a0 [ 410.603116][T22054] ? __pfx_netif_state_change+0x10/0x10 [ 410.608670][T22054] ? lock_release+0x4b/0x3e0 [ 410.613247][T22054] ? rtnl_af_lookup+0x49/0x2b0 [ 410.618021][T22054] do_setlink+0x35de/0x41c0 [ 410.622541][T22054] ? do_setlink+0x2c21/0x41c0 [ 410.627244][T22054] ? arch_stack_walk+0xfc/0x150 [ 410.632085][T22054] ? __pfx_do_setlink+0x10/0x10 [ 410.636944][T22054] ? stack_trace_save+0x9c/0xe0 [ 410.641797][T22054] ? __mutex_trylock_common+0x153/0x260 [ 410.647368][T22054] ? __pfx___mutex_trylock_common+0x10/0x10 [ 410.653268][T22054] ? rcu_is_watching+0x15/0xb0 [ 410.658047][T22054] ? trace_contention_end+0x39/0x120 [ 410.663343][T22054] ? __mutex_lock+0x335/0x1350 [ 410.668138][T22054] ? rtnl_newlink+0x8db/0x1c70 [ 410.672911][T22054] ? __pfx___mutex_lock+0x10/0x10 [ 410.677968][T22054] ? ns_capable+0x8a/0xf0 [ 410.682299][T22054] ? rtnl_link_get_net_capable+0x16a/0x350 [ 410.688111][T22054] rtnl_newlink+0x149f/0x1c70 [ 410.692864][T22054] ? netlink_sendmsg+0x805/0xb30 [ 410.697835][T22054] ? __pfx_rtnl_newlink+0x10/0x10 [ 410.702873][T22054] ? rcu_is_watching+0x15/0xb0 [ 410.707651][T22054] ? nlmon_xmit+0xb0/0x100 [ 410.712053][T22054] ? kmem_cache_free+0x18f/0x400 [ 410.717003][T22054] ? rcu_is_watching+0x15/0xb0 [ 410.721758][T22054] ? __dev_queue_xmit+0x27b/0x3b50 [ 410.726910][T22054] ? __local_bh_enable_ip+0x12d/0x1c0 [ 410.732285][T22054] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 410.738014][T22054] ? __dev_queue_xmit+0x27b/0x3b50 [ 410.743144][T22054] ? lock_release+0x4b/0x3e0 [ 410.747747][T22054] ? __dev_queue_xmit+0x27b/0x3b50 [ 410.752857][T22054] ? __dev_queue_xmit+0x27b/0x3b50 [ 410.757978][T22054] ? __dev_queue_xmit+0x1d79/0x3b50 [ 410.763172][T22054] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 410.768297][T22054] ? rcu_is_watching+0x15/0xb0 [ 410.773050][T22054] ? lock_release+0x4b/0x3e0 [ 410.777648][T22054] ? bpf_lsm_capable+0x9/0x20 [ 410.782314][T22054] ? security_capable+0x7e/0x2e0 [ 410.787278][T22054] ? __pfx_rtnl_newlink+0x10/0x10 [ 410.792320][T22054] rtnetlink_rcv_msg+0x7cc/0xb70 [ 410.797303][T22054] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 410.802426][T22054] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 410.807926][T22054] ? ref_tracker_free+0x63a/0x7d0 [ 410.812962][T22054] ? __asan_memcpy+0x40/0x70 [ 410.817564][T22054] ? __pfx_ref_tracker_free+0x10/0x10 [ 410.822930][T22054] netlink_rcv_skb+0x208/0x470 [ 410.827705][T22054] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 410.833161][T22054] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 410.838461][T22054] netlink_unicast+0x82c/0x9e0 [ 410.843231][T22054] ? __pfx_netlink_unicast+0x10/0x10 [ 410.848529][T22054] ? netlink_sendmsg+0x642/0xb30 [ 410.853476][T22054] ? skb_put+0x11b/0x210 [ 410.857723][T22054] netlink_sendmsg+0x805/0xb30 [ 410.862489][T22054] ? __pfx_netlink_sendmsg+0x10/0x10 [ 410.867810][T22054] ? aa_sock_msg_perm+0xf1/0x1d0 [ 410.872734][T22054] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 410.878033][T22054] ? __pfx_netlink_sendmsg+0x10/0x10 [ 410.883308][T22054] __sock_sendmsg+0x21c/0x270 [ 410.888022][T22054] ____sys_sendmsg+0x505/0x830 [ 410.892796][T22054] ? __pfx_____sys_sendmsg+0x10/0x10 [ 410.898087][T22054] ? import_iovec+0x74/0xa0 [ 410.902578][T22054] ___sys_sendmsg+0x21f/0x2a0 [ 410.907303][T22054] ? __pfx____sys_sendmsg+0x10/0x10 [ 410.912502][T22054] ? futex_wake+0x4b2/0x560 [ 410.917041][T22054] ? __fget_files+0x2a/0x420 [ 410.921638][T22054] ? __fget_files+0x3a0/0x420 [ 410.926341][T22054] __x64_sys_sendmsg+0x19b/0x260 [ 410.931289][T22054] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 410.936758][T22054] ? rcu_is_watching+0x15/0xb0 [ 410.941509][T22054] ? rcu_is_watching+0x15/0xb0 [ 410.946287][T22054] do_syscall_64+0xfa/0x3b0 [ 410.950799][T22054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.956865][T22054] ? clear_bhb_loop+0x60/0xb0 [ 410.961539][T22054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.967456][T22054] RIP: 0033:0x7f068ff8ebe9 [ 410.971856][T22054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.991469][T22054] RSP: 002b:00007f068e1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 410.999892][T22054] RAX: ffffffffffffffda RBX: 00007f06901b6180 RCX: 00007f068ff8ebe9 [ 411.007873][T22054] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006 [ 411.015848][T22054] RBP: 00007f0690011e19 R08: 0000000000000000 R09: 0000000000000000 [ 411.023807][T22054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.031816][T22054] R13: 00007f06901b6218 R14: 00007f06901b6180 R15: 00007ffdc4072818 [ 411.039831][T22054] [ 411.042858][T22054] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 411.050131][T22054] CPU: 0 UID: 0 PID: 22054 Comm: syz.7.4832 Not tainted syzkaller #0 PREEMPT(full) [ 411.059488][T22054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 411.069534][T22054] Call Trace: [ 411.072802][T22054] [ 411.075719][T22054] dump_stack_lvl+0x99/0x250 [ 411.080307][T22054] ? __asan_memcpy+0x40/0x70 [ 411.084884][T22054] ? __pfx_dump_stack_lvl+0x10/0x10 [ 411.090078][T22054] ? __pfx__printk+0x10/0x10 [ 411.094670][T22054] vpanic+0x281/0x750 [ 411.098645][T22054] ? __pfx__printk+0x10/0x10 [ 411.103221][T22054] ? __pfx_vpanic+0x10/0x10 [ 411.107707][T22054] ? is_bpf_text_address+0x26/0x2b0 [ 411.112898][T22054] panic+0xb9/0xc0 [ 411.116609][T22054] ? __pfx_panic+0x10/0x10 [ 411.121018][T22054] __warn+0x31b/0x4b0 [ 411.124985][T22054] ? rt6_multipath_rebalance+0x455/0x8b0 [ 411.130609][T22054] ? rt6_multipath_rebalance+0x455/0x8b0 [ 411.136230][T22054] report_bug+0x2be/0x4f0 [ 411.140548][T22054] ? rt6_multipath_rebalance+0x455/0x8b0 [ 411.146167][T22054] ? rt6_multipath_rebalance+0x455/0x8b0 [ 411.151789][T22054] ? rt6_multipath_rebalance+0x457/0x8b0 [ 411.157413][T22054] handle_bug+0x84/0x160 [ 411.161647][T22054] exc_invalid_op+0x1a/0x50 [ 411.166138][T22054] asm_exc_invalid_op+0x1a/0x20 [ 411.170977][T22054] RIP: 0010:rt6_multipath_rebalance+0x455/0x8b0 [ 411.177212][T22054] Code: ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 85 fe ff ff 4c 89 e7 e8 3d 62 f2 f7 e9 78 fe ff ff e8 73 f9 8e f7 eb 05 e8 6c f9 8e f7 90 <0f> 0b 90 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 45 c9 4b 01 [ 411.196810][T22054] RSP: 0018:ffffc9000bdd6620 EFLAGS: 00010246 [ 411.202869][T22054] RAX: ffffffff8a30b1bd RBX: dffffc0000000000 RCX: 0000000000080000 [ 411.210827][T22054] RDX: ffffc900129b9000 RSI: 000000000007ffff RDI: 0000000000080000 [ 411.218786][T22054] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 411.226751][T22054] R10: dffffc0000000000 R11: fffff520017bacbc R12: ffff8880563a0cde [ 411.234712][T22054] R13: ffff888056a8a090 R14: 0000000000000000 R15: 1ffff1100ad51412 [ 411.242691][T22054] ? rt6_multipath_rebalance+0x44d/0x8b0 [ 411.248328][T22054] fib6_ifup+0x14a/0x180 [ 411.252564][T22054] ? __pfx_fib6_ifup+0x10/0x10 [ 411.257320][T22054] fib6_clean_node+0x24d/0x590 [ 411.262078][T22054] ? __pfx_fib6_clean_node+0x10/0x10 [ 411.267355][T22054] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 411.273241][T22054] ? rcu_is_watching+0x15/0xb0 [ 411.278000][T22054] fib6_walk_continue+0x678/0x910 [ 411.283025][T22054] fib6_walk+0x149/0x290 [ 411.287256][T22054] __fib6_clean_all+0x234/0x380 [ 411.292097][T22054] ? __fib6_clean_all+0x9b/0x380 [ 411.297035][T22054] ? __pfx_fib6_ifup+0x10/0x10 [ 411.301794][T22054] ? __pfx___fib6_clean_all+0x10/0x10 [ 411.307157][T22054] ? __pfx_fib6_clean_node+0x10/0x10 [ 411.312434][T22054] ? __pfx_fib6_ifup+0x10/0x10 [ 411.317188][T22054] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 411.322819][T22054] rt6_sync_up+0x128/0x160 [ 411.327231][T22054] ? __pfx_rt6_sync_up+0x10/0x10 [ 411.332161][T22054] ? ipv6_mc_up+0x3da/0x580 [ 411.336659][T22054] addrconf_notify+0xd55/0x1010 [ 411.341502][T22054] notifier_call_chain+0x1b3/0x3e0 [ 411.346609][T22054] netif_state_change+0x284/0x3a0 [ 411.351628][T22054] ? __pfx_netif_state_change+0x10/0x10 [ 411.357170][T22054] ? lock_release+0x4b/0x3e0 [ 411.361754][T22054] ? rtnl_af_lookup+0x49/0x2b0 [ 411.366516][T22054] do_setlink+0x35de/0x41c0 [ 411.371012][T22054] ? do_setlink+0x2c21/0x41c0 [ 411.375682][T22054] ? arch_stack_walk+0xfc/0x150 [ 411.380539][T22054] ? __pfx_do_setlink+0x10/0x10 [ 411.385468][T22054] ? stack_trace_save+0x9c/0xe0 [ 411.390320][T22054] ? __mutex_trylock_common+0x153/0x260 [ 411.395874][T22054] ? __pfx___mutex_trylock_common+0x10/0x10 [ 411.401770][T22054] ? rcu_is_watching+0x15/0xb0 [ 411.406538][T22054] ? trace_contention_end+0x39/0x120 [ 411.411817][T22054] ? __mutex_lock+0x335/0x1350 [ 411.416577][T22054] ? rtnl_newlink+0x8db/0x1c70 [ 411.421337][T22054] ? __pfx___mutex_lock+0x10/0x10 [ 411.426356][T22054] ? ns_capable+0x8a/0xf0 [ 411.430677][T22054] ? rtnl_link_get_net_capable+0x16a/0x350 [ 411.436473][T22054] rtnl_newlink+0x149f/0x1c70 [ 411.441146][T22054] ? netlink_sendmsg+0x805/0xb30 [ 411.446081][T22054] ? __pfx_rtnl_newlink+0x10/0x10 [ 411.451107][T22054] ? rcu_is_watching+0x15/0xb0 [ 411.455865][T22054] ? nlmon_xmit+0xb0/0x100 [ 411.460268][T22054] ? kmem_cache_free+0x18f/0x400 [ 411.465199][T22054] ? rcu_is_watching+0x15/0xb0 [ 411.469948][T22054] ? __dev_queue_xmit+0x27b/0x3b50 [ 411.475053][T22054] ? __local_bh_enable_ip+0x12d/0x1c0 [ 411.480424][T22054] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 411.486129][T22054] ? __dev_queue_xmit+0x27b/0x3b50 [ 411.491227][T22054] ? lock_release+0x4b/0x3e0 [ 411.495808][T22054] ? __dev_queue_xmit+0x27b/0x3b50 [ 411.500934][T22054] ? __dev_queue_xmit+0x27b/0x3b50 [ 411.506032][T22054] ? __dev_queue_xmit+0x1d79/0x3b50 [ 411.511223][T22054] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 411.516328][T22054] ? rcu_is_watching+0x15/0xb0 [ 411.521089][T22054] ? lock_release+0x4b/0x3e0 [ 411.525686][T22054] ? bpf_lsm_capable+0x9/0x20 [ 411.530630][T22054] ? security_capable+0x7e/0x2e0 [ 411.535582][T22054] ? __pfx_rtnl_newlink+0x10/0x10 [ 411.540615][T22054] rtnetlink_rcv_msg+0x7cc/0xb70 [ 411.545562][T22054] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 411.550673][T22054] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 411.556127][T22054] ? ref_tracker_free+0x63a/0x7d0 [ 411.561149][T22054] ? __asan_memcpy+0x40/0x70 [ 411.565733][T22054] ? __pfx_ref_tracker_free+0x10/0x10 [ 411.571099][T22054] netlink_rcv_skb+0x208/0x470 [ 411.575861][T22054] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 411.581317][T22054] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 411.586630][T22054] netlink_unicast+0x82c/0x9e0 [ 411.591403][T22054] ? __pfx_netlink_unicast+0x10/0x10 [ 411.596698][T22054] ? netlink_sendmsg+0x642/0xb30 [ 411.601673][T22054] ? skb_put+0x11b/0x210 [ 411.605905][T22054] netlink_sendmsg+0x805/0xb30 [ 411.610669][T22054] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.615949][T22054] ? aa_sock_msg_perm+0xf1/0x1d0 [ 411.620885][T22054] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 411.626172][T22054] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.631468][T22054] __sock_sendmsg+0x21c/0x270 [ 411.636143][T22054] ____sys_sendmsg+0x505/0x830 [ 411.640902][T22054] ? __pfx_____sys_sendmsg+0x10/0x10 [ 411.646181][T22054] ? import_iovec+0x74/0xa0 [ 411.650674][T22054] ___sys_sendmsg+0x21f/0x2a0 [ 411.655342][T22054] ? __pfx____sys_sendmsg+0x10/0x10 [ 411.660528][T22054] ? futex_wake+0x4b2/0x560 [ 411.665030][T22054] ? __fget_files+0x2a/0x420 [ 411.669611][T22054] ? __fget_files+0x3a0/0x420 [ 411.674287][T22054] __x64_sys_sendmsg+0x19b/0x260 [ 411.679223][T22054] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 411.684690][T22054] ? rcu_is_watching+0x15/0xb0 [ 411.689455][T22054] ? rcu_is_watching+0x15/0xb0 [ 411.694217][T22054] do_syscall_64+0xfa/0x3b0 [ 411.698726][T22054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.704778][T22054] ? clear_bhb_loop+0x60/0xb0 [ 411.709444][T22054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.715323][T22054] RIP: 0033:0x7f068ff8ebe9 [ 411.719723][T22054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.739315][T22054] RSP: 002b:00007f068e1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 411.747724][T22054] RAX: ffffffffffffffda RBX: 00007f06901b6180 RCX: 00007f068ff8ebe9 [ 411.755689][T22054] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006 [ 411.763651][T22054] RBP: 00007f0690011e19 R08: 0000000000000000 R09: 0000000000000000 [ 411.771625][T22054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.779586][T22054] R13: 00007f06901b6218 R14: 00007f06901b6180 R15: 00007ffdc4072818 [ 411.787564][T22054] [ 411.790840][T22054] Kernel Offset: disabled [ 411.795158][T22054] Rebooting in 86400 seconds..