last executing test programs: 3.923255426s ago: executing program 0 (id=1090): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14}}, 0x58}}, 0x0) unshare(0x22020400) unshare(0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000, @void, @value}, 0x94) pwrite64(r2, 0x0, 0x0, 0x1) 3.745994322s ago: executing program 0 (id=1094): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x8, 0x6, 0x5d0, 0x0, 0x370, 0x270, 0xd0, 0x488, 0x5a8, 0x5a8, 0x5a8, 0x270, 0x5a8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@dev, @private2, [], [], 'pimreg0\x00', 'nicvf0\x00'}, 0x0, 0x178, 0x1a0, 0x0, {0x5002}, [@common=@unspec=@physdev={{0x68}, {'ipvlan0\x00', {}, 'netpci0\x00', {}, 0x0, 0x15}}, @common=@unspec=@physdev={{0x68}, {'veth1_to_bridge\x00', {}, 'gretap0\x00', {}, 0x0, 0x10}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@local, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x630) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4) listen(r2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r2}, 0x20) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) unshare(0x62040200) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x9) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r4, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01002cbd7000ffdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r7, 0x6, 0x12, 0x0, &(0x7f00000000c0)) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000100)=0x1ff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000002e00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002120207b1a00fe00000000bfa10000000000000701000078ffffffb702000008000000b70300000000000085000000c700000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 3.298123809s ago: executing program 0 (id=1100): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@empty, @private, 0x0}, &(0x7f0000000040)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000001840)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x0}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x62, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@empty, @private}, &(0x7f0000000040)=0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000001840)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x0}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x62, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) (async) 3.092798556s ago: executing program 0 (id=1102): r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x3000, 0x0, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYRES64=r2], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x18, &(0x7f0000000000)=""/24, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000380), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x41, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r5}, 0x38) r6 = socket$kcm(0x2, 0x3, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet(r6, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast1}}}], 0x20}, 0x4008804) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) connect$inet6(r7, &(0x7f0000000340)={0xa, 0x0, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r7, 0x1) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000380), &(0x7f00000003c0)=0x8) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0x0, 0x4cf, 0x18}, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000d00)) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000600)="3282db78e0ea55c52d87bc2a166b9e46818f5faca0b3a411e056b7928ccacd30019d925e47ecd2f92675d1d8c795dd0ab0", 0x31}], 0x1}, 0x8400) sendmsg$inet(r6, &(0x7f0000000c00)={&(0x7f0000000540)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000280)="6e4602e2", 0x4}], 0x1}, 0x0) 2.579624584s ago: executing program 1 (id=1106): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x20, "4376bf8285f3599ec23f39ebd116dd06175c69becfbc1c9de06166171496c855"}}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r2, 0x8b22, &(0x7f0000000040)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000540)={0x0, 0xfffffef9, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4 \x00\x00', @ANYRES16=r4, @ANYBLOB="0100fffffffffbdbdf2525000000000001007063690000000200303030303a30303a31302e3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x20008080) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/11], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}, 0x1}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x80}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x40, 0x1}, 0x1}}, 0x10) bind$tipc(r8, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x10) bind$tipc(r6, 0x0, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) close(r9) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x64, &(0x7f0000000340)=[@in6={0xa, 0x4e22, 0x9, @private2, 0x2b}, @in6={0xa, 0x4e20, 0x101, @mcast2, 0x8b7}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, @in6={0xa, 0x4e20, 0xe7, @mcast2}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) 2.526886636s ago: executing program 2 (id=1107): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000400000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x3f}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r3}]}, 0x24}}, 0x0) socket$rxrpc(0x21, 0x2, 0xa) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000001080), 0x9) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000700)={0x6c8, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9624}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x77c9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6eca}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "10b6982f6ee6baf2c1cfdbafc90d165923ddc97de1a83e367a2cb84148"}}]}, @TIPC_NLA_NODE={0x1d8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_ID={0xf7, 0x3, "364124af1ce77609aac35a5be1c80a845f98a5a21191844d7e68598fa8c120c6afcc57d39d32f4343464ca36d66d8cb77c70460f1bbb84b937ad92e757e652e298ba675513ef16b22c011fdbae59fd5b531c7b8106882968b9becc15144d36648f37b7c5c601709eb235d8c4ed21551bd72a83a48087737252e80da0da65ccb1d7c1c82f0323b26144c6271b436d19115991361fcaf29fea595b1c79a731b18aec15c749718c68272a54a4d9e1c7f7688b8e2de20219238fdf56ed2aad23f150bd283d6b9b06000000f4fc949e9ef4f5427ebafdbd0bac83e326ba3990d25ff56937bb91994949ccb4f09f49134c14e53ea2c7"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_ID={0xbc, 0x3, "5db9f4602acb58771bcef4db25825ea046db7cd7edbc3cb6f927580f124a3351bed6488849686872b9d34f635717b08d682079ace4f769df2e6ed1b65d8b46cfd5e2fceacee1804ec6adbe6daeddc1151c3d1e41355c5200f2c26049653aed34237784a38689a2e699b7aadbb3e974f454daf105402bd7f2cf94f5fecaa62f37e17393e90a901cc36df3397d1b0577f94be09c6daf81fd57c69099bc346a5fe651450e7b60e63c02202b4098fcdf62fac7889a8484ecdeda"}]}, @TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ce}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe00000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x741df114}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "e062fb0b1e57c560923d996e52fe5a4df1303e06122da8d3665f6d2122"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MEDIA={0x160, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcbd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd72}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbcc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3a03}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x290}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfc2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x68483b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}, @TIPC_NLA_BEARER={0x15c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x101, @loopback, 0x10001}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x9c, @mcast2, 0x5}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xf5, @local, 0xa}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010100}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x31}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc591}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1203}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xed}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x95}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffc0}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff513d}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbbd2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}]}, 0x6c8}, 0x1, 0x0, 0x0, 0x10040001}, 0x20000004) r5 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a80)={0x8, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000084000000000000008a00000018420000bfff"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0xff7, &(0x7f0000002e00)=""/4087, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000f, @void, @value}, 0x94) getsockopt$bt_hci(r5, 0x84, 0x81, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002380)="1b0000001a007f029e741683c28f7b331d00"/27, 0x1b}], 0x1}, 0x0) 2.424951298s ago: executing program 1 (id=1108): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x360, 0xa, 0x148, 0x360, 0x60, 0x3f8, 0x2a8, 0x2a8, 0x3f8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x360, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x4, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x6, 0x3, 0x81, 'snmp_trap\x00', 'syz0\x00', {0x30f6a663}}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000600000008000100000000000c"], 0x28}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r7, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x34, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x18, 0x13, @l2={'ib', 0x3a, 'veth1_macvtap\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_buf(r10, 0x1, 0x37, 0x0, &(0x7f0000000180)) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r8], 0x24}}, 0xc884) 2.294628449s ago: executing program 2 (id=1111): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x25, 0x6) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000000c0)={0x0, @broadcast}, &(0x7f0000000280)=0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095", @ANYRESDEC=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000140)='sys_exit\x00', r5}, 0x18) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0)={0xffffffffffffffff, 0x6, 0x14}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x48) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) pipe(&(0x7f0000000100)) (async) splice(r2, 0x0, r1, 0x0, 0x25, 0x6) (async) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000000c0)={0x0, @broadcast}, &(0x7f0000000280)=0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095", @ANYRESDEC=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000140)='sys_exit\x00', r5}, 0x18) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0)={0xffffffffffffffff, 0x6, 0x14}, 0xc) (async) 2.091490274s ago: executing program 2 (id=1113): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x7fffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4090}, 0xc000) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x20020040) 2.076632126s ago: executing program 0 (id=1114): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e23, 0x7, @mcast1, 0xc4}, @in6={0xa, 0x4e21, 0x3ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, @in6={0xa, 0x4e20, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x15}, @in={0x2, 0x4e24, @rand_addr=0x640100fd}, @in={0x2, 0x4e24, @remote}], 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000080)={'mangle\x00', 0x4, "d1a2d6e7"}, &(0x7f0000000180)=0x2c) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8) 1.951851506s ago: executing program 0 (id=1116): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x104}}, 0x20008000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r2, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="376cd97cb39285495ddf4bd660c811b4dca74500799dac8f26884d6d4cc781a3b510574bd853ed8eae31de87a5", 0x2d}], 0x1}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) shutdown(r3, 0x1) r4 = socket$inet(0xa, 0x801, 0x84) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x891c) shutdown(0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)="b970f6aa2bfdc9d7afbfe5c81e0b9b00b49015199ee375d7bd1e9a044aead3faf4a0f39154893e76f7c07b1ef464add3dac1272dfb540106eff5d18585394f8978a2a6e597b9479e904e68cfe4474d047fbd2a138da70c600c760ce32fdd162b9866cd8b1d2908ea2599011aba31a4b1193250944e602609300cbbb8f2bd89acef5fd0471e96cd071c31f8", 0x8b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) shutdown(r4, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x4040850) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$kcm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x8, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x8000000000000000, 0x7fffffff}, 0x0, 0x0) recvmmsg(r3, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r9, 0x112, 0x4, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90324fc6004001c000a000200053582c137153e37000c0480fc0b10000300", 0x33fe0}], 0x1}, 0x0) 1.944269325s ago: executing program 3 (id=1117): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e00ff"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32, @ANYBLOB="0300000000000000280012800a00010076786c616e002b29aadb228aa3eda7d62676eb11177cb21433d2e0e50204d98c29ab3727ab934ef9210bb1b6e718e31ab9d8b1c459e420170f3cedd9fab56946f09caf4bc749119e6f34751ff3ef36fe9be48bcd8ddf1c9c84626cf9bad6b0d2cfb4e4f0527e38bc682c1581f898e8826b88940fad27bf741a22f1c00f5ebea841214a97862ad7b5b3512215cf8c"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.807865782s ago: executing program 4 (id=1118): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280)=0x3, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000300)={0x2, 0x4, 0x0, 0x2, 0x4, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0xfc}, 0xe) shutdown(r2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, 0x0, 0x0) sendmsg$tipc(r3, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000580)={r4, @in6={{0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}}, [0x7, 0x9, 0xfff, 0xfffffffffffffff8, 0x7800000000000000, 0x2, 0x8, 0x6, 0x6, 0x0, 0x8, 0x8000, 0xbe2c, 0x9, 0x5]}, &(0x7f00000004c0)=0x100) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) 1.759884428s ago: executing program 2 (id=1119): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40050) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x24008090}, 0x404c044) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES32=r6, @ANYRES8=r2, @ANYRESOCT], 0x3c}}, 0x400c4) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4000000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000010240000180012800e00010077697265677561726400000004000280", @ANYRES32=r8], 0x40}}, 0x4000) sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001300000829bd7000fcdbdf250603e0024e224e23fdffffffff00f0ab0000378d00000e000000b90700"/56, @ANYRES32=r8, @ANYBLOB="0400000008000000090000000800000004000100"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x8850) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) unshare(0xc000000) r9 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmmsg(r9, &(0x7f000000e340)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}, 0x80, 0x0, 0x0, &(0x7f00000079c0)=ANY=[@ANYBLOB="100000000071f4721a00000000000000"], 0x10}}], 0x1, 0x40084) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000600)={'broute\x00', 0x0, 0x0, 0x0, [0xf1, 0x8, 0x25f, 0x619347a6, 0x2000000005, 0x3]}, &(0x7f00000002c0)=0x78) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020000000300000005000006040000000a000000080000ee0c00000068360000100000000900000008000000690d000002000040000000000d00000000000007"], 0x0, 0x5a, 0x0, 0x1, 0x1, 0x10000, @value}, 0x28) socket$kcm(0x2, 0x1, 0x84) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00'}, 0x18) 1.746338736s ago: executing program 3 (id=1120): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaacce39067774286dd60d4bb4500283a00fe880000000000000000000000000001fe8000000000000000000000000000aa020090780000000000000000000000000000000000000000fc0100000000000000000000000000fdb67533f7d7da8f66e41679793184987b0290fd11f36c25c0a2e5262a27242f6d43d4c3bdcf1c58d1b0430165b7e85aa39e81c3fee32e97d8f58fa0e856a7e6ef77b27224beb3e96fa303ad4cef3b74c73a41cdc6985e38cbf22244c40a2a8443e1f5497549a17d972545d5f22ad38b3cd576a4d284e805a4656952ca4defd135f1cde95e29"], 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) unshare(0x22020600) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x3, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000240)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x71, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42, 0xffffffffffffffff, 0x175a0180, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000880), 0x1006, r4, 0x0, 0xd88d02a0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r3, &(0x7f0000000100), 0x0}, 0x20) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000380)=@req3={0x1000, 0x0, 0xbce1, 0x1, 0x6, 0xfd}, 0x1c) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3, 0x1c) setsockopt$packet_int(r5, 0x107, 0xc, &(0x7f0000001400)=0x3d70, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="080000004000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000ffffffff0000000000000000d70b00004000000095"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, r7, 0x711}, 0x14}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xd, 0x5, 0x4, 0x6, 0x40000, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffc, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) 1.572250681s ago: executing program 4 (id=1121): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000400000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x3f}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r3}]}, 0x24}}, 0x0) socket$rxrpc(0x21, 0x2, 0xa) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000001080), 0x9) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000700)={0x6c8, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9624}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x77c9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6eca}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "10b6982f6ee6baf2c1cfdbafc90d165923ddc97de1a83e367a2cb84148"}}]}, @TIPC_NLA_NODE={0x1d8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_ID={0xf7, 0x3, "364124af1ce77609aac35a5be1c80a845f98a5a21191844d7e68598fa8c120c6afcc57d39d32f4343464ca36d66d8cb77c70460f1bbb84b937ad92e757e652e298ba675513ef16b22c011fdbae59fd5b531c7b8106882968b9becc15144d36648f37b7c5c601709eb235d8c4ed21551bd72a83a48087737252e80da0da65ccb1d7c1c82f0323b26144c6271b436d19115991361fcaf29fea595b1c79a731b18aec15c749718c68272a54a4d9e1c7f7688b8e2de20219238fdf56ed2aad23f150bd283d6b9b06000000f4fc949e9ef4f5427ebafdbd0bac83e326ba3990d25ff56937bb91994949ccb4f09f49134c14e53ea2c7"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_ID={0xbc, 0x3, "5db9f4602acb58771bcef4db25825ea046db7cd7edbc3cb6f927580f124a3351bed6488849686872b9d34f635717b08d682079ace4f769df2e6ed1b65d8b46cfd5e2fceacee1804ec6adbe6daeddc1151c3d1e41355c5200f2c26049653aed34237784a38689a2e699b7aadbb3e974f454daf105402bd7f2cf94f5fecaa62f37e17393e90a901cc36df3397d1b0577f94be09c6daf81fd57c69099bc346a5fe651450e7b60e63c02202b4098fcdf62fac7889a8484ecdeda"}]}, @TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ce}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe00000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x741df114}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "e062fb0b1e57c560923d996e52fe5a4df1303e06122da8d3665f6d2122"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MEDIA={0x160, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcbd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd72}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbcc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3a03}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x290}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfc2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x68483b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}, @TIPC_NLA_BEARER={0x15c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x101, @loopback, 0x10001}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x9c, @mcast2, 0x5}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xf5, @local, 0xa}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010100}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x31}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc591}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1203}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xed}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x95}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffc0}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff513d}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbbd2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}]}, 0x6c8}, 0x1, 0x0, 0x0, 0x10040001}, 0x20000004) r5 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a80)={0x8, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000084000000000000008a00000018420000bfff"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0xff7, &(0x7f0000002e00)=""/4087, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000f, @void, @value}, 0x94) getsockopt$bt_hci(r5, 0x84, 0x81, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002380)="1b0000001a007f029e741683c28f7b331d00"/27, 0x1b}], 0x1}, 0x0) 1.383566443s ago: executing program 1 (id=1122): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x440400, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r4}, 0x10) r5 = socket$unix(0x1, 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r6}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000400)={'syz_tun\x00'}) r8 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xfff1, 0xfff2}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r11, &(0x7f00000bd000), 0x924924924924c31, 0x3ec0) readv(r10, &(0x7f00000005c0)=[{&(0x7f00000000c0)=""/175, 0xaf}], 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = socket$alg(0x26, 0x5, 0x0) bind$alg(r13, &(0x7f0000003880)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r14 = accept4(r13, 0x0, 0x0, 0x0) sendmmsg(r14, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000004c00)="35b78a259c3d306dedbc8d57d8c01078a4dd14fd58c260c512c386d87551f18513e8b66626c8ad409a8ab83313b561a46f857ff0f17f6e18f5f37fdc57fe91ae9be5e427bde7e705a5998fe6c7e81613c7750078aa39ca3950011baca521f3d9c9acf8e3bfbb0e5485f1bc4934f5ffd9ceef098f7ab6adae48f5a275c3d4c09f1ec3fddde01d2257b8e71ef4250198cf630763f021c0a9345d25adaead684f2b59664bad71b8d5ae00a0e83e9734ba65390dfadea91820fa32163f4e0aa80949755f0b337c6bfe47a71e0f7a8492f675381ab13b161f2169ea2cdceed60177b5", 0xe0}, {&(0x7f0000004d00)="2e8f01702f94fde65d9d351be63d69be781cfe819b9603e82489b6d996aef081a6bebc529e724ea6ab554b7e18cb1ba69474b3961c30efbeb8a09ee4f18d5d617507a03077e3f0121e347f63fa409968c94a5ae6d261fe17a4c123d2a5cbbf", 0x5f}, {&(0x7f00000002c0)="d4", 0x1}, {&(0x7f0000000380)="80", 0xf4240}], 0x4}}], 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000009, 0x4010, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x0, 0x8}, {}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) socket$inet6_udplite(0xa, 0x2, 0x88) 809.394531ms ago: executing program 3 (id=1123): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800001965ba917c62e1e6902300000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000240)={0x0, 0x0}, 0x20) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) write$cgroup_subtree(r2, &(0x7f0000000700)=ANY=[], 0xfe33) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={r0, 0x8, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700000000000000fa7f0000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000940), 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="ffff24bd7000fccbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c9}, 0x20000000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000425bd7000fcdbdf2501000000080003000000000049add057200e7d44a139632963c94edf6ca4b832c4b385bfe1e7118c20ff5c350e7fca184efa105e25b9029c904c2d3c88b9ae02ad3aab5c9f93db7b0f4c87c160bb32470d8b1980ef09c6fa562a3d42f1e5017d5d0927c22f34d174d310411bb0a08cb7bd2f9d84758037af5376e64a5625e1d2a26b4eac702c471a7d81d0512e30"], 0x1c}, 0x1, 0x0, 0x0, 0x8c0}, 0x44015) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r5}, 0x18) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$MRT6(r7, 0x29, 0xcf, 0x0, 0x0) listen(r4, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x64}}, 0x0) connect$vsock_stream(r8, &(0x7f0000000000), 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x8, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r10}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r12, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) 738.578528ms ago: executing program 4 (id=1124): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1300"], 0x10) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r2, 0x0) splice(r2, 0x0, r1, 0x0, 0x7ffff000, 0xa) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000060000000b25000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$kcm(0x29, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r6, &(0x7f0000000b40)=[{&(0x7f0000000580)=@in={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000880)=[{&(0x7f00000005c0)="f202cbe138", 0x5}, {0x0}, {0x0}], 0x3, &(0x7f0000000900)=[@init={0x18, 0x84, 0x0, {0x1ff, 0x2, 0x1ff, 0x891}}], 0x18, 0x20000810}], 0x1, 0x40081) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r5}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x10000005, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1300"], 0x10) (async) pipe(&(0x7f0000000380)) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) shutdown(r2, 0x0) (async) splice(r2, 0x0, r1, 0x0, 0x7ffff000, 0xa) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000060000000b25000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) socket$kcm(0x29, 0x0, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) sendmmsg$inet_sctp(r6, &(0x7f0000000b40)=[{&(0x7f0000000580)=@in={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000880)=[{&(0x7f00000005c0)="f202cbe138", 0x5}, {0x0}, {0x0}], 0x3, &(0x7f0000000900)=[@init={0x18, 0x84, 0x0, {0x1ff, 0x2, 0x1ff, 0x891}}], 0x18, 0x20000810}], 0x1, 0x40081) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r5}, 0xc) (async) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x10000005, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) (async) 695.904151ms ago: executing program 1 (id=1125): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c000a800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004"], 0xd4}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000002c0), r1) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x28}}, 0x24000000) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002bbd7000fedbdf250200000008000b00", @ANYRES32=0x0, @ANYBLOB="f5e658c29aa8444f4daafb2ee7edadcf9bed4bca5222ae1955ad773e618ae05196e690f647c55c0c66af9d559da2c3ebd9deee3aee433b7825c4610bf8894952b91f84754b1af014c8c20adf714ff2386f9af8b6e5fce68dfe0580"], 0x1c}, 0x1, 0x0, 0x0, 0x4044094}, 0x8000) r5 = socket(0x10, 0x3, 0x0) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) close(0x3) r7 = socket$packet(0x11, 0x2, 0x300) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r1) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r8, 0x4, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$AUDIT_TRIM(r5, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3f6, 0x300, 0x70bd2b, 0x25dfdbfb, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20014040}, 0x40010) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa0, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x44, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfc}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40080}, 0x4) 683.188983ms ago: executing program 3 (id=1126): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)="d8000000190081054e81f782db4cb9040a1d080006007c02e8fe55a10a0015000900142603600e1208000f4f1b000401a8001600200005400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) (async) bind$ax25(r2, &(0x7f0000000200)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null]}, 0x48) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200640000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000003800038034000080080003400000000228000b80180001800c000100636f756e746572"], 0xf8}}, 0x0) 512.748449ms ago: executing program 4 (id=1127): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept4(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000100)=0x80, 0x80800) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (rerun: 64) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r1, 0x0) (async, rerun: 64) r2 = socket$inet6(0xa, 0x5, 0x0) (rerun: 64) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private0}, @in={0x2, 0x0, @multicast2}, @in6={0xa, 0x0, 0xd7d9, @loopback}, @in={0x2, 0x4e21, @dev}], 0x58) (async, rerun: 32) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) (rerun: 32) 439.911986ms ago: executing program 3 (id=1128): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x840000000002, 0x3, 0xff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x10) socket$netlink(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x20000800) socketpair(0x1, 0x100000005, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010000000000fedbdfa3250000000800030001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002a00dbdf"], 0x1c}, 0x1, 0x3000000, 0x0, 0x800}, 0x8080) read(r6, &(0x7f0000000000)=""/170, 0xaa) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000240)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x20000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 431.312245ms ago: executing program 1 (id=1129): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="b702000002000000bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000081007d60b7030000000000006a0a00fefdff0000850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465c3a1f59916ffc9bf0bd09279c362f80e5cf8df265e1b40e4c8ae7a89cf8bd819b5c0c000000008da68076774bb4db2c769937000090af27db5b56024dcbbbd2cb2000ce94284673b4e8d5467e357754508535766c801100000000b290a248a120c9c6e39f3052aae80677eeba68562eaeaea5fecf298ca20f274233106e2baf69b1c60f0ce4099f366b89ab63ecf772de7b265040b6b1acbef92b2704550a4d1dd5c50b7420b58a93fe94c756008afcd0b2eb785632e0a85f02a5a6474ae549070000000000001294fba0ed5020e6477cc921fee1f6d8ad6a80d0947cd6d4a561ced23b0b4a902be6af7ec2d1ba000057f301000000000000000000000000100000aaf253886c0b9f6d4731d714ad72e5ad8530a6380ed2d29f47f96a576cd20cef7ed95157ab050000f0077e9d13d8b93eb0f2c6f8941e35e1577c10e509c9b133c849eb709df5c6ba73cccdfa3c58bc5204339b0b487f0eeed581cb202900000d322717c338033213c18a34ee0ca2cf61efb4b3797a642735d6d482ba98d252f36c54333aab1aa736369392239820f5f1557b0bf7ccb0a5a13c714e0b1a5bc3f9caff3283076cda3d0b1a2905cf7bd04f2db530abcbe44bc40528ad807970727fb819afa14aad99f93093ced7dd51995edcf53b907228fa9e83433eedb4ac88d0285594ffb0d14e71d5c57f33702f22b22417bfb38d04c8441ceec8bcaffbe800aa41307bd8325a76f395bc9a8b0c9d905979f34adddb521914f92eed3d3e9de82942a952e86bd67aff5bc2e3c1fcc00f61124dd06df4b8fd356cb365adc037e443820c05c5db160087a9cf471e0eff227f25b2c5cacebfcd55f8c81f5eb1f8d615ca27efb2193bb61665b8ce37f30c2efc9c3b5a4a5d95479fac471ba60fbd0e50223517a07a3484124c5563cd3700000000001825b05a580ea8cb7f85b77b35a06a895b287b47efbe220bc215aca4a65d7018a7f91c4228b35f71a7c183360ab7a7b6b7870086d851ff861ee07bbec801b79afa477ebab255c7265820456fdc3f34f9d729315d856be7ec564613d5e28cf7c405d6e2b6aeb20000b8505a36a8067cb459fab87c8de118117733d30f4fe049658a2c3edd43546ead9c7882858868cff89a49a693731140db1b7b7116060c30690a39de8b3e0eb4f5401e8354870848c546f9defe1a9c534c9030830fec3eeb5faf1d64bb8e80000000f6ff0000000000000055d843352632b829ceb5200a2cdeb63c0bc7e835e061f9ac3c052b5b6f689bf203aeb8858be07691bc83e178181fab55e6ed9e8a17819de49564d0f0c00dd507441b80cd499c39c5d03d6c00cf5be5215bae09a4f52abf8f1c1add498470a0bb9d7ab757a8b28e4accc939b3621e4c2c9e02741c51eeeaad40cf2e1c3659d83ed71fc628807739d70edda93542445e3204828c49bef648efdc2208341357dd158f411d379df9b1feffbe7c7ee80558a040fa3d5a303f36d5c1a66d9644fc0559aa0e291355ee3de6c7a705b8f7b45bb825044b9a82a6fd2f6eeb14eee0c3f71eeea9984e14c57022ef72850b6dc5fda167d6f98f6c1c73feb424b7937e3c7ca0d2525efbdac50eb94797cf3747b83b56cfea8c74dd3f957dc462e715b789934b422b7ddf3e11a6ad6ad9afd5389c728d14"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3f, 0x10, &(0x7f0000000000), 0x2ca, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xf, 0x304, &(0x7f0000000040)="b90703600000f007049e0ff065581fffffe10ec53308633a77fbac141441e0022001be3e7d2a2007ff", 0x0, 0x104, 0xa000000, 0x0, 0xfeb9, &(0x7f0000000640)="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", &(0x7f0000000100)}, 0x28) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000c01000300000000000900010073797a30000000000900020073797a32"], 0x80}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f00000001c0)={0x0, 'wlan0\x00', {0x4}, 0x7}) 337.368688ms ago: executing program 2 (id=1130): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000feffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000400)=r1, 0x4) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) (async) close(r3) r5 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r5, 0xd75) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000500), &(0x7f0000000300)=r3}, 0x20) (async) recvmsg(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x61) r6 = socket(0x1d, 0x2, 0x6) (async) r7 = epoll_create(0x9660) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000100)) (async) close(r6) (async) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d80000001a0081044e81f782db4cb904021d0800fe0055a1150015000200142603600e12080005007a010401a8001600200002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457fffffffffffff0001bace8017cbec4c2ee5a7cef4090000001fb79164d322fe7c9f8775d3f2d5d0683f5aeb4edbb57a5025ccca9e00360db785262f3d40fad95667e006dcdf61951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a94100"/216, 0xd8}], 0x1}, 0x0) 251.045426ms ago: executing program 1 (id=1131): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x9001}, 0x4000000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x5, 0x4, 0xadd, 0x5, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000300)=0xffffffff, 0x4) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/248, 0xf8}], 0x1}, 0x40011f01) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmmsg$sock(r5, &(0x7f000000bb40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001740)="ee5886e0b4a7667690f1667187f548b5dd806b642c598c818297305ef94826cf43347480c352a7687efd2b88142035c05e0b12bf21ce9c302aec3dad537125bf10c5d85c7af2cac9b92bb50a62c1497041f9745be39fc73b06ccc272be3d1570557eb0a831cf68944bf8d2efcbdf362cbe33092b0d78bcc9c3967b86525d47e16d8c3adda02b695bfa52f28142e759f8dbb33476c2edbb2707ee460329afe8275aca6bc1ec8ce9bd03ff0c188e2d8cb8f741800474df71d4c2a1e21a9b52b2c90a7162e2205546a2be56164b1f172a0dce32a1fd903726c08ea3dbe194aaefe465fac3a7", 0xe4}, {&(0x7f0000001840)="b792374b149f4cc5d3f155a0451609108f52206fe2441f23b1ba334d6c15b5268b4301fd805e21e7fc62f1acb0189c2786864f8af215c4c9327efb60965faa14092ae73bd93521b4c1b8cd70ef6991a33d69741e7c7e4b06e1ea98e0543698018f28ed13370d8e43fcecfbb0a1e909f6b4b2af1a3a832c56172abb1960a6f26447066f947d368188198761c4a9b7bbaa984b18f663e6dbeb1ed88fd32ceb88a6c743f303850988", 0xa7}, {&(0x7f0000001900)="814d61e8e52c537c9998f5b84a01cfef88daee9bfe1542b6953c6521e3453264f8dad438b05944c30d60e479cf5d55c288a89dec7b0dcbe43b723ef32926423c17", 0x41}, {&(0x7f00000000c0)="c17c8b83f132c039d41275cc024ca0411772c061cbf34e34f6", 0x19}, {&(0x7f0000000540)="cd50cb276d31843728fdd1b4d9443f0493685a902bbe47543901d67a4b9add80e5c48f94808ac3bb1cc7d7525bd861267c6051fcb1fd90752bd7515a6734563e983cdddef8a40af954c51dce6d3fbd7fcb5f0e9aa5c842969251fb6e9d2e468e84cbaeab607d071abc6e59b673315473db64494f7f86a51820a131cbe13498951f45ba3274e6de36ce8ec65d50cc4dfce288fc5f23289576a1", 0x99}], 0x5}}, {{0x0, 0x0, &(0x7f0000005500)=[{&(0x7f00000050c0)="ee0e4582ba0614e5e185ee74c1ededadbe569a96b62b925667d0a392fe8c900a119fd9c2b14e91ffa24b211a903afb6f6cdd3143f507ac024293e3923d3617e0667a5902cbfce554ef481af6057c861c627557da175c76b452bc68f081f551cc55e8c52440be9529dadcca04a4c0eabf833d9c45c8d01ee6bfaa0615590126e79a9665445056", 0x86}, {&(0x7f0000005180)="b04ec075ede0fd36f1f44707f67ac022dd7e9e53fc1fb4ad288f4155d572f2619b4ce51cd5cf0ad18e429dfd8fa80afb01f25064bc8b9f6790cf42dfa95b0c2eea70b4a435", 0x45}], 0x2}}, {{0x0, 0x0, &(0x7f00000059c0)=[{&(0x7f00000056c0)="0cf3bbc86c3be13e049b7726659813f6e5002a95fbc60ada3a271d39af8445e7698c90d154b32e68f7037786e3e0baab8b3bf51033206fbb9b82c171950e2f951149c90d88f07d59e2c3a34d1b51ce18c051ad19", 0x54}, {&(0x7f0000001500)="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", 0x1b3}, {&(0x7f0000005880)="1abec9916dfc6341f205af2ddeb54033c4a8c733e1a211363dd3e77850fbcf63c394c6c0cb0f4a0c0386e79590492085d40b0bac721875e27388dc2fbafcf190d69b5a71681be3cd08117460b878f3bb42734e0dd00564dcc8c51454fd01860221bb996caac887c1af262dcfaf527916db9feda28d", 0x75}, {0x0}], 0x4}}], 0x4, 0x4000011) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0x1, 0x4}, 0x6) r7 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r7, &(0x7f0000000b00)={0x2, 0x0, @remote}, 0x10) bind$inet(r7, &(0x7f0000000380)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) sendmmsg$inet(r7, &(0x7f0000008d00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001cc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfe8}}], 0x18}}], 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3d, &(0x7f0000000200), 0x8) 244.657182ms ago: executing program 4 (id=1132): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket(0x2, 0x80805, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_newvlan={0x18, 0x70, 0x201}, 0x18}}, 0x0) getsockopt$bt_hci(r2, 0x84, 0x70, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000540)={{{@in=@loopback, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x2f}, {0x0, 0x0, 0x4, 0x2, 0x0, 0x1, 0x0, 0x1}, {0xebf}}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x2}}, 0xe8) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = epoll_create(0x7ff) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000001000)={0x60000010}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x4040) 59.45837ms ago: executing program 2 (id=1133): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x780, 0x1d0, 0x5c8, 0x0, 0x5c8, 0x0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'ip6gretap0\x00', {}, {}, 0x2b}, 0x0, 0x1e0, 0x208, 0x7400, {}, [@common=@rt={{0x138}, {0x0, [0x0, 0x5], 0x0, 0x0, 0x0, [@dev, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private2, @private1, @dev, @dev={0xfe, 0x80, '\x00', 0x34}, @mcast2, @local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @loopback, @mcast1, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x81, 0x10, 0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x2}]}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7e0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES8=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r3}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000eb970c15d0bae06d4871e917617df56e69b9bf3fbf5fed601513e85a760b5c38bc0fb4c864bfefd6f8194959643f7fe95e4d363a09c9d3635ee3eb4c39d92c98bad86e7a7a1d4e79d70e5a24041e71d06d1e9362013d251df1caa78470f8aec3e901f5d3211c54f17a55b7320730f8a2025ddcd14be8655ff62cdb581fa46dfcb50e08286c4e3f08108e479c46ce2032c6c7f7b2", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async, rerun: 64) ppoll(0x0, 0x0, &(0x7f00000004c0)={0x77359400}, &(0x7f0000000500)={[0xfe9]}, 0x8) (async) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async) unshare(0x62040200) (async) socket$rxrpc(0x21, 0x2, 0xa) socket$kcm(0x2, 0x1000000000000002, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r0, 0x0, 0x0}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x404, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 32) r4 = socket(0x10, 0x2, 0x0) (rerun: 32) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, @mcast2, @mcast2={0xff, 0x3}, 0x0, 0x0, 0xfffffffe, 0xffffffff}}) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000800)={0x0, 0x4, 0x0, 0x9}, &(0x7f0000000840)=0x10) (rerun: 32) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000880)={r5, 0xffff}, &(0x7f00000008c0)=0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x9}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0xffed}, {0xf, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xe70, 0x6, 0x3, 0x7ca, 0x6960, 0xff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRES32=r1], 0x238}, 0x1, 0x0, 0x0, 0x4001}, 0x4040000) (async, rerun: 64) close(r6) (rerun: 64) 29.835444ms ago: executing program 3 (id=1134): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x4, @local, 0x4}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x4, @local, 0x4}, 0x1c) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x100}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x100}, 0x0) pselect6(0x40, &(0x7f0000000100)={0xfffffffffffffffb, 0x800000000000009, 0x404, 0x9, 0x0, 0xfffffffffffffffd, 0x200000000, 0x4}, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit, @alu={0x6, 0x1, 0xb, 0xa, 0xa, 0xffffffffffffffff}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit, @alu={0x6, 0x1, 0xb, 0xa, 0xa, 0xffffffffffffffff}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1f, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200005245855db7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000bf020000000000008500000084000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) (async) sendmsg$key(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r6 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x6b324fb906924663, 0x2, 0x1, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89b0, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x10, 0x7315, 0x1f121b94, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x10, 0x800, 0x0, 0x0, 0x4, 0x0, @broadcast, @private=0xfffffffd}}}}) socket$inet6(0xa, 0x2, 0x0) (async) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast1, @in6=@remote, 0x0, 0x57, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x2000000, 0x2}, {0x7, 0x0, 0x4}, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@remote, 0x0, 0x33}, 0x2, @in=@broadcast, 0x3507, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) syz_emit_ethernet(0x4e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 0s ago: executing program 4 (id=1135): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000400000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x3f}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r3}]}, 0x24}}, 0x0) socket$rxrpc(0x21, 0x2, 0xa) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000001080), 0x9) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000700)={0x6c8, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9624}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x77c9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6eca}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "10b6982f6ee6baf2c1cfdbafc90d165923ddc97de1a83e367a2cb84148"}}]}, @TIPC_NLA_NODE={0x1d8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_ID={0xf7, 0x3, "364124af1ce77609aac35a5be1c80a845f98a5a21191844d7e68598fa8c120c6afcc57d39d32f4343464ca36d66d8cb77c70460f1bbb84b937ad92e757e652e298ba675513ef16b22c011fdbae59fd5b531c7b8106882968b9becc15144d36648f37b7c5c601709eb235d8c4ed21551bd72a83a48087737252e80da0da65ccb1d7c1c82f0323b26144c6271b436d19115991361fcaf29fea595b1c79a731b18aec15c749718c68272a54a4d9e1c7f7688b8e2de20219238fdf56ed2aad23f150bd283d6b9b06000000f4fc949e9ef4f5427ebafdbd0bac83e326ba3990d25ff56937bb91994949ccb4f09f49134c14e53ea2c7"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_ID={0xbc, 0x3, "5db9f4602acb58771bcef4db25825ea046db7cd7edbc3cb6f927580f124a3351bed6488849686872b9d34f635717b08d682079ace4f769df2e6ed1b65d8b46cfd5e2fceacee1804ec6adbe6daeddc1151c3d1e41355c5200f2c26049653aed34237784a38689a2e699b7aadbb3e974f454daf105402bd7f2cf94f5fecaa62f37e17393e90a901cc36df3397d1b0577f94be09c6daf81fd57c69099bc346a5fe651450e7b60e63c02202b4098fcdf62fac7889a8484ecdeda"}]}, @TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ce}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe00000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x741df114}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "e062fb0b1e57c560923d996e52fe5a4df1303e06122da8d3665f6d2122"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MEDIA={0x160, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcbd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd72}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbcc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3a03}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x290}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfc2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x68483b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}, @TIPC_NLA_BEARER={0x15c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x101, @loopback, 0x10001}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x9c, @mcast2, 0x5}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xf5, @local, 0xa}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010100}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x31}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc591}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1203}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xed}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x95}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffc0}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff513d}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbbd2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}]}, 0x6c8}, 0x1, 0x0, 0x0, 0x10040001}, 0x20000004) r5 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a80)={0x8, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000084000000000000008a00000018420000bfff"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0xff7, &(0x7f0000002e00)=""/4087, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000f, @void, @value}, 0x94) getsockopt$bt_hci(r5, 0x84, 0x81, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002380)="1b0000001a007f029e741683c28f7b331d00"/27, 0x1b}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.112' (ED25519) to the list of known hosts. [ 71.157911][ T5818] cgroup: Unknown subsys name 'net' [ 71.291958][ T5818] cgroup: Unknown subsys name 'cpuset' [ 71.300850][ T5818] cgroup: Unknown subsys name 'rlimit' [ 71.444975][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.451493][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 Setting up swapspace version 1, size = 127995904 bytes [ 72.790177][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.813507][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.822226][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.839936][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.847707][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.855930][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.863806][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.871393][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.889553][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.897263][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.905854][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.907017][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.915004][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.948880][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.957022][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.971581][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.974645][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.984183][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.994323][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.994492][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.002113][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.013370][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.016414][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.023975][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.030461][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.051646][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.415768][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 77.501405][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 77.521725][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 77.597269][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 77.630678][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.637913][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.645904][ T5845] bridge_slave_0: entered allmulticast mode [ 77.652955][ T5845] bridge_slave_0: entered promiscuous mode [ 77.684397][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.691592][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.699041][ T5845] bridge_slave_1: entered allmulticast mode [ 77.705683][ T5845] bridge_slave_1: entered promiscuous mode [ 77.795254][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.810986][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.839904][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 77.880568][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.887929][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.896200][ T5828] bridge_slave_0: entered allmulticast mode [ 77.903481][ T5828] bridge_slave_0: entered promiscuous mode [ 77.929712][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.936845][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.944635][ T5829] bridge_slave_0: entered allmulticast mode [ 77.951662][ T5829] bridge_slave_0: entered promiscuous mode [ 77.960068][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.967277][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.974678][ T5829] bridge_slave_1: entered allmulticast mode [ 77.982460][ T5829] bridge_slave_1: entered promiscuous mode [ 77.997546][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.007425][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.014839][ T5828] bridge_slave_1: entered allmulticast mode [ 78.022401][ T5828] bridge_slave_1: entered promiscuous mode [ 78.065366][ T5845] team0: Port device team_slave_0 added [ 78.085823][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.093414][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.100899][ T5836] bridge_slave_0: entered allmulticast mode [ 78.107602][ T5836] bridge_slave_0: entered promiscuous mode [ 78.122434][ T5845] team0: Port device team_slave_1 added [ 78.130508][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.142522][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.154520][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.161816][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.169110][ T5836] bridge_slave_1: entered allmulticast mode [ 78.176033][ T5836] bridge_slave_1: entered promiscuous mode [ 78.216533][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.235989][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.253965][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.261411][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.268710][ T5840] bridge_slave_0: entered allmulticast mode [ 78.275370][ T5840] bridge_slave_0: entered promiscuous mode [ 78.283067][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.292689][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.319757][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.356439][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.369001][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.378167][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.387792][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.395585][ T5840] bridge_slave_1: entered allmulticast mode [ 78.402641][ T5840] bridge_slave_1: entered promiscuous mode [ 78.415275][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.422531][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.449321][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.465520][ T5829] team0: Port device team_slave_0 added [ 78.473892][ T5829] team0: Port device team_slave_1 added [ 78.481398][ T5828] team0: Port device team_slave_0 added [ 78.521240][ T5828] team0: Port device team_slave_1 added [ 78.545276][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.556544][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.564325][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.591402][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.603510][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.610727][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.636925][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.657478][ T5836] team0: Port device team_slave_0 added [ 78.673994][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.699139][ T5836] team0: Port device team_slave_1 added [ 78.734579][ T5840] team0: Port device team_slave_0 added [ 78.741484][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.748454][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.774806][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.798230][ T5845] hsr_slave_0: entered promiscuous mode [ 78.804528][ T5845] hsr_slave_1: entered promiscuous mode [ 78.813249][ T5840] team0: Port device team_slave_1 added [ 78.820737][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.827785][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.853825][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.902610][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.909717][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.936237][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.948474][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.955615][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.982103][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.007507][ T5829] hsr_slave_0: entered promiscuous mode [ 79.013740][ T5829] hsr_slave_1: entered promiscuous mode [ 79.020201][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.027987][ T5829] Cannot create hsr debugfs directory [ 79.039433][ T5837] Bluetooth: hci4: command tx timeout [ 79.047488][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.054723][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.081268][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.093710][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.100792][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.127006][ T55] Bluetooth: hci2: command tx timeout [ 79.127014][ T5844] Bluetooth: hci0: command tx timeout [ 79.128113][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.132750][ T5842] Bluetooth: hci1: command tx timeout [ 79.132917][ T5837] Bluetooth: hci3: command tx timeout [ 79.220331][ T5836] hsr_slave_0: entered promiscuous mode [ 79.226511][ T5836] hsr_slave_1: entered promiscuous mode [ 79.232886][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.240702][ T5836] Cannot create hsr debugfs directory [ 79.313877][ T5828] hsr_slave_0: entered promiscuous mode [ 79.320950][ T5828] hsr_slave_1: entered promiscuous mode [ 79.326886][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.334554][ T5828] Cannot create hsr debugfs directory [ 79.347722][ T5840] hsr_slave_0: entered promiscuous mode [ 79.354179][ T5840] hsr_slave_1: entered promiscuous mode [ 79.360783][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.368365][ T5840] Cannot create hsr debugfs directory [ 79.640253][ T5836] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.653312][ T5836] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.663743][ T5836] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.681078][ T5836] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.719073][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.731385][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.743602][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.754818][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.815731][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.827531][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.852889][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.865273][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.930429][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.949546][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.994119][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.004471][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.019113][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.068230][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.075551][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.087504][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.105585][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.122951][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.156459][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.171534][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.178851][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.188646][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.195754][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.224628][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.272304][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.279510][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.290202][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.297351][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.378054][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.451245][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.472085][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.488090][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.513923][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.521136][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.584913][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.592108][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.633595][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.640786][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.656497][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.663635][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.732223][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.770932][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.795392][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.838226][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.915604][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.922762][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.953725][ T1305] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.960962][ T1305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.995850][ T5845] veth0_vlan: entered promiscuous mode [ 81.096506][ T5845] veth1_vlan: entered promiscuous mode [ 81.108505][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.121440][ T5837] Bluetooth: hci4: command tx timeout [ 81.157252][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.199625][ T5837] Bluetooth: hci0: command tx timeout [ 81.200418][ T5845] veth0_macvtap: entered promiscuous mode [ 81.205223][ T5837] Bluetooth: hci3: command tx timeout [ 81.211095][ T5842] Bluetooth: hci1: command tx timeout [ 81.211138][ T5842] Bluetooth: hci2: command tx timeout [ 81.226127][ T5845] veth1_macvtap: entered promiscuous mode [ 81.284563][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.294730][ T5829] veth0_vlan: entered promiscuous mode [ 81.324350][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.341755][ T5828] veth0_vlan: entered promiscuous mode [ 81.353947][ T5845] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.364229][ T5845] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.374293][ T5845] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.383565][ T5845] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.396820][ T5829] veth1_vlan: entered promiscuous mode [ 81.427273][ T5836] veth0_vlan: entered promiscuous mode [ 81.456933][ T5828] veth1_vlan: entered promiscuous mode [ 81.476202][ T5836] veth1_vlan: entered promiscuous mode [ 81.534851][ T5829] veth0_macvtap: entered promiscuous mode [ 81.544520][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.569913][ T5829] veth1_macvtap: entered promiscuous mode [ 81.588321][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.599979][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.634699][ T5836] veth0_macvtap: entered promiscuous mode [ 81.646497][ T5836] veth1_macvtap: entered promiscuous mode [ 81.665772][ T5828] veth0_macvtap: entered promiscuous mode [ 81.697832][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.710763][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.722679][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.734425][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.745137][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.756373][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.770075][ T4874] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.777942][ T4874] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.781374][ T5828] veth1_macvtap: entered promiscuous mode [ 81.792755][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.806335][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.816370][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.827037][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.839368][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.854791][ T5836] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.863653][ T5836] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.873095][ T5836] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.882038][ T5836] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.899127][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.911396][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.922014][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.932840][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.944048][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.954542][ T5829] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.964625][ T5829] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.973869][ T5829] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.982839][ T5829] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.014871][ T5840] veth0_vlan: entered promiscuous mode [ 82.057475][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.071851][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.082180][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.092970][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.103135][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.106560][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.114216][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.140477][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.160887][ T5840] veth1_vlan: entered promiscuous mode [ 82.173212][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.184899][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.200707][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.214030][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.224321][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.235254][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.248144][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.285218][ T5913] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3'. [ 82.289707][ T5828] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.303535][ T5828] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.313185][ T5828] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.322583][ T5828] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.393633][ T5840] veth0_macvtap: entered promiscuous mode [ 82.405892][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.422817][ T4874] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.431233][ T4874] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.431369][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.450423][ T5840] veth1_macvtap: entered promiscuous mode [ 82.500252][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.508324][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.543871][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.557587][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.569245][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.580395][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.592163][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.602717][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.612673][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.623652][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.636580][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.712494][ T1305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.726663][ T1305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.737778][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.751764][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.761745][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.774843][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.784745][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.795645][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.807116][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.817719][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.829304][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.849862][ T1305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.866223][ T1305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.889896][ T5840] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.910114][ T5840] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.938786][ T5840] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.949248][ T5840] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.993337][ T5921] syz_tun: entered allmulticast mode [ 83.023507][ T5921] syz_tun: left allmulticast mode [ 83.028703][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.028728][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.199012][ T5837] Bluetooth: hci4: command tx timeout [ 83.279578][ T55] Bluetooth: hci3: command tx timeout [ 83.285075][ T55] Bluetooth: hci1: command tx timeout [ 83.288676][ T5842] Bluetooth: hci0: command tx timeout [ 83.290830][ T5837] Bluetooth: hci2: command tx timeout [ 83.453551][ T1305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.476208][ T1305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.646368][ T5945] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8'. [ 83.690416][ T4874] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.708453][ T4874] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.714664][ T5945] vti0: entered promiscuous mode [ 83.737675][ T5952] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.860607][ T5950] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8'. [ 83.874149][ T5945] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8'. [ 83.905574][ T5961] Zero length message leads to an empty skb [ 83.975946][ T5924] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 84.103716][ T5966] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10'. [ 84.168755][ T5966] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10'. [ 84.501273][ T5881] IPVS: starting estimator thread 0... [ 84.566159][ T5991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.608779][ T5988] IPVS: using max 28 ests per chain, 67200 per kthread [ 84.908713][ T5994] netlink: 'syz.3.14': attribute type 12 has an invalid length. [ 84.979894][ T5999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16'. [ 85.052534][ T6002] netlink: 48 bytes leftover after parsing attributes in process `syz.1.17'. [ 85.280818][ T5837] Bluetooth: hci4: command tx timeout [ 85.359746][ T55] Bluetooth: hci1: command tx timeout [ 85.359773][ T5844] Bluetooth: hci0: command tx timeout [ 85.365806][ T55] Bluetooth: hci3: command tx timeout [ 85.376918][ T5837] Bluetooth: hci2: command tx timeout [ 85.723071][ T6034] geneve0: entered allmulticast mode [ 86.028450][ T6048] netlink: 328 bytes leftover after parsing attributes in process `syz.4.26'. [ 86.301002][ T6061] xt_hashlimit: size too large, truncated to 1048576 [ 86.303673][ T6065] xt_CT: You must specify a L4 protocol and not use inversions on it [ 86.721103][ T6059] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.804393][ T3169] cfg80211: failed to load regulatory.db [ 86.960898][ T6084] xt_CT: You must specify a L4 protocol and not use inversions on it [ 88.326808][ T6126] netlink: 'syz.4.42': attribute type 1 has an invalid length. [ 88.784882][ T6059] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.815509][ T6118] dummy0: entered promiscuous mode [ 88.830660][ T6118] vlan2: entered promiscuous mode [ 88.999297][ T6059] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.049473][ T6137] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.107968][ T6135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.45'. [ 89.116802][ T6135] netlink: 32 bytes leftover after parsing attributes in process `syz.0.45'. [ 89.137157][ T6135] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 89.149375][ T6135] gretap1: entered promiscuous mode [ 89.172691][ T6135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.45'. [ 89.189508][ T6059] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.230846][ T6149] netlink: 'syz.0.45': attribute type 10 has an invalid length. [ 89.315643][ T6135] bond0: (slave bond_slave_0): Releasing backup interface [ 89.335435][ T6141] team0: No ports can be present during mode change [ 89.352313][ T6142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.48'. [ 89.364240][ T6149] macvlan0: entered allmulticast mode [ 89.392261][ T6149] veth1_vlan: entered allmulticast mode [ 89.416499][ T6149] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 89.448308][ T6156] netlink: 'syz.1.49': attribute type 4 has an invalid length. [ 89.474365][ T6059] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.506613][ T6059] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.545047][ T6059] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.613080][ T6059] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.082376][ T6183] netlink: 56 bytes leftover after parsing attributes in process `syz.4.57'. [ 90.304470][ T6193] netlink: 16 bytes leftover after parsing attributes in process `syz.0.58'. [ 90.323270][ T6193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.58'. [ 90.393017][ T6166] netlink: 'syz.3.51': attribute type 1 has an invalid length. [ 90.414729][ T6166] netlink: 228 bytes leftover after parsing attributes in process `syz.3.51'. [ 90.417468][ T6194] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 90.445192][ T5910] IPVS: starting estimator thread 0... [ 90.454251][ T6194] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 90.558892][ T6203] IPVS: using max 34 ests per chain, 81600 per kthread [ 90.829947][ T6223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.62'. [ 91.377792][ T6236] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.466464][ T6238] netlink: 'syz.1.70': attribute type 1 has an invalid length. [ 91.527827][ T6238] netlink: 224 bytes leftover after parsing attributes in process `syz.1.70'. [ 91.682834][ T6236] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.135847][ T6236] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.441393][ T6236] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.790565][ T6236] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.019136][ T6236] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.105118][ T6236] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.156911][ T6236] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.451803][ T6267] gtp0: entered promiscuous mode [ 93.460830][ T6267] gtp0: entered allmulticast mode [ 93.515083][ T6269] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 93.679397][ T6283] bridge1: entered promiscuous mode [ 93.709908][ T6283] bridge1: entered allmulticast mode [ 93.742789][ T6283] team0: Port device bridge1 added [ 94.071048][ T6293] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.146772][ T6293] bridge_slave_1 (unregistering): left allmulticast mode [ 94.156954][ T6293] bridge_slave_1 (unregistering): left promiscuous mode [ 94.186620][ T6293] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.454847][ T6309] __nla_validate_parse: 2 callbacks suppressed [ 94.454862][ T6309] netlink: 40 bytes leftover after parsing attributes in process `syz.1.89'. [ 94.487331][ T6314] tipc: Started in network mode [ 94.497118][ T6314] tipc: Node identity 6, cluster identity 4711 [ 94.506169][ T6314] tipc: Node number set to 6 [ 94.514354][ T6322] batadv_slave_1: entered promiscuous mode [ 94.693034][ T6314] bridge_slave_0: left allmulticast mode [ 94.704497][ T6314] bridge_slave_0: left promiscuous mode [ 94.715947][ T6314] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.737833][ T6314] bridge_slave_1: left allmulticast mode [ 94.744302][ T6314] bridge_slave_1: left promiscuous mode [ 94.750162][ T6314] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.763480][ T6314] bond0: (slave bond_slave_0): Releasing backup interface [ 94.775684][ T6314] bond0: (slave bond_slave_1): Releasing backup interface [ 94.793750][ T6314] team0: Failed to send options change via netlink (err -105) [ 94.803822][ T6314] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 94.813821][ T6314] team0: Port device team_slave_0 removed [ 94.825266][ T6314] team0: Failed to send options change via netlink (err -105) [ 94.833903][ T6314] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 94.844826][ T6314] team0: Port device team_slave_1 removed [ 94.851834][ T6314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.859682][ T6314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.869351][ T6314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.876893][ T6314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.914573][ T6310] batadv_slave_1: left promiscuous mode [ 95.198379][ T6344] GUP no longer grows the stack in syz.2.98 (6344): 200000006000-20000000a000 (200000005000) [ 95.215675][ T6344] CPU: 0 UID: 0 PID: 6344 Comm: syz.2.98 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 95.215709][ T6344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 95.215725][ T6344] Call Trace: [ 95.215733][ T6344] [ 95.215742][ T6344] dump_stack_lvl+0x241/0x360 [ 95.215784][ T6344] ? __pfx_dump_stack_lvl+0x10/0x10 [ 95.215812][ T6344] ? __pfx__printk+0x10/0x10 [ 95.215834][ T6344] ? find_vma+0xfa/0x170 [ 95.215862][ T6344] __get_user_pages+0x3b49/0x4180 [ 95.215906][ T6344] ? __lock_acquire+0xad5/0xd80 [ 95.215938][ T6344] ? __pfx___get_user_pages+0x10/0x10 [ 95.215955][ T6344] ? __gup_longterm_locked+0xd86/0x1850 [ 95.215979][ T6344] ? __pfx_down_read_killable+0x10/0x10 [ 95.216012][ T6344] ? __lock_acquire+0xad5/0xd80 [ 95.216053][ T6344] __gup_longterm_locked+0xec1/0x1850 [ 95.216084][ T6344] ? try_get_folio+0xf1/0x6e0 [ 95.216120][ T6344] ? try_grab_folio_fast+0x1d8/0x700 [ 95.216142][ T6344] ? __pfx___gup_longterm_locked+0x10/0x10 [ 95.216169][ T6344] ? gup_fast_fallback+0x2083/0x29d0 [ 95.216192][ T6344] gup_fast_fallback+0x226b/0x29d0 [ 95.216236][ T6344] ? __pfx_gup_fast_fallback+0x10/0x10 [ 95.216257][ T6344] ? finish_task_switch+0x1e5/0x870 [ 95.216284][ T6344] ? lockdep_hardirqs_on+0x9d/0x150 [ 95.216318][ T6344] ? __schedule+0x1b20/0x50e0 [ 95.216353][ T6344] ? __lock_acquire+0xad5/0xd80 [ 95.216384][ T6344] ? is_valid_gup_args+0x124/0x200 [ 95.216406][ T6344] get_user_pages_fast+0xd2/0x160 [ 95.216429][ T6344] ? __pfx_get_user_pages_fast+0x10/0x10 [ 95.216451][ T6344] ? rcu_is_watching+0x15/0xb0 [ 95.216473][ T6344] ? trace_contention_end+0x3c/0x120 [ 95.216499][ T6344] __iov_iter_get_pages_alloc+0x39d/0xa90 [ 95.216532][ T6344] ? __se_sys_vmsplice+0x4bc/0x1430 [ 95.216563][ T6344] iov_iter_get_pages2+0xd1/0x130 [ 95.216590][ T6344] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 95.216622][ T6344] __se_sys_vmsplice+0x6c6/0x1430 [ 95.216665][ T6344] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 95.216693][ T6344] ? __pfx_futex_wait+0x10/0x10 [ 95.216730][ T6344] ? __lock_acquire+0xad5/0xd80 [ 95.216797][ T6344] ? do_syscall_64+0xb6/0x230 [ 95.216844][ T6344] do_syscall_64+0xf3/0x230 [ 95.216879][ T6344] ? clear_bhb_loop+0x45/0xa0 [ 95.216903][ T6344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.216927][ T6344] RIP: 0033:0x7fe6c7d8d169 [ 95.216949][ T6344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.216965][ T6344] RSP: 002b:00007fe6c8c2c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 95.216988][ T6344] RAX: ffffffffffffffda RBX: 00007fe6c7fa5fa0 RCX: 00007fe6c7d8d169 [ 95.217003][ T6344] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000c [ 95.217016][ T6344] RBP: 00007fe6c7e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 95.217028][ T6344] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 95.217040][ T6344] R13: 0000000000000000 R14: 00007fe6c7fa5fa0 R15: 00007ffd95fff718 [ 95.217065][ T6344] [ 95.543882][ T6351] netlink: 1280 bytes leftover after parsing attributes in process `syz.4.100'. [ 95.566363][ T6351] openvswitch: netlink: Flow actions attr not present in new flow. [ 95.896539][ T6368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.106'. [ 95.920908][ T6365] netlink: 'syz.3.104': attribute type 15 has an invalid length. [ 95.932882][ T6372] ipt_REJECT: TCP_RESET invalid for non-tcp [ 95.949863][ T6368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.106'. [ 96.073842][ T6381] lo: entered allmulticast mode [ 96.082307][ T6381] lo: left allmulticast mode [ 96.190502][ T6388] trusted_key: syz.3.111 sent an empty control message without MSG_MORE. [ 96.376150][ T6404] netlink: 28 bytes leftover after parsing attributes in process `syz.4.118'. [ 96.725208][ T6427] netlink: 'syz.4.124': attribute type 7 has an invalid length. [ 97.252283][ T6466] netlink: 188 bytes leftover after parsing attributes in process `syz.1.134'. [ 97.344028][ T6469] netlink: 12 bytes leftover after parsing attributes in process `syz.4.135'. [ 97.358230][ T6469] netlink: 16 bytes leftover after parsing attributes in process `syz.4.135'. [ 97.372392][ T6469] netlink: 12 bytes leftover after parsing attributes in process `syz.4.135'. [ 97.424393][ T6469] netlink: 16 bytes leftover after parsing attributes in process `syz.4.135'. [ 97.755882][ T6490] warning: `syz.1.143' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 97.857004][ T6495] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 98.246520][ T6507] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.254131][ T6507] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.400958][ T6507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.419616][ T6507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.521606][ T6507] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.530478][ T6507] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.541771][ T6507] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.551100][ T6507] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.016596][ T6544] netlink: 'syz.1.158': attribute type 2 has an invalid length. [ 99.106386][ T6548] Bluetooth: MGMT ver 1.23 [ 99.168056][ T6553] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.397266][ T6546] dccp_invalid_packet: invalid packet type [ 99.575256][ T6579] __nla_validate_parse: 8 callbacks suppressed [ 99.575280][ T6579] netlink: 1280 bytes leftover after parsing attributes in process `syz.0.167'. [ 99.678960][ T6579] openvswitch: netlink: Flow actions attr not present in new flow. [ 99.691994][ T6588] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.167'. [ 101.118897][ T5837] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 101.118919][ T55] Bluetooth: hci0: command 0x0401 tx timeout [ 101.536560][ T6637] netlink: 'syz.3.182': attribute type 303 has an invalid length. [ 101.571025][ T6636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.182'. [ 102.212966][ T6617] netlink: 404 bytes leftover after parsing attributes in process `syz.0.175'. [ 102.222547][ T6617] netlink: 88 bytes leftover after parsing attributes in process `syz.0.175'. [ 102.232024][ T6617] netlink: 88 bytes leftover after parsing attributes in process `syz.0.175'. [ 102.278004][ T6636] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 102.307882][ T6640] team0: Device ipvlan2 failed to register rx_handler [ 102.326586][ T6636] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 102.443506][ T6640] syz.1.183 (6640) used greatest stack depth: 20032 bytes left [ 102.464089][ T6650] Cannot find del_set index 1 as target [ 102.610697][ T6657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.189'. [ 102.629259][ T6657] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 102.772786][ T6668] netlink: 24 bytes leftover after parsing attributes in process `syz.2.191'. [ 102.785916][ T6668] netlink: 24 bytes leftover after parsing attributes in process `syz.2.191'. [ 102.942938][ T6679] netlink: 20 bytes leftover after parsing attributes in process `syz.1.194'. [ 103.115623][ T6684] bond1: entered promiscuous mode [ 103.120888][ T6684] bond1: entered allmulticast mode [ 103.126389][ T6684] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.946172][ T6743] netlink: 'syz.1.212': attribute type 1 has an invalid length. [ 103.959353][ T6735] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 104.587988][ T6745] dccp_invalid_packet: invalid packet type [ 104.985068][ T6775] netlink: 'syz.3.221': attribute type 2 has an invalid length. [ 105.200895][ T6785] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 105.242766][ T6789] __nla_validate_parse: 3 callbacks suppressed [ 105.242790][ T6789] netlink: 28 bytes leftover after parsing attributes in process `syz.0.224'. [ 106.442171][ T6794] netlink: 'syz.3.226': attribute type 1 has an invalid length. [ 107.764285][ T6840] af_packet: tpacket_rcv: packet too big, clamped from 3954 to 3710. macoff=82 [ 109.264635][ T6834] dummy0: entered promiscuous mode [ 109.405460][ T6851] netlink: 12 bytes leftover after parsing attributes in process `syz.4.238'. [ 109.690449][ T6872] veth1_macvtap: mtu less than device minimum [ 109.745377][ T6871] netlink: 'syz.4.246': attribute type 1 has an invalid length. [ 109.873366][ T6880] pim6reg9: entered allmulticast mode [ 109.890920][ T6883] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 109.928881][ T6883] netlink: 132 bytes leftover after parsing attributes in process `syz.1.248'. [ 110.313028][ T6901] netlink: 96 bytes leftover after parsing attributes in process `syz.4.255'. [ 110.374890][ T6904] netlink: 12 bytes leftover after parsing attributes in process `syz.3.254'. [ 110.497802][ T6902] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 110.563690][ T6868] dccp_invalid_packet: invalid packet type [ 110.685358][ T6902] 8021q: adding VLAN 0 to HW filter on device bond2 [ 110.816643][ T6911] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.849380][ T6911] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.868176][ T6911] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.887128][ T6911] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.423608][ T6949] netlink: 20 bytes leftover after parsing attributes in process `syz.3.267'. [ 111.594414][ T6918] dccp_invalid_packet: invalid packet type [ 111.695675][ T6959] netlink: 28 bytes leftover after parsing attributes in process `syz.3.271'. [ 111.714146][ T6965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.274'. [ 112.172032][ T6984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.281'. [ 112.613976][ T7000] netlink: 80 bytes leftover after parsing attributes in process `syz.4.285'. [ 112.690162][ T7002] netlink: 28 bytes leftover after parsing attributes in process `syz.2.286'. [ 112.830260][ T6988] netlink: 'syz.0.282': attribute type 13 has an invalid length. [ 112.853411][ T7008] netlink: 'syz.2.288': attribute type 10 has an invalid length. [ 112.873520][ T7008] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 112.891334][ T7011] netlink: 12 bytes leftover after parsing attributes in process `syz.4.289'. [ 112.914687][ T7011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.289'. [ 113.004198][ T7018] netlink: 'syz.2.292': attribute type 32 has an invalid length. [ 113.185688][ T7015] bond0: option mode: unable to set because the bond device has slaves [ 113.834961][ T7058] Cannot find set identified by id 0 to match [ 114.078509][ T7061] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 114.414345][ T7079] xt_hashlimit: size too large, truncated to 1048576 [ 114.425942][ T7079] xt_hashlimit: max too large, truncated to 1048576 [ 114.438197][ T7079] netlink: 'syz.0.310': attribute type 1 has an invalid length. [ 114.453948][ T7079] ieee802154 phy1 wpan1: encryption failed: -22 [ 114.485290][ T24] IPVS: starting estimator thread 0... [ 114.486023][ T7078] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 114.628684][ T7082] IPVS: using max 29 ests per chain, 69600 per kthread [ 115.327708][ T7121] __nla_validate_parse: 34 callbacks suppressed [ 115.327734][ T7121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.323'. [ 115.368102][ T7123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.324'. [ 115.455545][ T7126] raw_sendmsg: syz.2.325 forgot to set AF_INET. Fix it! [ 115.543086][ T7130] netdevsim netdevsim3: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 116.173111][ T7151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.333'. [ 116.222701][ T7151] 8021q: adding VLAN 0 to HW filter on device team1 [ 116.229946][ T7153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.334'. [ 116.578341][ T7166] netlink: 32 bytes leftover after parsing attributes in process `syz.4.335'. [ 117.413458][ T7193] netlink: 28 bytes leftover after parsing attributes in process `syz.4.342'. [ 117.442271][ T7193] FAULT_INJECTION: forcing a failure. [ 117.442271][ T7193] name failslab, interval 1, probability 0, space 0, times 1 [ 117.469143][ T7191] Cannot find map_set index 0 as target [ 117.474984][ T7193] CPU: 0 UID: 0 PID: 7193 Comm: syz.4.342 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 117.475031][ T7193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 117.475051][ T7193] Call Trace: [ 117.475063][ T7193] [ 117.475076][ T7193] dump_stack_lvl+0x241/0x360 [ 117.475130][ T7193] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.475160][ T7193] ? __pfx__printk+0x10/0x10 [ 117.475196][ T7193] ? __pfx___might_resched+0x10/0x10 [ 117.475222][ T7193] should_fail_ex+0x424/0x570 [ 117.475255][ T7193] should_failslab+0xac/0x100 [ 117.475285][ T7193] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 117.475315][ T7193] ? __alloc_skb+0x1c2/0x480 [ 117.475342][ T7193] __alloc_skb+0x1c2/0x480 [ 117.475371][ T7193] ? __pfx___alloc_skb+0x10/0x10 [ 117.475397][ T7193] ? netlink_autobind+0xd6/0x2f0 [ 117.475419][ T7193] ? netlink_autobind+0x2b0/0x2f0 [ 117.475445][ T7193] netlink_sendmsg+0x638/0xcd0 [ 117.475476][ T7193] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.475501][ T7193] ? aa_sock_msg_perm+0x91/0x160 [ 117.475532][ T7193] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.475552][ T7193] __sock_sendmsg+0x221/0x270 [ 117.475575][ T7193] ____sys_sendmsg+0x523/0x860 [ 117.475608][ T7193] ? __pfx_____sys_sendmsg+0x10/0x10 [ 117.475634][ T7193] ? __fget_files+0x2a/0x420 [ 117.475666][ T7193] ? __fget_files+0x2a/0x420 [ 117.475701][ T7193] __sys_sendmsg+0x271/0x360 [ 117.475732][ T7193] ? __pfx___sys_sendmsg+0x10/0x10 [ 117.475798][ T7193] ? do_syscall_64+0xb6/0x230 [ 117.475831][ T7193] do_syscall_64+0xf3/0x230 [ 117.475859][ T7193] ? clear_bhb_loop+0x45/0xa0 [ 117.475883][ T7193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.475903][ T7193] RIP: 0033:0x7f0eead8d169 [ 117.475920][ T7193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.475939][ T7193] RSP: 002b:00007f0eebb82038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.475961][ T7193] RAX: ffffffffffffffda RBX: 00007f0eeafa5fa0 RCX: 00007f0eead8d169 [ 117.475977][ T7193] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 000000000000000a [ 117.475990][ T7193] RBP: 00007f0eebb82090 R08: 0000000000000000 R09: 0000000000000000 [ 117.476003][ T7193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.476015][ T7193] R13: 0000000000000000 R14: 00007f0eeafa5fa0 R15: 00007fff2ae33208 [ 117.476041][ T7193] [ 117.488907][ T7196] netlink: 56 bytes leftover after parsing attributes in process `syz.2.343'. [ 117.649776][ T7201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.344'. [ 117.744649][ T7200] xt_ecn: cannot match TCP bits for non-tcp packets [ 118.412196][ T7240] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 118.434533][ T7229] netlink: 28 bytes leftover after parsing attributes in process `syz.3.352'. [ 118.443828][ T7229] netlink: 28 bytes leftover after parsing attributes in process `syz.3.352'. [ 118.452865][ T7229] netlink: 'syz.3.352': attribute type 6 has an invalid length. [ 118.465952][ T7244] netlink: 'syz.0.356': attribute type 3 has an invalid length. [ 118.921521][ T7276] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 118.941906][ T7273] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 119.100284][ T7282] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 119.139581][ T7282] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 119.927466][ T7347] openvswitch: netlink: Missing key (keys=440, expected=200000) [ 121.387883][ T7361] SET target dimension over the limit! [ 121.418467][ T7358] ip6tnl1: entered promiscuous mode [ 121.425149][ T7358] ip6tnl1: entered allmulticast mode [ 121.926499][ T7387] __nla_validate_parse: 11 callbacks suppressed [ 121.926523][ T7387] netlink: 12 bytes leftover after parsing attributes in process `syz.4.384'. [ 121.970822][ T7386] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$űĚĚULŮvy¸ÚŘ …DŁřUDŚw}ťz [ 121.995141][ T7388] rose4: entered promiscuous mode [ 122.023011][ T7388] rose4: entered allmulticast mode [ 122.125423][ T7386] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 122.377591][ T7405] nr0: entered allmulticast mode [ 122.598039][ T7416] netlink: 20 bytes leftover after parsing attributes in process `syz.3.391'. [ 122.615367][ T7416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.391'. [ 123.171826][ T7448] netlink: 'syz.2.403': attribute type 4 has an invalid length. [ 123.225741][ T7454] netlink: 'syz.2.403': attribute type 4 has an invalid length. [ 124.241661][ T7491] netlink: 'syz.1.414': attribute type 1 has an invalid length. [ 124.862646][ T7520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.423'. [ 124.984314][ T7520] bridge_slave_0: left allmulticast mode [ 125.010573][ T7520] bridge_slave_0: left promiscuous mode [ 125.029417][ T7520] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.304263][ T7540] netlink: 12 bytes leftover after parsing attributes in process `syz.4.427'. [ 125.383127][ T7549] netlink: 28 bytes leftover after parsing attributes in process `syz.4.427'. [ 125.394941][ T7540] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.523893][ T7561] atomic_op ffff888028615198 conn xmit_atomic 0000000000000000 [ 125.565276][ T7561] syzkaller0: entered promiscuous mode [ 125.582020][ T7561] syzkaller0: entered allmulticast mode [ 125.860057][ T7584] netlink: 'syz.3.440': attribute type 10 has an invalid length. [ 125.917115][ T7584] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 125.990131][ T7579] can: request_module (can-proto-3) failed. [ 126.035739][ T7580] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 126.095034][ T7580] netlink: 92 bytes leftover after parsing attributes in process `syz.1.441'. [ 126.108887][ T7580] netlink: 12 bytes leftover after parsing attributes in process `syz.1.441'. [ 126.168758][ T7580] netlink: 20 bytes leftover after parsing attributes in process `syz.1.441'. [ 126.455587][ T7609] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 126.464487][ T5910] IPVS: starting estimator thread 0... [ 126.475143][ T7609] netlink: 'syz.1.445': attribute type 2 has an invalid length. [ 126.492096][ T7609] netlink: 12 bytes leftover after parsing attributes in process `syz.1.445'. [ 126.503212][ T7612] sctp: [Deprecated]: syz.3.446 (pid 7612) Use of struct sctp_assoc_value in delayed_ack socket option. [ 126.503212][ T7612] Use struct sctp_sack_info instead [ 126.558842][ T7610] IPVS: using max 25 ests per chain, 60000 per kthread [ 126.609892][ T7607] dccp_invalid_packet: invalid packet type [ 126.859495][ T7625] openvswitch: netlink: Missing valid actions attribute. [ 126.866865][ T7625] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.063893][ T7616] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.071378][ T7616] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.533934][ T7616] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.594545][ T7616] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.759069][ T55] Bluetooth: hci4: command 0x0405 tx timeout [ 128.003051][ T7616] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.012218][ T7616] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.021588][ T7616] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.031220][ T7616] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.103523][ T7616] syzkaller0: left promiscuous mode [ 128.112985][ T7616] syzkaller0: left allmulticast mode [ 128.120863][ T7616] bond1: left promiscuous mode [ 128.127218][ T7616] bond1: left allmulticast mode [ 128.266123][ T7622] dvmrp1: entered allmulticast mode [ 128.325090][ T7638] xt_nfacct: accounting object `syz1' does not exists [ 128.677529][ T7651] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 128.691883][ T7655] __nla_validate_parse: 1 callbacks suppressed [ 128.691912][ T7655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.454'. [ 128.712323][ T7651] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 128.780845][ T7658] netlink: 28 bytes leftover after parsing attributes in process `syz.1.454'. [ 129.211757][ T7685] netlink: 48 bytes leftover after parsing attributes in process `syz.1.461'. [ 129.336166][ T7692] netlink: 'syz.1.463': attribute type 6 has an invalid length. [ 129.345095][ T7692] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.463'. [ 129.970409][ T7710] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 130.360107][ T7735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.479'. [ 131.176698][ T7753] netlink: 'syz.4.483': attribute type 27 has an invalid length. [ 132.775709][ T7777] netlink: 32 bytes leftover after parsing attributes in process `syz.4.489'. [ 132.884947][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.220653][ T7785] netlink: 56 bytes leftover after parsing attributes in process `syz.2.492'. [ 133.455352][ T7792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.495'. [ 133.464640][ T7792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.495'. [ 133.521950][ T7792] netlink: 10 bytes leftover after parsing attributes in process `syz.2.495'. [ 133.548416][ T7792] nbd: socks must be embedded in a SOCK_ITEM attr [ 133.686551][ T7797] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.711422][ T7811] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 133.825485][ T7797] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.966999][ T7797] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.035642][ T7828] vlan2: entered allmulticast mode [ 134.046575][ T7828] macvlan1: entered allmulticast mode [ 134.121731][ T7797] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.441595][ T7797] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.751689][ T7797] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.846954][ T7846] netlink: 12 bytes leftover after parsing attributes in process `syz.1.512'. [ 134.867233][ T7846] netlink: 'syz.1.512': attribute type 1 has an invalid length. [ 134.879919][ T7846] netlink: 228 bytes leftover after parsing attributes in process `syz.1.512'. [ 134.897185][ T7844] dccp_invalid_packet: invalid packet type [ 136.052729][ T7911] netlink: 'syz.0.529': attribute type 32 has an invalid length. [ 136.062685][ T7912] netlink: 'syz.0.529': attribute type 32 has an invalid length. [ 136.073490][ T7911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.529'. [ 136.083126][ T7912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.529'. [ 136.104947][ T7914] netlink: 'syz.3.528': attribute type 5 has an invalid length. [ 136.109209][ T7911] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 136.146184][ T7914] netlink: 56 bytes leftover after parsing attributes in process `syz.3.528'. [ 136.177952][ T7912] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 136.324813][ T7929] vlan2: entered promiscuous mode [ 136.331495][ T7929] vlan2: entered allmulticast mode [ 136.336726][ T7929] hsr_slave_1: entered allmulticast mode [ 136.435376][ T7929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.533'. [ 136.836440][ T7956] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 136.870051][ T7956] batman_adv: batadv0: Adding interface: gretap1 [ 136.876540][ T7956] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.882749][ T7958] netlink: 9 bytes leftover after parsing attributes in process `syz.3.541'. [ 136.929121][ T7956] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 136.956963][ T7958] 0·: renamed from hsr0 [ 136.982517][ T7958] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 137.000038][ T7963] netlink: 56 bytes leftover after parsing attributes in process `syz.0.542'. [ 137.012276][ T7963] netlink: 'syz.0.542': attribute type 10 has an invalid length. [ 137.031811][ T7958] 0·: entered allmulticast mode [ 137.036716][ T7958] hsr_slave_0: entered allmulticast mode [ 137.052147][ T7958] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 137.194011][ T7971] netlink: 'syz.1.544': attribute type 21 has an invalid length. [ 137.227045][ T7971] netlink: 'syz.1.544': attribute type 20 has an invalid length. [ 137.311631][ T7980] netlink: 12 bytes leftover after parsing attributes in process `syz.1.544'. [ 137.525880][ T7991] netlink: 'syz.1.551': attribute type 4 has an invalid length. [ 137.535432][ T7991] netlink: 'syz.1.551': attribute type 4 has an invalid length. [ 137.549753][ T7986] netlink: 16 bytes leftover after parsing attributes in process `syz.2.553'. [ 137.673115][ T7999] syzkaller1: entered promiscuous mode [ 137.694868][ T7999] syzkaller1: entered allmulticast mode [ 137.719694][ T8001] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 138.090670][ T8029] sctp: [Deprecated]: syz.1.563 (pid 8029) Use of struct sctp_assoc_value in delayed_ack socket option. [ 138.090670][ T8029] Use struct sctp_sack_info instead [ 138.418390][ T8052] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 138.433523][ T8052] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 138.844131][ T8065] netlink: 'syz.0.577': attribute type 4 has an invalid length. [ 139.172209][ T8079] netlink: 'syz.1.582': attribute type 11 has an invalid length. [ 139.557861][ T8106] dccp_invalid_packet: P.Data Offset(0) too small [ 139.965616][ T8135] validate_nla: 1 callbacks suppressed [ 139.965636][ T8135] netlink: 'syz.4.596': attribute type 1 has an invalid length. [ 140.097898][ T8138] __nla_validate_parse: 12 callbacks suppressed [ 140.097923][ T8138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.597'. [ 140.379908][ T8157] sctp: [Deprecated]: syz.4.601 (pid 8157) Use of struct sctp_assoc_value in delayed_ack socket option. [ 140.379908][ T8157] Use struct sctp_sack_info instead [ 140.504967][ T8160] netlink: 64 bytes leftover after parsing attributes in process `syz.3.602'. [ 140.631142][ T8166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.604'. [ 140.683180][ T8166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.604'. [ 141.062489][ T8183] Bluetooth: MGMT ver 1.23 [ 143.405254][ T8147] Set syz1 is full, maxelem 65536 reached [ 143.790426][ T8230] geneve0: left allmulticast mode [ 143.911893][ T8251] lo speed is unknown, defaulting to 1000 [ 143.942849][ T8251] lo speed is unknown, defaulting to 1000 [ 143.972458][ T8251] lo speed is unknown, defaulting to 1000 [ 143.983701][ T8251] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 144.041426][ T8251] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 144.133252][ T8251] lo speed is unknown, defaulting to 1000 [ 144.141779][ T8251] lo speed is unknown, defaulting to 1000 [ 144.335302][ T8280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.507462][ T8284] netlink: 32 bytes leftover after parsing attributes in process `syz.0.628'. [ 145.844173][ T8251] lo speed is unknown, defaulting to 1000 [ 145.879772][ T8251] lo speed is unknown, defaulting to 1000 [ 145.897459][ T8251] lo speed is unknown, defaulting to 1000 [ 145.908908][ T8251] lo speed is unknown, defaulting to 1000 [ 146.078788][ T8297] Driver unsupported XDP return value 0 on prog (id 277) dev N/A, expect packet loss! [ 146.188907][ T8309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.638'. [ 146.198025][ T8309] netlink: 24 bytes leftover after parsing attributes in process `syz.2.638'. [ 146.208305][ T8305] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:0 [ 146.221388][ T8297] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.353047][ T8297] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.406107][ T8307] lo speed is unknown, defaulting to 1000 [ 146.518752][ T8297] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.586932][ T8324] netlink: 'syz.1.641': attribute type 4 has an invalid length. [ 146.644599][ T8328] netlink: 'syz.1.641': attribute type 4 has an invalid length. [ 146.662830][ T8297] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.767840][ T8328] CĂ: renamed from team_slave_0 [ 146.778074][ T8327] dccp_invalid_packet: invalid packet type [ 146.798597][ T8328] netlink: 'syz.1.641': attribute type 3 has an invalid length. [ 146.821477][ T8328] netlink: 152 bytes leftover after parsing attributes in process `syz.1.641'. [ 146.843853][ T8328] A link change request failed with some changes committed already. Interface CĂ may have been left with an inconsistent configuration, please check. [ 146.897726][ T8297] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.925019][ T8335] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.641'. [ 146.983151][ T8297] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.005959][ T8297] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.053993][ T8297] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.315265][ T8343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.644'. [ 147.443080][ T8340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.464479][ T8340] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.495489][ T8340] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 147.537211][ T8340] syz.4.644 (8340) used greatest stack depth: 18976 bytes left [ 147.674652][ T8360] lo speed is unknown, defaulting to 1000 [ 147.749677][ T8368] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 147.761818][ T8368] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 147.866405][ T8370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.652'. [ 147.888939][ T8368] lo speed is unknown, defaulting to 1000 [ 147.930779][ T8374] netlink: 16 bytes leftover after parsing attributes in process `syz.1.650'. [ 147.997389][ T8370] lo speed is unknown, defaulting to 1000 [ 148.184619][ T8367] delete_channel: no stack [ 148.705748][ T8384] lo speed is unknown, defaulting to 1000 [ 149.340651][ T8393] delete_channel: no stack [ 149.534514][ T8415] netlink: 44 bytes leftover after parsing attributes in process `syz.2.664'. [ 149.588719][ T8415] netlink: 32 bytes leftover after parsing attributes in process `syz.2.664'. [ 149.614692][ T8417] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.629178][ T8417] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.641931][ T8417] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.650611][ T8417] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.704809][ T8413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.664'. [ 149.758831][ T55] Bluetooth: hci4: command 0x0405 tx timeout [ 150.258385][ T8444] lo speed is unknown, defaulting to 1000 [ 150.576500][ T8459] lo speed is unknown, defaulting to 1000 [ 150.727657][ T8475] lo speed is unknown, defaulting to 1000 [ 150.995777][ T8480] bond0: (slave bond_slave_0): Releasing backup interface [ 151.317771][ T8492] lo speed is unknown, defaulting to 1000 [ 151.441305][ T8499] __nla_validate_parse: 3 callbacks suppressed [ 151.441334][ T8499] netlink: 48 bytes leftover after parsing attributes in process `syz.1.684'. [ 151.534304][ T8503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.686'. [ 151.545778][ T8503] netlink: 24 bytes leftover after parsing attributes in process `syz.3.686'. [ 151.822534][ T8521] lo speed is unknown, defaulting to 1000 [ 151.845985][ T8524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.691'. [ 151.932060][ T8528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.692'. [ 151.960274][ T8528] netlink: 32 bytes leftover after parsing attributes in process `syz.0.692'. [ 151.973464][ T8528] gretap2: entered promiscuous mode [ 152.042180][ T8495] dccp_invalid_packet: invalid packet type [ 155.371496][ T8568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.699'. [ 155.396415][ T8571] netlink: 'syz.1.701': attribute type 1 has an invalid length. [ 155.415334][ T8576] IPv6: sit1: Disabled Multicast RS [ 155.420909][ T8575] netlink: 'syz.2.702': attribute type 32 has an invalid length. [ 155.451906][ T8577] netlink: 12 bytes leftover after parsing attributes in process `syz.3.703'. [ 155.479252][ T8571] bond2: entered promiscuous mode [ 155.484677][ T8571] 8021q: adding VLAN 0 to HW filter on device bond2 [ 155.503655][ T8577] vlan2: entered promiscuous mode [ 155.517322][ T8577] team0: entered promiscuous mode [ 155.522723][ T8577] team_slave_0: entered promiscuous mode [ 155.545249][ T8577] team_slave_1: entered promiscuous mode [ 155.578132][ T8581] ipip0: entered promiscuous mode [ 155.588401][ T8581] ipip0: entered allmulticast mode [ 155.615071][ T8581] 8021q: adding VLAN 0 to HW filter on device bond2 [ 155.622873][ T8581] bond2: (slave ipip0): The slave device specified does not support setting the MAC address [ 155.636707][ T8581] bond2: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 155.649519][ T8581] bond2: (slave ipip0): making interface the new active one [ 155.659172][ T8581] bond2: (slave ipip0): Enslaving as an active interface with an up link [ 155.659318][ T8591] netlink: 36 bytes leftover after parsing attributes in process `syz.2.704'. [ 155.669438][ T8589] netlink: 32 bytes leftover after parsing attributes in process `syz.4.706'. [ 155.716817][ T8584] lo speed is unknown, defaulting to 1000 [ 156.521473][ T8627] __nla_validate_parse: 4 callbacks suppressed [ 156.521493][ T8627] netlink: 28 bytes leftover after parsing attributes in process `syz.2.714'. [ 156.561477][ T8627] netlink: 28 bytes leftover after parsing attributes in process `syz.2.714'. [ 156.710510][ T8632] netlink: 'syz.4.715': attribute type 10 has an invalid length. [ 157.086123][ T8653] netlink: 12 bytes leftover after parsing attributes in process `syz.3.719'. [ 157.116437][ T8652] netlink: 96 bytes leftover after parsing attributes in process `syz.0.720'. [ 157.144793][ T8662] netlink: 'syz.1.722': attribute type 1 has an invalid length. [ 157.306391][ T8670] nbd: must specify an index to disconnect [ 157.429977][ T8677] lo speed is unknown, defaulting to 1000 [ 158.044802][ T8693] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 158.279013][ T8679] dccp_invalid_packet: invalid packet type [ 158.743576][ T8715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.738'. [ 158.804993][ T8721] lo speed is unknown, defaulting to 1000 [ 158.859900][ T8715] lo speed is unknown, defaulting to 1000 [ 159.031129][ T8734] x_tables: duplicate entry at hook 2 [ 159.063037][ T8734] x_tables: duplicate entry at hook 2 [ 159.155426][ T8728] delete_channel: no stack [ 159.232864][ T8744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.745'. [ 159.278110][ T8747] xt_recent: Unsupported userspace flags (00000042) [ 159.510026][ T8754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.748'. [ 159.534177][ T8756] netlink: 56 bytes leftover after parsing attributes in process `syz.0.749'. [ 159.676363][ T8761] : entered promiscuous mode [ 159.768318][ T8721] dccp_invalid_packet: invalid packet type [ 160.216461][ T8791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.757'. [ 160.635360][ T8815] netlink: 48 bytes leftover after parsing attributes in process `syz.4.765'. [ 160.653812][ T7630] IPVS: starting estimator thread 0... [ 160.665310][ T8817] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.730723][ T8817] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.749219][ T8818] IPVS: using max 28 ests per chain, 67200 per kthread [ 160.772691][ T8821] tipc: Started in network mode [ 160.788243][ T8821] tipc: Node identity ac1414aa, cluster identity 4711 [ 160.802866][ T8821] tipc: Enabled bearer , priority 10 [ 160.874697][ T8817] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.973513][ T8817] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.992871][ T8831] ip6tnl1: entered promiscuous mode [ 161.140243][ T8817] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.156241][ T8817] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.194776][ T8817] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.231816][ T8817] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.739478][ T8901] __nla_validate_parse: 2 callbacks suppressed [ 161.739499][ T8901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.783'. [ 161.855560][ T8906] wg1 speed is unknown, defaulting to 1000 [ 161.867385][ T8906] wg1 speed is unknown, defaulting to 1000 [ 161.884215][ T8906] wg1 speed is unknown, defaulting to 1000 [ 161.910261][ T47] tipc: Node number set to 2886997162 [ 161.929712][ T8906] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 162.037414][ T8906] wg1 speed is unknown, defaulting to 1000 [ 162.095055][ T8906] wg1 speed is unknown, defaulting to 1000 [ 162.129844][ T8906] wg1 speed is unknown, defaulting to 1000 [ 162.199820][ T8906] wg1 speed is unknown, defaulting to 1000 [ 162.233156][ T8906] wg1 speed is unknown, defaulting to 1000 [ 162.235085][ T8930] lo speed is unknown, defaulting to 1000 [ 162.260293][ T8906] wg1 speed is unknown, defaulting to 1000 [ 162.486787][ T8954] can: request_module (can-proto-0) failed. [ 162.627573][ T8967] netlink: zone id is out of range [ 162.643278][ T8967] netlink: zone id is out of range [ 162.831131][ T8978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.799'. [ 162.864798][ T8978] lo speed is unknown, defaulting to 1000 [ 163.027397][ T8985] netlink: 44 bytes leftover after parsing attributes in process `syz.4.802'. [ 163.073181][ T8983] lo speed is unknown, defaulting to 1000 [ 163.183858][ T8983] wg1 speed is unknown, defaulting to 1000 [ 163.285857][ T8990] bridge0: port 3(syz_tun) entered blocking state [ 163.296685][ T8990] bridge0: port 3(syz_tun) entered disabled state [ 163.310572][ T8990] syz_tun: entered allmulticast mode [ 163.321395][ T8990] syz_tun: entered promiscuous mode [ 163.414666][ T8996] netlink: 'syz.1.807': attribute type 1 has an invalid length. [ 163.513388][ T9001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.809'. [ 163.520521][ T8996] netlink: 21 bytes leftover after parsing attributes in process `syz.1.807'. [ 163.541160][ T8999] lo speed is unknown, defaulting to 1000 [ 163.560644][ T8999] wg1 speed is unknown, defaulting to 1000 [ 163.571520][ T9001] netlink: 'syz.2.809': attribute type 4 has an invalid length. [ 163.585560][ T9001] netlink: 152 bytes leftover after parsing attributes in process `syz.2.809'. [ 163.622910][ T9001] wlan1: mtu less than device minimum [ 163.633421][ T9006] netlink: 'syz.4.810': attribute type 5 has an invalid length. [ 163.699542][ T9006] : entered promiscuous mode [ 163.885508][ T9011] pim6reg: entered allmulticast mode [ 163.906273][ T9015] netlink: 'syz.2.813': attribute type 1 has an invalid length. [ 163.929774][ T9012] pim6reg: left allmulticast mode [ 163.947611][ T9015] netlink: 'syz.2.813': attribute type 1 has an invalid length. [ 163.969664][ T9019] FAULT_INJECTION: forcing a failure. [ 163.969664][ T9019] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 163.998805][ T9015] netlink: 'syz.2.813': attribute type 2 has an invalid length. [ 164.009002][ T9015] netlink: 'syz.2.813': attribute type 1 has an invalid length. [ 164.015992][ T9019] CPU: 0 UID: 0 PID: 9019 Comm: syz.0.814 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 164.016026][ T9019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 164.016039][ T9019] Call Trace: [ 164.016047][ T9019] [ 164.016056][ T9019] dump_stack_lvl+0x241/0x360 [ 164.016100][ T9019] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.016129][ T9019] ? __pfx__printk+0x10/0x10 [ 164.016172][ T9019] should_fail_ex+0x424/0x570 [ 164.016205][ T9019] _copy_from_user+0x2d/0xb0 [ 164.016232][ T9019] do_sock_getsockopt+0x1d5/0x740 [ 164.016265][ T9019] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 164.016290][ T9019] ? __fget_files+0x2a/0x420 [ 164.016321][ T9019] ? __fget_files+0x39d/0x420 [ 164.016349][ T9019] ? __fget_files+0x2a/0x420 [ 164.016382][ T9019] __x64_sys_getsockopt+0x2a3/0x370 [ 164.016416][ T9019] ? __pfx___x64_sys_getsockopt+0x10/0x10 [ 164.016448][ T9019] ? do_syscall_64+0xb6/0x230 [ 164.016480][ T9019] do_syscall_64+0xf3/0x230 [ 164.016509][ T9019] ? clear_bhb_loop+0x45/0xa0 [ 164.016533][ T9019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.016553][ T9019] RIP: 0033:0x7ff65318d169 [ 164.016572][ T9019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.016589][ T9019] RSP: 002b:00007ff653fc1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 164.016612][ T9019] RAX: ffffffffffffffda RBX: 00007ff6533a5fa0 RCX: 00007ff65318d169 [ 164.016628][ T9019] RDX: 0000000000000074 RSI: 0000000000000084 RDI: 0000000000000005 [ 164.016640][ T9019] RBP: 00007ff653fc1090 R08: 00002000000001c0 R09: 0000000000000000 [ 164.016672][ T9019] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 164.016684][ T9019] R13: 0000000000000000 R14: 00007ff6533a5fa0 R15: 00007fff83e29058 [ 164.016708][ T9019] [ 164.270815][ T9011] netlink: 24 bytes leftover after parsing attributes in process `syz.1.811'. [ 164.616796][ T9047] netlink: 'syz.4.820': attribute type 10 has an invalid length. [ 164.718873][ T9047] netlink: 40 bytes leftover after parsing attributes in process `syz.4.820'. [ 164.754426][ T9047] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 164.952231][ T9047] lo speed is unknown, defaulting to 1000 [ 165.017209][ T9047] wg1 speed is unknown, defaulting to 1000 [ 165.074874][ T9070] FAULT_INJECTION: forcing a failure. [ 165.074874][ T9070] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.098761][ T9070] CPU: 0 UID: 0 PID: 9070 Comm: syz.3.827 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 165.098792][ T9070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 165.098804][ T9070] Call Trace: [ 165.098811][ T9070] [ 165.098820][ T9070] dump_stack_lvl+0x241/0x360 [ 165.098889][ T9070] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.098916][ T9070] ? __pfx__printk+0x10/0x10 [ 165.098952][ T9070] should_fail_ex+0x424/0x570 [ 165.098986][ T9070] _copy_from_user+0x2d/0xb0 [ 165.099013][ T9070] sctp_getsockopt_pr_streamstatus+0xd7/0x930 [ 165.099036][ T9070] ? __local_bh_enable_ip+0x168/0x200 [ 165.099072][ T9070] ? __pfx_sctp_getsockopt_pr_streamstatus+0x10/0x10 [ 165.099093][ T9070] ? sctp_getsockopt+0x13a/0xbb0 [ 165.099124][ T9070] sctp_getsockopt+0x9ef/0xbb0 [ 165.099146][ T9070] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 165.099171][ T9070] do_sock_getsockopt+0x391/0x740 [ 165.099203][ T9070] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 165.099228][ T9070] ? __fget_files+0x2a/0x420 [ 165.099259][ T9070] ? __fget_files+0x39d/0x420 [ 165.099287][ T9070] ? __fget_files+0x2a/0x420 [ 165.099320][ T9070] __x64_sys_getsockopt+0x2a3/0x370 [ 165.099352][ T9070] ? __pfx___x64_sys_getsockopt+0x10/0x10 [ 165.099384][ T9070] ? do_syscall_64+0xb6/0x230 [ 165.099416][ T9070] do_syscall_64+0xf3/0x230 [ 165.099444][ T9070] ? clear_bhb_loop+0x45/0xa0 [ 165.099467][ T9070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.099487][ T9070] RIP: 0033:0x7f53dc58d169 [ 165.099505][ T9070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.099522][ T9070] RSP: 002b:00007f53dd3a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 165.099543][ T9070] RAX: ffffffffffffffda RBX: 00007f53dc7a5fa0 RCX: 00007f53dc58d169 [ 165.099559][ T9070] RDX: 0000000000000074 RSI: 0000000000000084 RDI: 0000000000000005 [ 165.099571][ T9070] RBP: 00007f53dd3a2090 R08: 00002000000001c0 R09: 0000000000000000 [ 165.099585][ T9070] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 165.099597][ T9070] R13: 0000000000000000 R14: 00007f53dc7a5fa0 R15: 00007ffc0a2f88e8 [ 165.099622][ T9070] [ 165.482861][ T9080] batadv_slave_1: entered promiscuous mode [ 165.674959][ T9087] lo speed is unknown, defaulting to 1000 [ 165.712144][ T9087] wg1 speed is unknown, defaulting to 1000 [ 165.752317][ T9090] netlink: 60 bytes leftover after parsing attributes in process `syz.3.834'. [ 165.915771][ T9103] netlink: 'syz.1.833': attribute type 10 has an invalid length. [ 165.937858][ T9103] netlink: 40 bytes leftover after parsing attributes in process `syz.1.833'. [ 165.982990][ T9103] veth0_vlan: left promiscuous mode [ 166.027852][ T9103] veth0_vlan: entered promiscuous mode [ 166.065456][ T9103] veth0_vlan: entered allmulticast mode [ 166.075415][ T9103] bridge0: port 3(veth0_vlan) entered blocking state [ 166.082840][ T9103] bridge0: port 3(veth0_vlan) entered disabled state [ 166.092630][ T9103] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 166.346259][ T9087] dccp_invalid_packet: invalid packet type [ 166.834011][ T9153] lo speed is unknown, defaulting to 1000 [ 166.849551][ T9153] wg1 speed is unknown, defaulting to 1000 [ 166.870991][ T9156] lo speed is unknown, defaulting to 1000 [ 166.890623][ T9156] wg1 speed is unknown, defaulting to 1000 [ 167.305297][ T9172] tun0: tun_chr_ioctl cmd 1074025677 [ 167.318814][ T9172] tun0: linktype set to 65512 [ 167.329605][ T9172] tun0: tun_chr_ioctl cmd 1074025677 [ 167.339455][ T9172] tun0: linktype set to 65512 [ 167.348008][ T9175] tun0: tun_chr_ioctl cmd 1074025673 [ 167.678787][ T9192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.860'. [ 167.732353][ T9192] netlink: 104 bytes leftover after parsing attributes in process `syz.2.860'. [ 167.745060][ T9195] lo speed is unknown, defaulting to 1000 [ 167.773684][ T9192] netlink: 56 bytes leftover after parsing attributes in process `syz.2.860'. [ 167.895792][ T9195] wg1 speed is unknown, defaulting to 1000 [ 167.904246][ T9198] lo speed is unknown, defaulting to 1000 [ 167.954136][ T9198] wg1 speed is unknown, defaulting to 1000 [ 168.402227][ T9214] netlink: 68 bytes leftover after parsing attributes in process `syz.1.866'. [ 168.414642][ T9217] netlink: 68 bytes leftover after parsing attributes in process `syz.1.866'. [ 168.663160][ T9176] x_tables: duplicate entry at hook 2 [ 168.772248][ T9227] bridge_slave_0: left allmulticast mode [ 168.796286][ T9227] bridge_slave_0: left promiscuous mode [ 168.808930][ T9227] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.827907][ T9230] netlink: 'syz.1.871': attribute type 10 has an invalid length. [ 168.859465][ T9227] bridge_slave_1: left allmulticast mode [ 168.865179][ T9227] bridge_slave_1: left promiscuous mode [ 168.875708][ T9227] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.900212][ T9227] bond0: (slave bond_slave_0): Releasing backup interface [ 168.969145][ T9227] bond0: (slave bond_slave_1): Releasing backup interface [ 169.016526][ T9227] team0: Port device CĂ removed [ 169.062335][ T9227] team0: Port device team_slave_1 removed [ 169.086342][ T9227] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.108774][ T9227] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.128052][ T9227] batman_adv: batadv0: Removing interface: gretap1 [ 169.136811][ T9227] bond2: (slave ipip0): Releasing backup interface [ 169.176184][ T9230] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 169.214128][ T9242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.228003][ T9242] team0: Port device bond0 added [ 169.238953][ T9231] lo speed is unknown, defaulting to 1000 [ 169.245902][ T9231] wg1 speed is unknown, defaulting to 1000 [ 169.426375][ T9260] lo speed is unknown, defaulting to 1000 [ 169.556474][ T9260] wg1 speed is unknown, defaulting to 1000 [ 169.567949][ T9263] lo speed is unknown, defaulting to 1000 [ 169.676074][ T9263] wg1 speed is unknown, defaulting to 1000 [ 169.902197][ T9274] netlink: 36 bytes leftover after parsing attributes in process `syz.2.883'. [ 170.088834][ T9282] netlink: 24 bytes leftover after parsing attributes in process `syz.2.884'. [ 170.347892][ T9260] dccp_invalid_packet: invalid packet type [ 170.396162][ T9291] netlink: 56 bytes leftover after parsing attributes in process `syz.4.885'. [ 170.465496][ T9293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.886'. [ 170.570851][ T9266] dccp_invalid_packet: invalid packet type [ 170.606450][ T9300] netlink: 28 bytes leftover after parsing attributes in process `syz.2.886'. [ 171.252832][ T9336] xt_TCPMSS: Only works on TCP SYN packets [ 171.254376][ T9329] bond4: entered promiscuous mode [ 171.268696][ T9329] bond4: entered allmulticast mode [ 171.274618][ T9329] 8021q: adding VLAN 0 to HW filter on device bond4 [ 171.289736][ T9331] pim6reg1: entered promiscuous mode [ 171.298848][ T9331] pim6reg1: entered allmulticast mode [ 171.768909][ T9368] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 172.622346][ T9403] lo speed is unknown, defaulting to 1000 [ 172.631603][ T9403] wg1 speed is unknown, defaulting to 1000 [ 172.665121][ T9410] xt_TCPMSS: Only works on TCP SYN packets [ 172.752683][ T9412] bond0: (slave wlan1): Releasing backup interface [ 173.215184][ T9414] netlink: 'syz.2.920': attribute type 6 has an invalid length. [ 173.236592][ T9430] __nla_validate_parse: 6 callbacks suppressed [ 173.236616][ T9430] netlink: 148 bytes leftover after parsing attributes in process `syz.0.924'. [ 173.279037][ T9430] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 173.475995][ T9423] netlink: 16 bytes leftover after parsing attributes in process `syz.3.922'. [ 173.496461][ T9423] netlink: 'syz.3.922': attribute type 6 has an invalid length. [ 173.522845][ T9438] netlink: 'syz.1.926': attribute type 1 has an invalid length. [ 173.583999][ T9438] bond3: entered promiscuous mode [ 173.590359][ T9438] 8021q: adding VLAN 0 to HW filter on device bond3 [ 173.663587][ T9440] bond3: (slave bridge3): making interface the new active one [ 173.729557][ T9440] bridge3: entered promiscuous mode [ 173.736724][ T9440] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 173.831488][ T9448] syzkaller1: entered promiscuous mode [ 173.841934][ T9448] syzkaller1: entered allmulticast mode [ 173.860297][ T9450] netlink: 'syz.2.930': attribute type 1 has an invalid length. [ 174.179770][ T9466] netlink: 24 bytes leftover after parsing attributes in process `syz.4.933'. [ 174.303132][ T9477] tun0: tun_chr_ioctl cmd 2147767520 [ 174.343827][ T9473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.934'. [ 174.422025][ T9473] netlink: 28 bytes leftover after parsing attributes in process `syz.2.934'. [ 175.114841][ T9520] netlink: 'syz.3.948': attribute type 10 has an invalid length. [ 175.172982][ T9520] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 175.310424][ T9526] netlink: 124 bytes leftover after parsing attributes in process `syz.0.951'. [ 175.482229][ T9533] netlink: 24 bytes leftover after parsing attributes in process `syz.3.954'. [ 175.848039][ T9562] netlink: 'syz.1.961': attribute type 3 has an invalid length. [ 176.186956][ T9588] openvswitch: netlink: Flow actions attr not present in new flow. [ 176.339299][ T9603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.972'. [ 176.434355][ T9609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.974'. [ 176.434969][ T9610] netlink: zone id is out of range [ 176.454585][ T9610] netlink: zone id is out of range [ 176.458127][ T9609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.974'. [ 176.463046][ T9610] netlink: set zone limit has 8 unknown bytes [ 176.574899][ T9614] openvswitch: netlink: Message has 4 unknown bytes. [ 176.582687][ T9614] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.606944][ T9618] netlink: 'syz.4.978': attribute type 3 has an invalid length. [ 176.694899][ T9624] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 176.836516][ T9632] team0: Device gtp0 is of different type [ 177.045547][ T9642] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.063931][ T9642] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.072653][ T9642] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.080919][ T9642] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.089542][ T9642] geneve3: entered promiscuous mode [ 177.094823][ T9642] geneve3: entered allmulticast mode [ 177.123535][ T9642] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.147224][ T9642] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.156108][ T9642] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.165080][ T9642] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.324356][ T9650] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 177.477815][ T9662] FAULT_INJECTION: forcing a failure. [ 177.477815][ T9662] name failslab, interval 1, probability 0, space 0, times 0 [ 177.491133][ T9662] CPU: 1 UID: 0 PID: 9662 Comm: syz.1.993 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 177.491162][ T9662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 177.491174][ T9662] Call Trace: [ 177.491181][ T9662] [ 177.491188][ T9662] dump_stack_lvl+0x241/0x360 [ 177.491222][ T9662] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.491250][ T9662] ? __pfx__printk+0x10/0x10 [ 177.491277][ T9662] ? __pfx___might_resched+0x10/0x10 [ 177.491302][ T9662] should_fail_ex+0x424/0x570 [ 177.491336][ T9662] should_failslab+0xac/0x100 [ 177.491365][ T9662] __kmalloc_noprof+0xdf/0x4d0 [ 177.491394][ T9662] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 177.491424][ T9662] ? apparmor_capable+0x13b/0x1b0 [ 177.491448][ T9662] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 177.491481][ T9662] genl_rcv_msg+0x819/0xf00 [ 177.491514][ T9662] ? __pfx_genl_rcv_msg+0x10/0x10 [ 177.491540][ T9662] ? stack_trace_save+0x11a/0x1d0 [ 177.491571][ T9662] ? stack_depot_save_flags+0x3a/0x970 [ 177.491612][ T9662] ? __lock_acquire+0xad5/0xd80 [ 177.491642][ T9662] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 177.491666][ T9662] ? __pfx_nl80211_join_mesh+0x10/0x10 [ 177.491690][ T9662] ? __pfx_nl80211_post_doit+0x10/0x10 [ 177.491723][ T9662] netlink_rcv_skb+0x208/0x480 [ 177.491745][ T9662] ? __pfx_genl_rcv_msg+0x10/0x10 [ 177.491785][ T9662] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 177.491821][ T9662] ? netlink_deliver_tap+0x2e/0x1b0 [ 177.491847][ T9662] genl_rcv+0x28/0x40 [ 177.491871][ T9662] netlink_unicast+0x7f8/0x9a0 [ 177.491907][ T9662] ? __pfx_netlink_unicast+0x10/0x10 [ 177.491944][ T9662] ? skb_put+0x114/0x1f0 [ 177.491973][ T9662] netlink_sendmsg+0x8c3/0xcd0 [ 177.492002][ T9662] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.492025][ T9662] ? aa_sock_msg_perm+0x91/0x160 [ 177.492053][ T9662] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.492071][ T9662] __sock_sendmsg+0x221/0x270 [ 177.492094][ T9662] ____sys_sendmsg+0x523/0x860 [ 177.492128][ T9662] ? __pfx_____sys_sendmsg+0x10/0x10 [ 177.492153][ T9662] ? __fget_files+0x2a/0x420 [ 177.492185][ T9662] ? __fget_files+0x2a/0x420 [ 177.492220][ T9662] __sys_sendmsg+0x271/0x360 [ 177.492252][ T9662] ? __pfx___sys_sendmsg+0x10/0x10 [ 177.492319][ T9662] ? do_syscall_64+0xb6/0x230 [ 177.492351][ T9662] do_syscall_64+0xf3/0x230 [ 177.492379][ T9662] ? clear_bhb_loop+0x45/0xa0 [ 177.492403][ T9662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.492422][ T9662] RIP: 0033:0x7f8fe3b8d169 [ 177.492440][ T9662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.492457][ T9662] RSP: 002b:00007f8fe4a08038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.492478][ T9662] RAX: ffffffffffffffda RBX: 00007f8fe3da5fa0 RCX: 00007f8fe3b8d169 [ 177.492494][ T9662] RDX: 0000000000000004 RSI: 0000200000002a80 RDI: 0000000000000004 [ 177.492506][ T9662] RBP: 00007f8fe4a08090 R08: 0000000000000000 R09: 0000000000000000 [ 177.492518][ T9662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.492530][ T9662] R13: 0000000000000000 R14: 00007f8fe3da5fa0 R15: 00007ffdd07bffb8 [ 177.492557][ T9662] [ 177.758833][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 178.222161][ T9683] tipc: Invalid UDP bearer configuration [ 178.222212][ T9683] tipc: Enabling of bearer rejected, failed to enable media [ 178.275542][ T9683] __nla_validate_parse: 5 callbacks suppressed [ 178.275565][ T9683] netlink: 20 bytes leftover after parsing attributes in process `syz.1.999'. [ 178.326233][ T9692] netlink: 52 bytes leftover after parsing attributes in process `syz.1.999'. [ 178.352510][ T9692] unsupported nlmsg_type 40 [ 178.390152][ T9683] netlink: 'syz.1.999': attribute type 1 has an invalid length. [ 178.406575][ T9689] sctp: [Deprecated]: syz.2.1000 (pid 9689) Use of struct sctp_assoc_value in delayed_ack socket option. [ 178.406575][ T9689] Use struct sctp_sack_info instead [ 178.517355][ T9700] netlink: 'syz.4.1002': attribute type 8 has an invalid length. [ 178.533452][ T9700] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1002'. [ 178.568575][ T9700] netlink: 'syz.4.1002': attribute type 1 has an invalid length. [ 178.594562][ T9700] netlink: 'syz.4.1002': attribute type 2 has an invalid length. [ 178.652390][ T9700] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1002'. [ 178.761904][ T9704] lo speed is unknown, defaulting to 1000 [ 178.788357][ T9710] FAULT_INJECTION: forcing a failure. [ 178.788357][ T9710] name failslab, interval 1, probability 0, space 0, times 0 [ 178.823640][ T9710] CPU: 0 UID: 0 PID: 9710 Comm: syz.4.1005 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 178.823676][ T9710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 178.823689][ T9710] Call Trace: [ 178.823703][ T9710] [ 178.823712][ T9710] dump_stack_lvl+0x241/0x360 [ 178.823747][ T9710] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.823776][ T9710] ? __pfx__printk+0x10/0x10 [ 178.823804][ T9710] ? __pfx___might_resched+0x10/0x10 [ 178.823830][ T9710] should_fail_ex+0x424/0x570 [ 178.823863][ T9710] should_failslab+0xac/0x100 [ 178.823893][ T9710] __kmalloc_noprof+0xdf/0x4d0 [ 178.823926][ T9710] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 178.823956][ T9710] ? apparmor_capable+0x13b/0x1b0 [ 178.823978][ T9710] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 178.824012][ T9710] genl_rcv_msg+0x819/0xf00 [ 178.824044][ T9710] ? __pfx_genl_rcv_msg+0x10/0x10 [ 178.824066][ T9710] ? __dev_queue_xmit+0x1780/0x3f60 [ 178.824094][ T9710] ? kasan_save_track+0x3f/0x80 [ 178.824115][ T9710] ? __kasan_slab_alloc+0x66/0x80 [ 178.824144][ T9710] ? do_syscall_64+0xf3/0x230 [ 178.824186][ T9710] ? __lock_acquire+0xad5/0xd80 [ 178.824217][ T9710] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 178.824240][ T9710] ? __pfx_nl80211_join_mesh+0x10/0x10 [ 178.824264][ T9710] ? __pfx_nl80211_post_doit+0x10/0x10 [ 178.824298][ T9710] netlink_rcv_skb+0x208/0x480 [ 178.824319][ T9710] ? __pfx_genl_rcv_msg+0x10/0x10 [ 178.824347][ T9710] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 178.824383][ T9710] ? netlink_deliver_tap+0x2e/0x1b0 [ 178.824409][ T9710] genl_rcv+0x28/0x40 [ 178.824433][ T9710] netlink_unicast+0x7f8/0x9a0 [ 178.824471][ T9710] ? __pfx_netlink_unicast+0x10/0x10 [ 178.824503][ T9710] ? skb_put+0x114/0x1f0 [ 178.824531][ T9710] netlink_sendmsg+0x8c3/0xcd0 [ 178.824562][ T9710] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.824588][ T9710] ? aa_sock_msg_perm+0x91/0x160 [ 178.824619][ T9710] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.824640][ T9710] __sock_sendmsg+0x221/0x270 [ 178.824662][ T9710] ____sys_sendmsg+0x523/0x860 [ 178.824702][ T9710] ? __pfx_____sys_sendmsg+0x10/0x10 [ 178.824728][ T9710] ? __fget_files+0x2a/0x420 [ 178.824760][ T9710] ? __fget_files+0x2a/0x420 [ 178.824795][ T9710] __sys_sendmsg+0x271/0x360 [ 178.824826][ T9710] ? __pfx___sys_sendmsg+0x10/0x10 [ 178.824892][ T9710] ? do_syscall_64+0xb6/0x230 [ 178.824917][ T9710] do_syscall_64+0xf3/0x230 [ 178.824940][ T9710] ? clear_bhb_loop+0x45/0xa0 [ 178.824960][ T9710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.824976][ T9710] RIP: 0033:0x7f0eead8d169 [ 178.824991][ T9710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.825005][ T9710] RSP: 002b:00007f0eebb82038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.825023][ T9710] RAX: ffffffffffffffda RBX: 00007f0eeafa5fa0 RCX: 00007f0eead8d169 [ 178.825035][ T9710] RDX: 0000000000000004 RSI: 0000200000002a80 RDI: 0000000000000004 [ 178.825046][ T9710] RBP: 00007f0eebb82090 R08: 0000000000000000 R09: 0000000000000000 [ 178.825056][ T9710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.825065][ T9710] R13: 0000000000000000 R14: 00007f0eeafa5fa0 R15: 00007fff2ae33208 [ 178.825086][ T9710] [ 179.161321][ T9713] netlink: 'syz.0.1006': attribute type 4 has an invalid length. [ 179.186868][ T9716] netlink: 'syz.1.1007': attribute type 3 has an invalid length. [ 179.200947][ T9680] netlink: 36 bytes leftover after parsing attributes in process `syz.3.997'. [ 179.213003][ T9716] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1007'. [ 179.341389][ T9720] sit0: entered promiscuous mode [ 179.372757][ T9720] netlink: 'syz.2.1009': attribute type 1 has an invalid length. [ 179.417510][ T9720] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1009'. [ 179.458989][ T9721] netlink: 'syz.2.1009': attribute type 1 has an invalid length. [ 179.466866][ T9721] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1009'. [ 179.479955][ T9722] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 179.541219][ T9722] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.740729][ T9743] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1017'. [ 179.852970][ T9750] FAULT_INJECTION: forcing a failure. [ 179.852970][ T9750] name failslab, interval 1, probability 0, space 0, times 0 [ 179.902589][ T9750] CPU: 0 UID: 0 PID: 9750 Comm: syz.2.1018 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 179.902624][ T9750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 179.902636][ T9750] Call Trace: [ 179.902644][ T9750] [ 179.902652][ T9750] dump_stack_lvl+0x241/0x360 [ 179.902687][ T9750] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.902716][ T9750] ? __pfx__printk+0x10/0x10 [ 179.902746][ T9750] ? __pfx___might_resched+0x10/0x10 [ 179.902771][ T9750] should_fail_ex+0x424/0x570 [ 179.902803][ T9750] should_failslab+0xac/0x100 [ 179.902832][ T9750] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 179.902869][ T9750] ? __alloc_skb+0x1c2/0x480 [ 179.902892][ T9750] ? __dev_queue_xmit+0x1780/0x3f60 [ 179.902923][ T9750] __alloc_skb+0x1c2/0x480 [ 179.902945][ T9750] ? do_syscall_64+0xf3/0x230 [ 179.902974][ T9750] ? __pfx___alloc_skb+0x10/0x10 [ 179.903027][ T9750] ? netlink_ack_tlv_len+0x6e/0x200 [ 179.903050][ T9750] netlink_ack+0x147/0xa70 [ 179.903069][ T9750] ? __pfx_nl80211_join_mesh+0x10/0x10 [ 179.903107][ T9750] netlink_rcv_skb+0x296/0x480 [ 179.903128][ T9750] ? __pfx_genl_rcv_msg+0x10/0x10 [ 179.903156][ T9750] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 179.903192][ T9750] ? netlink_deliver_tap+0x2e/0x1b0 [ 179.903218][ T9750] genl_rcv+0x28/0x40 [ 179.903241][ T9750] netlink_unicast+0x7f8/0x9a0 [ 179.903274][ T9750] ? __pfx_netlink_unicast+0x10/0x10 [ 179.903304][ T9750] ? skb_put+0x114/0x1f0 [ 179.903330][ T9750] netlink_sendmsg+0x8c3/0xcd0 [ 179.903358][ T9750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.903381][ T9750] ? aa_sock_msg_perm+0x91/0x160 [ 179.903411][ T9750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.903431][ T9750] __sock_sendmsg+0x221/0x270 [ 179.903454][ T9750] ____sys_sendmsg+0x523/0x860 [ 179.903485][ T9750] ? __pfx_____sys_sendmsg+0x10/0x10 [ 179.903490][ T9756] pimreg: entered allmulticast mode [ 179.903510][ T9750] ? __fget_files+0x2a/0x420 [ 179.903540][ T9750] ? __fget_files+0x2a/0x420 [ 179.903574][ T9750] __sys_sendmsg+0x271/0x360 [ 179.903605][ T9750] ? __pfx___sys_sendmsg+0x10/0x10 [ 179.903683][ T9750] ? do_syscall_64+0xb6/0x230 [ 179.903717][ T9750] do_syscall_64+0xf3/0x230 [ 179.903747][ T9750] ? clear_bhb_loop+0x45/0xa0 [ 179.903773][ T9750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.903793][ T9750] RIP: 0033:0x7fe6c7d8d169 [ 179.903814][ T9750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.903831][ T9750] RSP: 002b:00007fe6c8c0b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.903866][ T9750] RAX: ffffffffffffffda RBX: 00007fe6c7fa6080 RCX: 00007fe6c7d8d169 [ 179.903883][ T9750] RDX: 0000000000000004 RSI: 0000200000002a80 RDI: 0000000000000004 [ 179.903896][ T9750] RBP: 00007fe6c8c0b090 R08: 0000000000000000 R09: 0000000000000000 [ 179.903910][ T9750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.903923][ T9750] R13: 0000000000000001 R14: 00007fe6c7fa6080 R15: 00007ffd95fff718 [ 179.903949][ T9750] [ 180.312340][ T9756] pimreg: left allmulticast mode [ 180.397677][ T9774] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1025'. [ 180.452064][ T9762] lo speed is unknown, defaulting to 1000 [ 180.455106][ T9774] netlink: 'syz.4.1025': attribute type 10 has an invalid length. [ 180.477324][ T9767] lo speed is unknown, defaulting to 1000 [ 180.481762][ T9774] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 180.536450][ T9774] 8021q: VLANs not supported on sit0 [ 180.660823][ T9778] batman_adv: batadv0: Adding interface: dummy0 [ 180.667238][ T9778] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.697788][ T9778] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 180.920458][ T9791] No such timeout policy "syz0" [ 181.072907][ T9797] FAULT_INJECTION: forcing a failure. [ 181.072907][ T9797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.113990][ T9797] CPU: 0 UID: 0 PID: 9797 Comm: syz.1.1032 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 181.114026][ T9797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 181.114038][ T9797] Call Trace: [ 181.114046][ T9797] [ 181.114055][ T9797] dump_stack_lvl+0x241/0x360 [ 181.114105][ T9797] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.114133][ T9797] ? __pfx__printk+0x10/0x10 [ 181.114173][ T9797] should_fail_ex+0x424/0x570 [ 181.114206][ T9797] _copy_to_user+0x31/0xb0 [ 181.114234][ T9797] simple_read_from_buffer+0xc4/0x170 [ 181.114265][ T9797] proc_fail_nth_read+0x1ef/0x260 [ 181.114299][ T9797] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 181.114333][ T9797] ? rw_verify_area+0x246/0x630 [ 181.114353][ T9797] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 181.114385][ T9797] vfs_read+0x21f/0xb90 [ 181.114409][ T9797] ? __pfx___mutex_lock+0x10/0x10 [ 181.114440][ T9797] ? __pfx_vfs_read+0x10/0x10 [ 181.114463][ T9797] ? __fget_files+0x2a/0x420 [ 181.114493][ T9797] ? __fget_files+0x39d/0x420 [ 181.114544][ T9797] ? __fget_files+0x2a/0x420 [ 181.114586][ T9797] ksys_read+0x19d/0x2d0 [ 181.114608][ T9797] ? __pfx_ksys_read+0x10/0x10 [ 181.114634][ T9797] ? do_syscall_64+0xb6/0x230 [ 181.114665][ T9797] do_syscall_64+0xf3/0x230 [ 181.114700][ T9797] ? clear_bhb_loop+0x45/0xa0 [ 181.114724][ T9797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.114743][ T9797] RIP: 0033:0x7f8fe3b8bb7c [ 181.114767][ T9797] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 181.114784][ T9797] RSP: 002b:00007f8fe4a08030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 181.114810][ T9797] RAX: ffffffffffffffda RBX: 00007f8fe3da5fa0 RCX: 00007f8fe3b8bb7c [ 181.114830][ T9797] RDX: 000000000000000f RSI: 00007f8fe4a080a0 RDI: 0000000000000005 [ 181.114843][ T9797] RBP: 00007f8fe4a08090 R08: 0000000000000000 R09: 0000000000000000 [ 181.114856][ T9797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.114868][ T9797] R13: 0000000000000000 R14: 00007f8fe3da5fa0 R15: 00007ffdd07bffb8 [ 181.114894][ T9797] [ 181.426754][ T9801] netlink: 'syz.1.1033': attribute type 10 has an invalid length. [ 181.452613][ T9801] team0: Cannot enslave team device to itself [ 181.465972][ T9801] vlan3: entered promiscuous mode [ 181.478576][ T9801] vlan0: entered promiscuous mode [ 181.491685][ T9801] vlan3: entered allmulticast mode [ 181.497077][ T9803] xt_connbytes: Forcing CT accounting to be enabled [ 181.498655][ T9801] vlan0: entered allmulticast mode [ 181.504301][ T9803] Cannot find add_set index 18 as target [ 181.532091][ T9801] team0: Port device vlan3 added [ 181.785407][ T9815] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 181.952321][ T9821] syzkaller1: entered promiscuous mode [ 181.963990][ T9821] syzkaller1: entered allmulticast mode [ 182.163311][ T9832] batadv_slave_1: left promiscuous mode [ 182.183181][ T9832] 0·: left allmulticast mode [ 182.194616][ T9832] hsr_slave_0: left allmulticast mode [ 182.261772][ T9832] vlan2: left promiscuous mode [ 182.276927][ T9832] team0: left promiscuous mode [ 182.291329][ T9832] team_slave_0: left promiscuous mode [ 182.299442][ T9832] team_slave_1: left promiscuous mode [ 183.106280][ T9881] sctp: [Deprecated]: syz.3.1060 (pid 9881) Use of int in max_burst socket option. [ 183.106280][ T9881] Use struct sctp_assoc_value instead [ 183.150638][ T9881] IPVS: Error joining to the multicast group [ 183.185970][ T9889] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 183.393877][ T9907] __nla_validate_parse: 6 callbacks suppressed [ 183.393898][ T9907] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1067'. [ 183.472069][ T9907] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1067'. [ 183.503390][ T9897] gretap3: entered promiscuous mode [ 183.509217][ T9910] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1071'. [ 183.545665][ T9914] lo speed is unknown, defaulting to 1000 [ 183.552873][ T9910] netlink: 'syz.2.1071': attribute type 1 has an invalid length. [ 183.581754][ T9918] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1070'. [ 183.611718][ T9918] netlink: zone id is out of range [ 183.617691][ T9918] netlink: zone id is out of range [ 183.629417][ T9918] netlink: zone id is out of range [ 183.643902][ T9925] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1074'. [ 183.655601][ T9918] netlink: zone id is out of range [ 183.679717][ T9918] netlink: zone id is out of range [ 183.684968][ T9918] netlink: zone id is out of range [ 183.690238][ T9918] netlink: zone id is out of range [ 183.698673][ T9918] netlink: zone id is out of range [ 183.705821][ T9918] netlink: zone id is out of range [ 183.715372][ T9918] netlink: zone id is out of range [ 183.735113][ T9925] netlink: 984 bytes leftover after parsing attributes in process `syz.0.1074'. [ 183.815113][ T9935] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 183.993149][ T9950] netlink: 'syz.4.1082': attribute type 30 has an invalid length. [ 184.053424][ T9950] netlink: 'syz.4.1082': attribute type 1 has an invalid length. [ 184.086272][ T9957] netlink: 'syz.3.1083': attribute type 29 has an invalid length. [ 184.150211][ T9957] team0: Device gtp0 is of different type [ 184.231749][ T9963] netlink: 284 bytes leftover after parsing attributes in process `syz.4.1087'. [ 184.334404][ T9967] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1088'. [ 184.343624][ T9967] netlink: 'syz.1.1088': attribute type 7 has an invalid length. [ 184.352914][ T9967] netlink: 'syz.1.1088': attribute type 8 has an invalid length. [ 184.365455][ T9967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1088'. [ 184.387491][ T9967] bridge0: entered promiscuous mode [ 184.403366][ T9967] bridge0: left promiscuous mode [ 184.426013][ T9972] lo speed is unknown, defaulting to 1000 [ 184.601286][ T9980] lo speed is unknown, defaulting to 1000 [ 184.684704][ T9986] atomic_op ffff88805c97d998 conn xmit_atomic 0000000000000000 [ 185.035102][ T9977] lo speed is unknown, defaulting to 1000 [ 185.099981][T10004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1101'. [ 185.161652][T10004] gretap1: entered promiscuous mode [ 185.196576][T10009] lo speed is unknown, defaulting to 1000 [ 185.525872][T10017] Bluetooth: MGMT ver 1.23 [ 186.019046][T10035] netlink: 'syz.3.1109': attribute type 13 has an invalid length. [ 186.286361][T10055] tipc: Enabling of bearer rejected, failed to enable media [ 186.295896][T10060] tipc: Enabling of bearer rejected, failed to enable media [ 186.456677][T10059] netlink: 'syz.0.1116': attribute type 10 has an invalid length. [ 186.524064][T10059] batman_adv: batadv0: Adding interface: team0 [ 186.554740][T10068] netlink: 'syz.0.1116': attribute type 10 has an invalid length. [ 186.565715][T10059] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.634121][T10059] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 186.661958][T10072] syz_tun: left allmulticast mode [ 186.667313][T10072] syz_tun: left promiscuous mode [ 186.686568][T10072] bridge0: port 3(syz_tun) entered disabled state [ 186.758816][T10072] bond0: (slave dummy0): Releasing backup interface [ 186.769575][T10072] bridge_slave_0: left allmulticast mode [ 186.787282][T10072] bridge_slave_0: left promiscuous mode [ 186.807711][T10072] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.049315][T10072] bridge_slave_1: left allmulticast mode [ 187.055380][T10072] bridge_slave_1: left promiscuous mode [ 187.068720][T10072] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.097271][T10072] bond0: (slave bond_slave_0): Releasing backup interface [ 187.150594][T10072] bond0: (slave bond_slave_1): Releasing backup interface [ 187.178282][T10072] team0: Port device team_slave_0 removed [ 187.196696][T10072] team0: Port device team_slave_1 removed [ 187.203779][T10072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.233238][T10072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.259618][T10072] bond0: (slave netdevsim0): Releasing backup interface [ 187.270617][T10072] bond2: (slave ip6gretap1): Releasing backup interface [ 187.286624][T10068] team0: entered promiscuous mode [ 187.291875][T10068] team_slave_0: entered promiscuous mode [ 187.297703][T10068] team_slave_1: entered promiscuous mode [ 187.309088][T10068] bond0: entered promiscuous mode [ 187.314180][T10068] bond_slave_1: entered promiscuous mode [ 187.330382][T10068] macvlan0: entered promiscuous mode [ 187.345513][T10068] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.368853][T10068] batman_adv: batadv0: Interface activated: team0 [ 187.375544][T10068] batman_adv: batadv0: Interface deactivated: team0 [ 187.382643][T10068] batman_adv: batadv0: Removing interface: team0 [ 187.404464][T10085] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 187.588181][T10097] netlink: 'syz.3.1126': attribute type 21 has an invalid length. [ 187.619888][T10096] netlink: 'syz.1.1125': attribute type 10 has an invalid length. [ 188.205996][T10129] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 188.342775][T10128] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000007: 0000 [#1] SMP KASAN PTI [ 188.354723][T10128] KASAN: null-ptr-deref in range [0x0000000000000038-0x000000000000003f] [ 188.363166][T10128] CPU: 0 UID: 0 PID: 10128 Comm: syz.2.1133 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 188.374916][T10128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 188.384995][T10128] RIP: 0010:sysfs_move_dir_ns+0xad/0xe0 [ 188.390580][T10128] Code: 9a 48 c1 e8 03 42 80 3c 28 00 74 0c 48 c7 c7 c0 5e 7c 9a e8 55 cf c0 ff 48 8b 1d fe 80 11 18 49 8d 7f 38 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 37 cf c0 ff 49 8b 57 38 4c 89 ff 48 89 de [ 188.410309][T10128] RSP: 0018:ffffc9000e7675b0 EFLAGS: 00010202 [ 188.416414][T10128] RAX: 0000000000000007 RBX: ffff888143acad20 RCX: ffff888025fd1e00 [ 188.424593][T10128] RDX: 0000000000000000 RSI: ffff888143ab1f00 RDI: 0000000000000038 [ 188.432681][T10128] RBP: ffffc9000e7676a8 R08: ffffffff8c2002dc R09: ffffffff8c1ff320 [ 188.440691][T10128] R10: 0000000000000008 R11: ffff888025fd1e00 R12: ffff888143ab1f30 [ 188.448695][T10128] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 188.456833][T10128] FS: 0000000000000000(0000) GS:ffff888124fea000(0000) knlGS:0000000000000000 [ 188.465900][T10128] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 188.472489][T10128] CR2: 000020000060a030 CR3: 00000000601d8000 CR4: 00000000003526f0 [ 188.480469][T10128] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 188.488446][T10128] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 188.496421][T10128] Call Trace: [ 188.499708][T10128] [ 188.502670][T10128] ? __die_body+0x5f/0xb0 [ 188.507009][T10128] ? die_addr+0xab/0xd0 [ 188.511171][T10128] ? exc_general_protection+0x3e6/0x5d0 [ 188.516731][T10128] ? asm_exc_general_protection+0x26/0x30 [ 188.522460][T10128] ? vsnprintf+0x190/0x1230 [ 188.526968][T10128] ? vsnprintf+0x114c/0x1230 [ 188.531568][T10128] ? sysfs_move_dir_ns+0xad/0xe0 [ 188.536955][T10128] kobject_move+0x359/0x480 [ 188.541477][T10128] ? __pfx_kobject_move+0x10/0x10 [ 188.546519][T10128] ? get_device_parent+0x25d/0x410 [ 188.551639][T10128] device_move+0xdf/0x710 [ 188.555979][T10128] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 188.561973][T10128] ? hci_conn_unlink+0x5a2/0x630 [ 188.566984][T10128] hci_conn_del_sysfs+0xb5/0x170 [ 188.571956][T10128] hci_conn_del+0x8d5/0xc50 [ 188.576509][T10128] hci_conn_hash_flush+0x18e/0x240 [ 188.581646][T10128] hci_dev_close_sync+0xa8d/0x1260 [ 188.586803][T10128] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 188.592380][T10128] ? rcu_is_watching+0x15/0xb0 [ 188.597170][T10128] hci_unregister_dev+0x20b/0x510 [ 188.602231][T10128] vhci_release+0x80/0xd0 [ 188.606584][T10128] ? __pfx_vhci_release+0x10/0x10 [ 188.611628][T10128] __fput+0x3e9/0x9f0 [ 188.615638][T10128] task_work_run+0x251/0x310 [ 188.620244][T10128] ? __pfx_task_work_run+0x10/0x10 [ 188.625365][T10128] ? do_exit+0xa25/0x2940 [ 188.629700][T10128] ? do_exit+0xa25/0x2940 [ 188.634040][T10128] do_exit+0xa2a/0x2940 [ 188.638210][T10128] ? do_raw_spin_lock+0x151/0x370 [ 188.643244][T10128] ? __pfx_do_exit+0x10/0x10 [ 188.647841][T10128] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 188.653248][T10128] do_group_exit+0x207/0x2c0 [ 188.657849][T10128] ? _raw_spin_unlock_irq+0x23/0x50 [ 188.663061][T10128] ? lockdep_hardirqs_on+0x9d/0x150 [ 188.668268][T10128] get_signal+0x1696/0x1730 [ 188.672790][T10128] ? __pfx_get_signal+0x10/0x10 [ 188.677653][T10128] arch_do_signal_or_restart+0x98/0x840 [ 188.683210][T10128] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 188.689405][T10128] ? syscall_exit_to_user_mode+0xa3/0x340 [ 188.695222][T10128] syscall_exit_to_user_mode+0xce/0x340 [ 188.700783][T10128] do_syscall_64+0x100/0x230 [ 188.705385][T10128] ? clear_bhb_loop+0x45/0xa0 [ 188.710074][T10128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.715972][T10128] RIP: 0033:0x7fe6c7d8d169 [ 188.720393][T10128] Code: Unable to access opcode bytes at 0x7fe6c7d8d13f. [ 188.727409][T10128] RSP: 002b:00007ffd95fff878 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 188.735829][T10128] RAX: fffffffffffffdfc RBX: 000000000002df11 RCX: 00007fe6c7d8d169 [ 188.743813][T10128] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe6c7fa608c [ 188.751797][T10128] RBP: 0000000000000032 R08: 7fffffffffffffff R09: 0000000595fffb6f [ 188.759771][T10128] R10: 00007ffd95fff970 R11: 0000000000000246 R12: 00007fe6c7fa608c [ 188.767745][T10128] R13: 00007ffd95fff970 R14: 000000000002df43 R15: 00007ffd95fff990 [ 188.775729][T10128] [ 188.778750][T10128] Modules linked in: [ 188.805871][T10128] ---[ end trace 0000000000000000 ]--- [ 188.824556][T10128] RIP: 0010:sysfs_move_dir_ns+0xad/0xe0 [ 188.832752][T10128] Code: 9a 48 c1 e8 03 42 80 3c 28 00 74 0c 48 c7 c7 c0 5e 7c 9a e8 55 cf c0 ff 48 8b 1d fe 80 11 18 49 8d 7f 38 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 37 cf c0 ff 49 8b 57 38 4c 89 ff 48 89 de [ 188.885710][T10128] RSP: 0018:ffffc9000e7675b0 EFLAGS: 00010202 [ 188.926930][T10128] RAX: 0000000000000007 RBX: ffff888143acad20 RCX: ffff888025fd1e00 [ 188.947029][T10128] RDX: 0000000000000000 RSI: ffff888143ab1f00 RDI: 0000000000000038 [ 188.967271][T10128] RBP: ffffc9000e7676a8 R08: ffffffff8c2002dc R09: ffffffff8c1ff320 [ 188.987094][T10128] R10: 0000000000000008 R11: ffff888025fd1e00 R12: ffff888143ab1f30 [ 189.007756][T10128] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 189.018642][T10128] FS: 0000000000000000(0000) GS:ffff888124fea000(0000) knlGS:0000000000000000 [ 189.027628][T10128] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 189.054663][T10128] CR2: 00007f8fe3d762d8 CR3: 0000000034c9c000 CR4: 00000000003526f0 [ 189.068672][T10128] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 189.086882][T10128] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 189.104628][T10128] Kernel panic - not syncing: Fatal exception [ 189.111077][T10128] Kernel Offset: disabled [ 189.115584][T10128] Rebooting in 86400 seconds..