last executing test programs: 3m47.395794468s ago: executing program 0 (id=3356): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) syz_emit_ethernet(0x10a2, &(0x7f0000000040)={@empty, @remote, @void, {@mpls_uc={0x8847, {[{0x51}, {0x3fc0, 0x0, 0x1}, {0xc83}, {0x2}, {0x2}, {0x7ff, 0x0, 0x1}, {0x800, 0x0, 0x1}, {0x4, 0x0, 0x1}], @ipv4=@udp={{0x19, 0x4, 0x0, 0x14, 0x1074, 0x67, 0x0, 0x9, 0x11, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x3c}, {[@timestamp_prespec={0x44, 0x3c, 0xdc, 0x3, 0xd, [{@local, 0xf}, {@broadcast, 0x800}, {@private=0xa010100, 0x1}, {@empty, 0x2}, {@broadcast, 0x9b4}, {@multicast1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}]}, @rr={0x7, 0x13, 0x65, [@multicast1, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x18}, @remote]}]}}, {0x4e22, 0x4e24, 0x1010, 0x0, @gue={{0x2, 0x0, 0x1, 0x81, 0x100}, "6c111ecd95f51d03268b26e395cedd0087e832a479b917c17896d921d665764ddce04b6af3ca76f51987d9cf7ae341480cba3cda15922025825f3d4e98f796b15731a4bc1a3ea6deda87cb183af442e7a224185cdc29bc2e97a09d4c5bd1df95596dc2871149ac4de8644791abdf5d7ac726e361e6afb4027c576e46962a186c4bdb5daf0ce973aedccdb9e87692d8ebd5a4115e1cd14d93e87bb682515e7f2cba2441331706ba120c055587d2d8a5d126dbc2563391255e43f0b27856a4ea4a55123cf6bd4a15a83e4c0ad5580c9d86bf98969968e6ad1be48eb953d79758e8feeaeb078e750d00f90fdeaef58e54b9172321e2075b2e638337004091a4eb99e4109f47466e122089b9c3ca8672104a5b6710a1814585fd179f68edfb1895f00280a64ec3744d99543c06fa1192258f21c58f908b15d7f40bfbb460b4e82240f04a6c9c5dbd6436f49b398e2d49bade9a3ce1fb3303a9f17e0d75175c6bff0c7c76b33dc48c99560759bdd92aa942f0001d9e22a4a4677d8b6c02ddfd7305a19cad7574a003401a4ce475ec981f0be685f3df850e5bf83a8ab695aacf79936a8a1af925d394a6909c6b2903dd0a433e0b15bd7b5932e0e2e7ec86213c6205514ece836978a0b411489c651a58eb608f92e82ba8c04bb10fa1789b617bf54811eeef5cde6249fdf6fa6ce028b8d7f0be15018f0de5025165a6832d6b9cbda88d8fa2974d1d63f0c59f3ceb6bebf66bef0a01a0bed58f86730e2e273beca203725818aacc7f4212e61b0e2af120ce79d21a82120c9f414b9a7509f534fd4dc9072a8472f647e548d01814c8de848f54021068832775e998cf0f9e2aa8c07a4f26efb80a76f15007d07da5f00be6396b86f4ae1a2df7dc4e12ece17a933ea0f71fd14c8792ed1b9a8005643c7dc13fbb125bd9888b07c029c27a89330de32ed0621829affac3b439d3c155cfcf9f1261358fa276d54f90c23e303ab784d5bc9f9cabce9dcec50680c8462f7e31009addcd78323069192da23069b6e3fc457057ac6af097379133f98ddc5b6111f453e01db5ff4d78b0b0dde571b1ee32873804abe35734a613a0155e6bfc0bff43428fcf6852f9cade42c134b551b54210d641c00146f75d08ea38c4bf18047f488a28c20beeb212b32d5ef774d561018978b778bc0689a081ac4244a954b8ebc35207e02b4b6679527549cb0819545a826f293912afafc99687092189d368b11bd0c4aa8e005a8cbb764d1f70e692ec237c2a6e079bfcdea14475a24ef2db8b26633019e560dc13a7c510a57bb9c5f165e37fab5cc875e5486bf61d5db41760569d0d6b9ff925e3fe6da6b8e0376d2b3b9f1eddac42df3a61e9e7c998ee13e22e18ada0ba4af141732c830c35480d7ca4063c797aeea6d06d5948ee14dea27b1c5057dd9f4a75a5928a6d84447205318b87bd6a37af25210c57407a509ab4cb3dcb770fc1a0d38ed9f483fc4af11d47624894de9eecbc716b925409d01b6c0d2e7065d3a82defb8a8bafada3d5a7a8074909b16b167cd145cb023596355fe1ad87a37cc794c136fa3d311e9c8d6bf55a96cdf9683c29984dc423be808f4854051ee5f343ab36d85591cfa1850b00e55531e421dc339cdd9cece5d682e9ad8b2ba9d4e44f019a79b20ecdeebac4427d9d8f06b5a9d575624f8ef9529b944974981b9e59014e0efeacfe13a06bc885cd7dba6c4fd23aa6f1633053e235dd0425365a725138cc76fd717affbd3aa1381528225377eec42dcde5d0dad897072c6cebb5f1898520379ad91971cc27847ec86aaedb36f064f44395acc5d2fd91342a543edbd4d0dae8475b1cf9571b4081f8a88dc6822de5e6f98945abdc92cc8221ee23f160c10ce56d59f0dc3bec0b417b17e861ccfc3406481eca247d6359e6c6ed355ad5116ffe07dc43996950a51888553dd251a24aef32710b8317ce5d3d60297393c48e97c8d77c79e77f03abe36951692af617b3110766f91e1ba30542f56e07ce04e0c754c80062cc5d13e8f9b612a71160a4b7aba29486231873f652feb2bdfd096a604d1a99a42bb9d420e9f1ab8aaf3f83fc3a98571d802c4da253977a8a05152fd7d362b8d8025af0aefbc66cf8f152daf88a5111b8c524ac6869ea8b6b23e1cdec85583a36db3294236642cb13b0b7560c8e9c21887b57a768fa84324b75852682b3242a600853d66473e7d4462cb698fede9e55e99982e5fc8ea4da2357d226dcf9fe2c41866f3123944c7241eb991fbb69fc32fe7fcd89d622f3401d563bc1938e6f70b59278c493bcff8f691c0e5003b21edd405b3e62fbe1dc550caede6baf83ccd1b93b57b6e031b384b2c17da34a5eef80a1ca7480ca7cb65057b65588e6aeab930696b1e15abd4a4e77b9392b6d98aa8302a8528273caa74dc623e8f565eea5dfc594bf95efebad9580a7653583f88aeebd52bc391c84ef00917de2dabad4903a26cf15274e97b8d96eabd148cca5705f9eae95349e2a277041dd305475724c5fef977ff8eee5f7798210ddc7435ec4e7339966c6eda7fe5e697cb1f554fb2b8a3538e7103d36783e9e8b47cfdd8426648e524e20ea99aa3246a765730ffc400955a6c4341e11b6d73d9b3696549adfdf071a1d765d80700273cb60c947464305b4baa751f89e9da21b4456a0b5d7140c46889019f8be013e6b3decd9484b1d3bc6a7668ef4f48a5a2b9edcb452990d027d95de1449021fd78613827a98a7b8d06cdda67fc24584aeb224b2999f2ebd65c7840a0bd821aa8fa95ccaa9296574ee2c6bf907aafc1fe51027c623e4a86fa162dd630cd34005212945360d0e5b6504c63c66682c85d6583b878595fbc23b894842722a7a4405b0a7639ca8ad84b5d32bfbc27e3e544cde81a281e7f01806c273081b764beda8a5769b7b3e045de86902ed7d97b0df4378fd9900ae3ffd52491a51769973d4a0f243b3bb2fa3304cfe76d952ed2ca0f6a323a9725e0d611df8de8a533c9df8ad11fb1f69232bacd516aa39be30dca04b83b32b116d47d367cb710c62005c8cc0d927907ae963ea0184149a6ef48de092476b11c6eba7d6a0f6c5598d631d99cebdb1fdc5a9ae40c55e88ecc6f1a8957451b31f233de484eab7503a577ca2c585a1f4fde64627feaf630830489db8d7a113aba7bcce6b3842b5396adef4e987412c83ee9365a7a17a28ecca94533e86d4c7e296f8705beddc16cf4acd20d4d2e63e0e91107c44975542100a33dcd7c4927d69e09efa414807b88b8e8e4648e5a212f26aa7f7d6a5f7dc67329dfb51e973395cebd10f268f4ca5bbcf269a2c9fefd4f6e063bb72c02789182f88c5212cbe0fae150c77d5138febad1c1de1175421488063fde7c059b0fd905e73322285722f32d8e6ac81f09408b011009bd8cafea50065207668735dacf4682c9f36c4cb6f647f60586d8a4e8fe652cb498e3822e8eec094d6d7e7eff6ad998d9b84c460fc48e8841a448e1fcc78965324722897e82d23d86a84278a9f71f78c501b306790f65b9eac2d3c0ae5fb984a415bca160c418880f5097864095caff9c3e973e16ccb5092e60eb4b3e7bebadeed654e5e5adb7501812814be48f475ca8f6659719852c12aaf9af1fd2cd62a061bfe82544bca3489b86fb63634247486393268cab23ab89e8c9036476aa9da4f714b670a9c8e82e8df6a9b9412e21227431ff2e81b6c8c865f8dbe597fcb9a4a031926ed55733acda9fc8af6bbd77f9a4c456422a2eb025bfe0fd72c33f5abc4cf2fdb3af8baae06eb0a7a69a6f62db8b16b2c43ec3e01136063cacc780e7af19063e7c70f131f9f0388ba88c559394fe7fa84db4682611e9237e5d0be80f0c62b9421d66c1ba21bbfc71994ca0626d73fd4cdbc4b134e91103dfbe30babd3f7d8ecec198f317134f2862ec02f705a9cc821fe01712e187428cbba7f2962da03076da831936a810a4126c4134cd485ac8772d9a01169feb2e60602cc0e735be27d44fbfb7696491742ae4a65055d2eb7cee3af95fff376f2e4f0a27b7faf03697fb083954ea0ce2e463e0a5f34254e2d7df8102efd2376f344bd46a2536daf42fc25f630f6bc7cf8caf6e300697a0f6721d7bb94574602350ef20433723a65b5d321e777151d92fa329407a3836693a716a8930487d49bbd2d7a472025661cb7d5515af14acca1cc96309b43e497974022cd11f775241f976417189635d1672a674c1bcd5bba8058eeebf8e3710cf432f8a116411934f25e9da05b2254eb06b2a00ac372bcb043b4f9939b98e763c8633eada84b7dfea1c9a28cd4beb6824b942b0044e6f031b2ff4c10abb11cb2e07587cbce947a8bfe9b4ecf46908be327ba2ea01ac1cd454269371d90a23e05ffbc0dbdbc8cf1d224e5348eb920509da760139909bbe788747c0c6d54bbc81f98c742e3a1f050af43a42d0af1f21dfef43b92cc567afa6235081b597b8fa6c9282eb955a79e93b7d71c93ccf40fe683801b65b42bf76e8bcfca94c5284867e6b09ef83beca9a1ddbc2f9a68eb625d6db604e28db33f831acd6b17c90e6a02479d6fd7d849765dc753014a448a0b1f7ee19a5949ba777abff1c993ef1dc47da56bb37fdb6ebeb85e168e68c6082cd91cc1c352d3ec0f0bb73bdd590809f2187293b82dcc4eafb0cdc3a428b4500397626568d72674b76e8d9da5525d05aa07ffd2338eafdb9b796150552731f16a321d890c09a9a23ab02c97ae5268641096b2ba678efc5c65e50bd662a722f09c4e020dd898e9c73bce6307277b635ed8a0bb3a7f92119a7ad9fffc9d37b6dc7e1ea2229034fb25455ad1b984daf11e3ec693ab8bae7c7c77e4f9152b1e2e1589f2f2bba573a5511e34dccf29bade21f96d054b4f0f054a1beae58eb4bb373097e76b50205f8bc13b5a6ffc026da4c82f87ab9b340cf2acb0630a1e02285e7b61c7a18a9985de093022cac01df83d54f3751ed6136214ee01bd8ce4f0bb9822800ee36b3ee5675273dc4b58491260699b937cb3e87bf5d873e39774694790283f68253a791978cd997c528a59d4c40834ab3ea28835f92de9eb8e24f1cc7af34b7b7f1a397f9a7d3755f9ca3f4110256267365081bd1ffabb6fa27b355ebd8ab8fb9d756a62426f191628c0cff632cbe80016753c764135353a602ca9b45012055aec4f557fe7089abc9cef48ade367f9310f17aa6bf38f9fc1496d08542181aa11fe5dca3bb94e39bd27625c38aed0538ff2aec953203242f069b203a8640e829704756ed808b121946f518b221ff308b770329313f17c11ea9e14290d5f96d61e8bd72df0537da712a802395ba3de123affd033ef2d7c9cf809e763dafc3d3b86f52a3bc79e0c5c8d8d5789c5e3e09a76bf72537ad210f441887af2b20dc2b7094971a6662f356b8ea1028c3245fa3a76f595024152ff2b60df53d4ae5ecf27b39cc8fbd1e06098a9dd47b8e0da4f60e0e7329a14de5925956c8822f5594cfe7f38f9a355a91f0672ab7fc43d68bf933b9f559336b0f21fd6e9dcf9844646634a757f5c62eaf893c2c8157f06b9fa29f52d1fce054b8271fc0ce2167aaf4daa06ca0b11541e2e4fcc68f7cf60c832285ccc65ecc6882f2345938a098f393b2e658dcb47a31a6c00b5f7812d77074cbf3dc174178072739b2190fc9941fe9e01aada10678e3936d6e39422ef2a1b8e6d79ba07859a7cdb52a037c31057712dd114e69553e9404ba179c72392420ce5aa40d244294111b9f7320c4202b0f68bc7f5c6dfd1df4c0d6b644d8ad8978a2d4a62a47d7ea902dfa8659ca32ae"}}}}}}}, &(0x7f0000001100)={0x0, 0x1, [0x477, 0x71c, 0xf9, 0x358]}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001140)='cgroup.stat\x00', 0x0, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000001180)={'geneve0\x00'}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f00000011c0)={0x0, @aes128, 0x0, @desc3}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001200)={0x0, 0x0, 0x100000000, 0x8416}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001240)={0x80000003}) getsockname$qrtr(r1, &(0x7f0000001280), &(0x7f00000012c0)=0xc) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x20, 0x1, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001440), r1) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000001540)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x7c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xcc}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x12}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x48080}, 0x24004000) r3 = socket$isdn_base(0x22, 0x3, 0x0) recvmsg(r3, &(0x7f0000003bc0)={&(0x7f0000001580)=@phonet, 0x80, &(0x7f0000003a40)=[{&(0x7f0000001600)=""/5, 0x5}, {&(0x7f0000001640)=""/150, 0x96}, {&(0x7f0000001700)=""/186, 0xba}, {&(0x7f00000017c0)=""/235, 0xeb}, {&(0x7f00000018c0)=""/183, 0xb7}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000002980)=""/129, 0x81}, {&(0x7f0000002a40)=""/4096, 0x1000}], 0x8, &(0x7f0000003ac0)=""/229, 0xe5}, 0x40) ioctl$sock_x25_SIOCDELRT(r1, 0x890c, &(0x7f0000003c00)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}, 0x8, 'netdevsim0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000003d00)={'batadv_slave_1\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000003d40)={{{@in6=@ipv4={""/10, ""/2, @private}, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000003e40)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000003e80)={{{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xe}}, @in=@multicast2, 0x4e22, 0x48, 0x4e23, 0x4, 0x2, 0x0, 0x0, 0x6, r4, r5}, {0xffffffff80000001, 0x8, 0x427b, 0x9, 0x100000001, 0xafc, 0x4, 0x8441}, {0x100, 0x2, 0x9, 0xfffffffffffffffa}, 0x8, 0x6e6bbb, 0x1, 0x0, 0x1, 0x1}, {{@in=@private=0xa010100, 0x4d3}, 0x2, @in=@empty, 0x0, 0x4, 0x0, 0x8, 0x6, 0x5, 0x4}}, 0xe8) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000003f80)={r1}) connect$netrom(r1, &(0x7f0000003fc0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @bcast, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000004080), r1) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000004180)={&(0x7f0000004040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004140)={&(0x7f00000040c0)={0x50, r6, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004000}, 0x2000c004) getpid() r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004200), r1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000004240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000004300)={&(0x7f00000041c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000042c0)={&(0x7f0000004280)={0x1c, r7, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0xc000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000004340)={'batadv_slave_1\x00'}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f00000044c0)={&(0x7f0000004380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000004480)={&(0x7f00000043c0)={0xb4, r7, 0x300, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x1}}}}, [@NL80211_ATTR_MAC={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xb}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x1}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000080}, 0x8880) vmsplice(r3, &(0x7f0000005880)=[{&(0x7f0000004500)="57f3d7bb92ec61c0a030a9149102896bc948c4cdb019302fbbeedb655c1c3dbb38872c93f1ed32baa808763592558efa99fe19bb0ff8aa746841bdd3817952ad3b6d857bd49bec3b26c5de1dff904679ba769cba8701ec2f990757f870fe4884f1e94673824fe1a49dd71656017a120f5fb4eda46a12a410e11fa68fc7f3b04ad8a4f93c95f1d7318e9c441d1ccfcb385bca6ceee5d278d5eeb80f48a2b1bd4a266accec5f4962d9a11774aafb935bff0bf60a3091", 0xb5}, {&(0x7f00000045c0)="1956d18cda96f62126a9c1c3b1e7e99f58ef5a7a021a98e97129399e8900d2242420fa14932d7dbf164c6fb5fb831aa93932dd2f2c6aeddbf338a541267dd7", 0x3f}, {&(0x7f0000004600)="b328c97f435a1ec0d6a66ea245c11e81c22b80c08ae826d0a10902e2bb14651ddb149be570335274d4716ac946f6ffa1f53ebcb6", 0x34}, {&(0x7f0000004640)="5814dc6d89650696fea98765ddb5da23aa258f68bfc2c9d95d06efa4ddf0a2fe7245528ebe7a0930901df481d3ec97a8b3477032c4767cbdbd0ffef2b73800ba9c0ca79e34599fe13433651cc693e82fd63f01ea85ca9470ab5d6ab80b5c6083360be7292763f6be3fd729a53832e6443bb938331805b50f9577ae2f0279840562695537936b234ee93494a9abbc440cbbeac889fbbb8251aeda1f2125d6c849aadc3d4f39f22718d8499d7923c8402046e7337bfad1ca1856060823e5de610ef3e153f6bf", 0xc5}, {&(0x7f0000004740)="8f54dd44bf007201ca29eee1e773ab23d803f062e618b60ca9c84b4c4d557b4233927404f134f3c18e186b1db0af7dee3ad535ab20ab6e3ce3052b251b2310fdc1843a9af840e580b30fa4a0bc664f08cafe61b3d12393bb7b65244b2bb3917424ea97018c924795d62dd73ff07e1a39daa4aff70b3fb5e06d80f78a62f4316a98236c1b2f727087e630fd94d1ef01a75869c5bbabc12de648914efa94fa32d62e7edfe30ab897ce09b2e08315628abc9c5dd6b9ebb1ed5de0f641391f489fbc678ee8ad78866b6e4bd5eca5", 0xcc}, {&(0x7f0000004840)="fb6440350fbcbb1cf8", 0x9}, {&(0x7f0000004880)="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", 0x1000}], 0x7, 0x9) write$bt_hci(0xffffffffffffffff, &(0x7f0000005900)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x9, 0xf5}}}, 0x6) 3m47.257916009s ago: executing program 0 (id=3360): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xc3) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000004000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x604ab000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000f0f000000000700000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000003c000000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000040004800b0007"], 0xc4}}, 0x0) setsockopt$ax25_int(r0, 0x101, 0x5, &(0x7f00000008c0)=0x7, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32, @ANYBLOB="0000000000000d00b70500000800000085000000730000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r7, 0x7f62c4469923ede5}, 0x14}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r8, 0x5421, &(0x7f0000000100)=0x80000000) vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) write$tun(r8, &(0x7f00000004c0)={@val={0x0, 0x88a8}, @val={0x0, 0x0, 0x19, 0x7, 0x101, 0x3}, @ipv6=@tcp={0x2, 0x6, '4\be', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, @dev={0xfe, 0x80, '\x00', 0x2d}, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x40, 0x2, 0x0, 0x3}}}}}, 0x4a) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r8, &(0x7f0000000780)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4005052}, 0xc, &(0x7f0000000740)={&(0x7f00000004c0)={0x3c, r9, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x10}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x21}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0d5}, 0x24004800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000500)="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", 0x194}], 0x1}}], 0x1, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) 3m47.064501155s ago: executing program 0 (id=3362): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r3, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x6a}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "a9c79421d3a2496a1cf1717783"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7088b5c05c34dfed892f3faf75"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048044) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x1a, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000080)={0x6, 'veth1_vlan\x00', {0x652}, 0x8001}) getsockname(r1, 0x0, &(0x7f00000001c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 3m46.608866459s ago: executing program 0 (id=3367): r0 = socket(0x10, 0x3, 0x0) unshare(0x40060480) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="40000000100021040000000000000000000000004db48c8d2e26906363958c2c8a7b96db85bd1b1fb6989019b57f939484568bc62a11e68105a122b13f40da2e78c439ca9658423cc264d2da434987bd4a0bd40062bb51cd7cf77bd33a45efa95056f97887", @ANYRES32=0x0, @ANYBLOB="000000000000000014000300626174616476300000000000000000000a0001000000000000000000"], 0x40}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$MAP_CREATE(0x600000000000000, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000000000000a00a100", @ANYRES32=r4, @ANYBLOB="14000100fff1ffffffffffffff0000000000000108000800020400"], 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="3400000014000b032bbd7000fcdbdf250a281000", @ANYRES32=r6, @ANYBLOB="080008000604000014000100ff"], 0x34}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x7fff, 0x0, 0xfffffffd, 0x1}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000010002000000000800040001000000", 0x24) 3m44.029194837s ago: executing program 0 (id=3384): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0700000004000000000100000100000028000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000170bffc2f4ceaaea46dd15d791fe11ad786307a8af88ca47dfd4145645d0df8bd7ecc4b0768487820e018b9f8b2609f48e611df0411c004cd138dcdc07edc36018f25151528dba101fd98f07bd78b68f5138e80bd29896672c4c73ff1b17bf0e9569df3ad9e10abe86dabc0e425e566c8e5d5cda1863df80796489f74d7f5d3b4ca40f816464d886808e09e818fb454170f0c7327f4414b0c434ba3e3f8686b2ef9f18d4c985646d67ca0999a6f37ad34300978372a97e6008bf55d5e7db5190e531c93eb29c465a4e151", @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r0], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='signal_generate\x00', r2, 0x0, 0x3}, 0x18) (async) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) (async) unshare(0x6a040000) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ASSERT(r4, 0x0, 0xcf, &(0x7f0000000080)=0x1, 0x4) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r5, &(0x7f0000000000), 0x2a979d) (async) openat$cgroup_ro(r5, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) (async) ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 32) r6 = socket$netlink(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_TYPE(r6, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) (async, rerun: 32) sendmsg$IPSET_CMD_SWAP(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000060601"], 0x14}}, 0x810) (rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r6) (async) write(0xffffffffffffffff, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) 3m42.899828736s ago: executing program 4 (id=3395): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001880)="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", 0x410}], 0x1, &(0x7f0000000280)=[@assoc={0x18, 0x117, 0x4, 0x400}], 0x18, 0x200040d0}], 0x1, 0x840) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000003a00)=""/4109, 0x100d}], 0x1}, 0x40010021) r2 = socket$inet6(0xa, 0x2, 0xfffffffa) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x97ff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000600)={'vcan0\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/92, 0x5c}, {&(0x7f00000001c0)=""/144, 0x90}, {&(0x7f0000000300)=""/200, 0xc8}, {&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000140)=""/39, 0x27}, {&(0x7f0000000500)=""/60, 0x3c}], 0x6, 0x1, 0xffffffff) 3m42.777793695s ago: executing program 4 (id=3396): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e158"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r2}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x20, 0x3, &(0x7f0000000180)=ANY=[@ANYRES16=r2], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$l2tp6(0xa, 0x2, 0x73) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(r4, 0x0, 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) 3m41.242056979s ago: executing program 0 (id=3407): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000002c0)='xprtrdma_marshal_failed\x00', r0}, 0x18) (async) unshare(0x62040200) (async) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) (async) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x19}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) (async) write$tun(0xffffffffffffffff, 0x0, 0x3e) (async) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="08002600760900000500180138000000080027"], 0x3c}, 0x1, 0x0, 0x0, 0x48010}, 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) (async) r6 = socket$netlink(0x10, 0x3, 0x8000000004) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5800000002060108000034e400000000000000080c000780080006400000000011000300686173683a69702c706f727400000000090002007369f2ffff000000050005000200000005000400000000000500010007000000"], 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x2) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) (async) r10 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r11 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r11, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) sendmsg$L2TP_CMD_SESSION_GET(r8, &(0x7f0000000040)={0x0, 0x9, &(0x7f00000004c0)={&(0x7f0000000300)={0x34, r9, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_L2SPEC_TYPE={0x0, 0x5, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffffd}]}, 0x34}, 0x1, 0x0, 0x0, 0x40804}, 0x30004040) (async) writev(r6, &(0x7f0000000280)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) (async) r12 = socket$unix(0x1, 0x2, 0x0) bind$unix(r12, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r13 = socket$unix(0x1, 0x2, 0x0) connect$unix(r13, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 3m40.968644924s ago: executing program 4 (id=3409): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, r3, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0xfdef, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x78, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x4000, 0x883e, 0x75, 0x0, @wg=@response={0x2, 0x0, 0x0, "018cf684687c2dc12327f770be1c584e0d3c9d4087873521d65bf3d86ee02011", "7bedef4e728067fa120094372df68c75", {"6eeb460c188d1d4caf89c6b0f382357f", "7e8973dec9e6b2a8b7ce38984ed92e1a"}}}}}}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000060000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000002124001180090001006d6574610000000014000280080003400000000008000240000009"], 0xa8}}, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e2a, 0x3, @private0, 0x407}, 0x1c) (async) listen(r0, 0x39c) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xb5}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 3m40.933845591s ago: executing program 4 (id=3410): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000000ff00000001adb4a30000a8"], 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x20040005) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="100000001014000329c953cb7571d84881675ba94f584d8925f53c342600e83ed5c67aef67e7a5345b5fbc09dd546d45bfb8beec68d0e61bd401cfe9851612e7d11c6844c82ee999eedeb1c3e69021e19d336877e90b7a7cd1a32e24b8bd0a659474f96c8d1d71642932b386971bf79fa298e23b911000035a6e0285219b51b139102bee3c33c775d69905c47c46cad769ca664faaa94db8ea1b33307f2370563f58fcd36ae06f37eef884158fd96dce3d41ff4bab10e509b580dbb6cdaf0929764131ab747114d2263830c704fbf65f34ce"], 0x10}, 0x1, 0x0, 0x0, 0x48800}, 0x41) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x36}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 3m40.683777844s ago: executing program 4 (id=3412): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000090000008b00000044"], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_stats={0x48}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x2, 0x0) listen(0xffffffffffffffff, 0x1ad72f7) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000040)={&(0x7f0000000280)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0x4, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0xe6ba7615268e7f7}]}]}, 0x80}}, 0x0) syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x30, r5, 0x5, 0x2000000, 0x0, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x6, 0x28}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x30}}, 0x8000) r8 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000970300000000008385000000710000009500000000000000c9b44e55568d4ecd1f77a18d4f50dcfe446245a0de10745d94ae0f6260272a47a0f43b3a571eff2fe8afed1eecab0f6aef83f06023d597d394ed4265ddf114b2cd8c7f26a447686ce7f006f9574cef666a88b50adfa25c0f265ee2fa62bfb5881409ecfaad17430c3ad88721ded1fcdd9467c4871f5839c4e03fe7af1e2a97485a1fb266c160116b771785a3e2d28e3e54df752a7db4da530d0f0fd904569aba0d13fff2139b40c3d6a3034456516cc6a4b6a11cda"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$unix(0x1, 0x2, 0x0) bind$unix(r9, &(0x7f0000000540)=@abs={0x1, 0x0, 0x4e24}, 0x6e) syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r8) sendmsg$DEVLINK_CMD_RATE_SET(r8, 0x0, 0x1) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8983, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYRES32=r2, @ANYRESOCT=r1, @ANYRES16=r1], 0x7c}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) r10 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r10, 0x84, 0x10, &(0x7f0000000200)=@sack_info={0x0, 0x8, 0x1}, 0xc) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) openat$cgroup_pressure(r11, &(0x7f00000001c0)='io.pressure\x00', 0x2, 0x0) 3m40.61257521s ago: executing program 4 (id=3415): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) r2 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000300)="05031600d3fc1400f4ffffffffffb02769ab27b66b39f8fa24", 0x19, 0x4044000, &(0x7f0000000000)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRESOCT=r1], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r3, @sk_msg}, 0x94) close(r4) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@loopback, @rand_addr, 0x0}, &(0x7f0000000140)=0xc) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x10, r7, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x14) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) (async) recvmsg(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x0) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) 3m25.3010398s ago: executing program 32 (id=3407): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000002c0)='xprtrdma_marshal_failed\x00', r0}, 0x18) (async) unshare(0x62040200) (async) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) (async) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x19}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) (async) write$tun(0xffffffffffffffff, 0x0, 0x3e) (async) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="08002600760900000500180138000000080027"], 0x3c}, 0x1, 0x0, 0x0, 0x48010}, 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) (async) r6 = socket$netlink(0x10, 0x3, 0x8000000004) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5800000002060108000034e400000000000000080c000780080006400000000011000300686173683a69702c706f727400000000090002007369f2ffff000000050005000200000005000400000000000500010007000000"], 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x2) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) (async) r10 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r11 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r11, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) sendmsg$L2TP_CMD_SESSION_GET(r8, &(0x7f0000000040)={0x0, 0x9, &(0x7f00000004c0)={&(0x7f0000000300)={0x34, r9, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_L2SPEC_TYPE={0x0, 0x5, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffffd}]}, 0x34}, 0x1, 0x0, 0x0, 0x40804}, 0x30004040) (async) writev(r6, &(0x7f0000000280)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) (async) r12 = socket$unix(0x1, 0x2, 0x0) bind$unix(r12, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r13 = socket$unix(0x1, 0x2, 0x0) connect$unix(r13, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 3m24.799415418s ago: executing program 33 (id=3415): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) r2 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000300)="05031600d3fc1400f4ffffffffffb02769ab27b66b39f8fa24", 0x19, 0x4044000, &(0x7f0000000000)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRESOCT=r1], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r3, @sk_msg}, 0x94) close(r4) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@loopback, @rand_addr, 0x0}, &(0x7f0000000140)=0xc) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x10, r7, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x14) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) (async) recvmsg(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x0) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) 12.908453664s ago: executing program 2 (id=4513): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) ioctl$PPPIOCGIDLE64(r0, 0x8010743f, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1f, 0x8, 0x5, 0x9, 0x1200, 0xffffffffffffffff, 0x30, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x50) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x50) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @remote, @initdev}, &(0x7f00000002c0)=0xc) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc4, 0xc4, 0x7, [@enum64={0x5, 0x7, 0x0, 0x13, 0x0, 0x6, [{0x2, 0x753b, 0x7}, {0xa, 0x8332, 0xe55}, {0xc, 0xb5, 0x51e1}, {0xe, 0x8, 0x4}, {0xb, 0xf513, 0x6}, {0x3, 0x81, 0xaa7f}, {0xd, 0x6, 0x5}]}, @func={0x9, 0x0, 0x0, 0xc, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x2}}, @enum64={0xc, 0x1, 0x0, 0x13, 0x1, 0x5, [{0x1, 0x1, 0xfffffff9}]}, @type_tag={0xc}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35, 0x4}, @type_tag={0x3, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x5f, 0x5f, 0x30, 0x30, 0x5f]}}, &(0x7f0000000400)=""/57, 0xe3, 0x39, 0x1, 0xfa3000}, 0x28) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@o_path={&(0x7f0000000500)='./file0\x00', 0x0, 0x8, r0}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x50) r8 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000740)={0x0, r0}, 0x8) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x7fffffff}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0x7, 0x1, 0x0, r1}, @jmp={0x5, 0x1, 0x0, 0x8, 0x3, 0xfffffffffffffff0}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xfffffff6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x80, 0x0, 0x0, 0x40f00, 0xea7792b5b367c807, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000480)={0x1, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0x2, 0x3f8, 0x900}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[r5, r6, r7, 0xffffffffffffffff], 0x0, 0x10, 0x37a, @value=r8}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000980)={&(0x7f0000000780)="9f4710a2c7b4925a44", &(0x7f00000007c0)=""/127, &(0x7f0000000840)="eab818537a17b4bab22edf82f435e7106ed40a1560dffd822073b1902d58aa60c57d67a9b8985fdf0d76dae92faa7ff3ddd7b65334edbcca0e36a7d58ee98c4155c15ccfd604bd9055864e797f909b2e2376b9a198c8933912d066d15b936f4677bbee3f7e98a17735dd88cd68c462ad6e0cafe4b68d8dbbd99dc7cc6ae1464aee", &(0x7f0000000900)="24dc4ec9985dfad358893e1b345ae32e7ca3343510747156db2576a2a7729bc80ef451ab9ab42c03622118f141f72978895dbcf0cc29221f3bae4923d3485c349933c41b58daa626bdf51befec330c1c7bc3", 0x6, r6, 0x4}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000009c0)={r5, 0xffffffffffffffff}, 0x4) r11 = accept4(0xffffffffffffffff, &(0x7f0000000a00)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000a80)=0x80, 0x800) setsockopt$packet_drop_memb(r11, 0x107, 0x2, &(0x7f0000000ac0)={r3, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000c80)={'team0\x00', 0x0}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000d40)={0x6, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1a, 0x10, &(0x7f0000000b00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@generic={0x5, 0xe, 0x1, 0x1, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000b80)='syzkaller\x00', 0xa, 0x87, &(0x7f0000000bc0)=""/135, 0x41000, 0x18, '\x00', r12, @tracing=0x17, r4, 0x8, &(0x7f0000000cc0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000d00)={0x5, 0x6, 0x1, 0x1000}, 0x10, r13, r9}, 0x94) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000e80), r11) sendmsg$IPVS_CMD_NEW_SERVICE(r14, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x30, r15, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008040}, 0x20004001) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=@base={0x1e, 0xae, 0x2, 0x6, 0x10, r10, 0xef37, '\x00', r3, r4, 0x2, 0x4, 0x1}, 0x50) r17 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001000)={0x3, 0x4, 0x4, 0xa, 0x0, r16, 0x6, '\x00', r3, r4, 0x1, 0x0, 0x3}, 0x50) r18 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001280)={0x3, 0x4, 0x4, 0xa, 0x0, r10, 0x9, '\x00', r12, r9, 0x4, 0x0, 0x5}, 0x50) r19 = bpf$ITER_CREATE(0x21, &(0x7f0000001300), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0xf, 0xd, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000001100)='GPL\x00', 0x0, 0xbf, &(0x7f0000001140)=""/191, 0x40f00, 0x10, '\x00', r3, @fallback=0x22, r4, 0x8, &(0x7f0000001200)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000001240)={0x2, 0x0, 0x8, 0x7ff}, 0x10, r13, r9, 0x4, &(0x7f0000001340)=[r18, r10, r7, r2, r17, r19], &(0x7f0000001380)=[{0x5, 0x4, 0xf, 0xb}, {0x4, 0x4, 0x2}, {0x0, 0x5, 0x1, 0x4}, {0x3, 0x3, 0xf, 0xf}], 0x10, 0x3ff}, 0x94) r20 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x11, 0x17, &(0x7f00000014c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001580)='syzkaller\x00', 0x0, 0xb0, &(0x7f00000015c0)=""/176, 0x40f00, 0x58, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001680)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000016c0)={0x4, 0xe, 0x4000000, 0x4}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001700)=[{0x2, 0x4, 0x8, 0x5}, {0x4, 0x1, 0x4, 0x7}], 0x10, 0x80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001800)={&(0x7f0000001480)='dlm_recv\x00', r20, 0x0, 0x1}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002980)={r9, 0x0, 0x1000, 0x3e, &(0x7f0000001840)="722bc7a60ab868588ad5d1a2c02e6c5cf2a6ff3b02573c7dee1aa46d7a1a222ba06dc75d1b235c61918aebd4b4b858dfea2c4b2866eba5674ff27375b8a4a0298081670df657301bf5f2fd99a04b7fb778b69d8b5117312a864cd830e5a20c33b4f9bb4cbbdccfefe7776a00c60f12721fb8c526a4317439db09a8175a56dd56f9e96b2c54cf786ccfefe83634297d8eacc1adc21bd56cfa1b81eb3d4b5eb4c80710dbbe1da6e03267c6e7744a4c360234c8f274d65c1d559f3f66b121d8ba3f57b1d98a8352e14bd0d331e35cab269bdf1bc7f2474be842aed415d9bb94c4eb1916ea2d5dc0273c7580234d5d86d47951ddbd819f61f332eaa145839797b25352288d4ad260ec9218e3a52efac3d128ab2cf95caa4fff613a102dc6beec49325341791a6c81b7c580743cf12e6121d821d039eb010742db53008d2d7c0b88e32c6e8b3f0321f29c622f1432bfa4a7fe370c701794035b4206bc89aab1a75e47c868088fe67a945f1190d0fd38f608e2c2fed1d834c0eae0f3b857e4a95750223636b73830d65e1d6d8091d0edd3e40c8de2e72784d175e6d3ddbc85b676ce16d80149718bc4fd0e21ac21b02dfca8422ad94ed0c31b6a465025e6b2768a58a6d6593d96c16d4fe326abe6cc8dab97cba26178533ee59b6f488005191d63c3ae690838e466f8d4112b402a00ec74a3e3b434600e84ed405df6836c8edc55728134c06388e81ea8d15eba118b883b6e02c83b49412b1039551bd119fefbbd0b9da6d8eb41fb6cf4d7656119f3e75689f2d207f7e667555bf0f2143333c5ee0e9f76a76f2d25a843560eedd6190d2e3ea03ddbfca4df12c3473634712f125e2c1a29ffb27bcffc5be617d85f49d81d0351eec7a30be622f7827ab6fe4a175a21a850895cecfb90217b6ade8d0c9d01363b4e825e1d23d53dad10e1f549748efc648df4f0dd7fb5ed6bd9d1765dd1362e47cd758d9a89bdee835bfadc0653392f5d3ce5250aad920b52bdbb26adc288fc785f9c7fe2c736a62bedcec240236b0190b50e8dcc23b6526a5f31b73a439af1706f17cb53bad2f3f092177d765fa03dabf48ff27db56520a824ddf7b7db1258a649273539e506734710c46c3364427ac6b4a2c6cd930c5c0a284db576a92159ebb86dcb328de4aea2ab7b3ad587ab41a208bc3454a78f91d171156290ba9a68607d34290f8e18db2df853716db1c08291c9cb26cf05cba5dc2bdc636bf3e487d846235b5dcacf5d95f6459f1d362250579267e10f8c9ee877f7b6a82dac393343788a745ef33d6b747bf80c0a1726e463a9d9c1613f16729fdd2514b5ee1c8c3470fe0c85e1daf7f428627b2804307df6afd60573151d1d00142bf715fd5b1bf15c0dbe59ca9773fe0b14a0cf0513aa33ae16d4afb8255414ab7e9fb01408778e739c35129e999d25481cb76db011b1c972b9885718b7e1149cb3c7ab7308e368844260b6991fab70cd0a906d4133b92fff87bdf6a735ea9af2f691f9defb0e1c272df504b32e7ca58b2d67d2d96dcfc2f4f152322b61f5dae3d67c274a2b8ef6d769cbb942e7ec8854dda43ee62c1b9c21e0bc122d36e939e809dff9a81fc24bcc120c51e03f20c1ae45da5e28ff812db1326457c9bfa6c3f710388674bf14225f894d4965e78fda8c2be96d1cbbd9a9ebe7b7990736947a6151121a3856c7223ea57ea074025ea8d44e5427141a37b6332379dc813cc00fcc87ac534507816bbd53e1eb960da097b712760f701e036c7ab9f9baeaeb12dddd98213dd03b4ef9b50d34f885f6d364f6a1c8143f116c0583647ab4c78b0576f7be7988a4de597e3fff531114063a3d0e79ba1ae4a2661f4eaa4c0d48a572692cf4b852f63eab18cb7e69852d4e60d768b537b465df8cc32ab4f919bb0599dcd64268aa6dcbde3fdabf450c051e5188f1614cdbc887d68386cae7801f628f10664c957f513fd265c3561aa218a17efafe543d433b22e577ed92e09f5e3d49490e63bb838081ea3a9b7d65f13b7862523e31e6bf32b5621cde94ddf4d8f6b900f0efbba307841b56dd14f745b2e2648cced2bec3dabbe891ed6575836b1ade8a8437b9480b9cf37dd98f8143abdfd2b7556ca4e275965e13d39f636d8a7f85974d5f402248a3627cf6ef17edf856608dd6e9a23864b59ff8d2766e730ff795b0890b56b630cc45dd038fe95b8fbf7f2dd972e67eb821d509544473692f31074f68058fb8750094c22c0c0417a5bba47d7eccc3bd66a171592fa02d22aa81620c5608664bbcdc6e005f60c698b2582be1f88db018bc1e9450f862165dc4e732ee3cb80cbfe4abef5bc5e78081a0cad35d1bf6bad6b30a6fd1ed814dc1d8033b71f18f4e1c3f493f0da4e29693cedbe2d477763695f15044de2bedaf905331524529ba5930ebc1ac3a86aa4d1fdcc57f0dde952ea2cf23213c369a26247c9c1c4c96adcc67e39d06b4a4f9b655c28cdb8ccf5f96e2478dc9a4b03ee64b0252a3c9c88df318a28ab8bd9c20e8c855195a12c236cd5cdd214d4d64ad891e248cd0c2dee903db8f2bd8dd9e5116e3756ea06affde326bd1678379017d6b6b9850ce4cb485c62c85398d925c36300976cfc8be62df15ffd6796c0f7b26c6ee03b79981159f0a94f9b49a27666399b2187ee559ad1e1ca55c29e2f165d9158d23b7cf22a0721654f7169dd4504c742b64ff244168f7d3f0624aca3d0512f5c9271233ff51d449b0145e233b4f56067a0f38dba4272944b3fbcc0d6ac19dfc519868b7b817df21a360cf901e9e71fab4aea5b943a6769621b8c14432046e2a6d826cd6e55a73157fe2a189e592513d3fc6fa971aa1d3f0078ac914f347849915920cd5e9ef8be2166331c76521153022c364a5e1fbae4d25ce04a797517a15c1bf0e194b017edad4e0f9772a625bf33b0189189e959dadde9678bcc54313d482fd53f825a2b8263d07c4e55d0883c0174b6b0723b959673cc2e44d6032bfa3ba89fb67161da2025da339f662ff9314be446344706bb7d86e4a98ac6d9dd5d6a9aaae2f6f6404d54c72a207e6804e35a44ca3e4a89587f0ce76cc1ff218c3b5a35d6b4e8d47f7af49f1f70df74a092a9a85cb8fb1cb1592af5286b852dc7d78b1fb724531ac8d75019069cc6cca8836aeaac34ab046c7f8dec1f5208981b5cebe9be194f5fcb2357acca81c0a1985efcb3755caf2dc144ac88a51737666df131542016c88aaefef3051cad6b8d6de1768f075e04d602521d466a810f252d1a5835316a9ce9c55df38e67a3f2d419f99f2863e1cf7e03021aaf80135aec589806fd81dd5af4b6104907b9d2c61bff969970fd8e0c884389b6ecbd069959befcec369ee35d0b1ac7209c67ba2e9811a88f9d3e30e2a4ceafee07ff0865a1088b2394b1525235a6f92679a22764abeb4b94c174b182e4e966fa7b4f51b0963ecbacef51bf0992d5cb37608035f7c2849cd2c732629b06c5cf785c25d07891e10f82d511f4da550d5a98b64edad1fb575309130e1ccf250c833d12b735b3146e0165a6679e6ea225c1bf0f45ec970d5f5e132bdbf22fcedcfa398c597e6221d0e4e16de6b551bc625c45f27ad8cc3cd6d59234e1ea693b1eea3ebfc5f349856d330b0d0a72ef72c81c981a3f6c6af634c8554280c5a5044327697fa2bad449c6c0c1c5f5c23766bf6b0034b82e7c80002c8466a6f3777833c698f5a909174e5580ffba3e5c2d054674efea092358baacb1191280fd0317fffd2400e6d12f46497db4707ed2e10a827bfdfd9f61be8b503c4b3c264b3bac0074d29df57e7b95e9337b6a00f70bae775d4766c9a52248d24040639fd3fa9f39598765b5563913bcc035628da3c47536eb99bbeb8c0061c32cf3d909690b85c2844f324115b4bf58c1fda3f605030f62515a6743359dc807c8563fe4b227b72132a91bd1351e2338b993e9e0c4d69f49c189490d28f302b47a8d4e26e1c203058d517e5e0ff6840451f5595934f522126f03455c9cbff208d82db741b5774bf255f8a77c37f4764320a2135bc0256027aad433f1635c6c98b384471294f008ab5bf3a55bff84da713180b47d6f7e266726dbb5930496753fcc10071843223f6753bb5a6b085885c504f64a7d2de6c865e38b9bb4e9b5394fd89628524e50f40cad1b8e10fa5e17235739dd09813ff1cc598c9c60cb8a7b3c72b468f80d8f5f382e3a046d52fee145be76ef46fcdf156659e5ff1fd3fe5acc4c5d73a36058932524f398c4513d18fce6c1b52b6b9ea28ee90de169a5c19ffaed93625588e9ec765ccca9b903dbdc83b4a7a7eeee54fd7258933951c8f792c00b80c65c8bcb9c6ec22dbf2975bae412474faf32f136df6dae43a0493ffb5de70d650366286a01b55f81ba7b0fb12df37e7e8545a067ad0da1554e94033553d4565c8e158b9ef26a51373db253953d518a216afc74515264f14e6e8e182c5bb01366729ed6aa9d00a5e691a8ec9a03b83ad92a79f7c5fa4bff7dfac6d5fe9d4e2a478710222239ffcf533e4699237c0a11ae9bfa99a5006f0cd1d3bc8d7a6e33a7bdd0c080f963b8554f25a57819d00c2c3ce2b52502c5d428183327c61daba26ec0f7dc5a04cf029a6adcd04f1a37c880bcdc46946aeb0f2312830a82ec9d553822e7f05717af176187035fd54baad37657946961376139cdb3965eeb5cae1cc418477be98d8e4709ce488f9aecb452f57e0e7a11010288087e194b39d78e11161059084e86f963acd084b5fdef542fd4b16b086937cc531fb6d4f018c7c8e649ae53477d5788dfb6cd2673a2367e1d68403d42ec2ad8b3f39a3456a55659a7eec8584cce8756efb66fac7e84ac30bda56ccfa79408bd0c13eb333e68de92dbd5e21adff133b8404496ea22cb5c41bdf04da357458249d4c40344a1a2f5bc3f8e58b120eaa2506c52b22dc33167fb9fc46c3b304ea7509a840ae23a3bfd49ac1c234535e7546a299f72834b704bd2b098a94e15b3126ab29e261fb695886a106ea91f1aa78877882ab1337d589a0ff48f052c692048d3f8a40de7deda50781d87df4fa1e8c06f9f73c220e94ddc925c83a36f345afef3d83d08ee2c7de5a8f0b079117ec2b426277b91426a7842c464d2cb4bb4a6e115e2619e4a3a779dea31b34716e3f255be292fc97fd8cbe55b7d8df19d419c7ad9e172f01eff7b44f6899e3e9cb91e8889aae1a2c3aa11997890e78e0b59739de5052366b8dc79d2934e22a8d2f80195ce0c9dde6642ef86c2014a5b37bb37ae416995833afd681f20980a7e533ee647ecab0c01b5a836d0574660e95535724d0741bac13045ff9d181f06370b11dadbb8067125a3cec43fa5847536ad3cfbd1a059978a39594a0d9a0d081fc96047ed023a05cc6ca8da11827bbefaa3b8cfb7f78469fe6db0f7c6cdb7b25fd5bd5294013947c9a36ff8ba5ca44a7a9474b4be9487b7a6f9f6f6f98ef12d8b8fb9392a018e3319d92d46b5be39ad8ccfa5e9bdc35949fe9bc55705980c87babb92dc55f8776974ee1f762271608947a0781b539f8bdcb6186b3569f22f85c57d76cf1ab1d3afbb7fb9dc2fa7fbf7acb8bdba11008218fafdfd819faa8eb1409649d07d0191e5b82ca6cbcdf267ff9db13c2fddf8ddc362ce7f0ab86d1bbfad92a512b07e0826cc06ed33e63c88d847b14f59cf0be04540686b0e8088361ec93613bcd92cbdb1573fc4f2305acd8bd5de9f2a97e7cbf1b4641c9d671b7b668006ae60a411f4f081bcf4b58bcb8a4abb671ef291c1d64d5a6e1fae965100c4702b8e5b10144a3697c1af28e35", &(0x7f0000002840)=""/62, 0x6, 0x0, 0x53, 0x7c, &(0x7f0000002880)="43a03ef6d325668d78fb07bd92ed823fa3ae26a42d9ba17aa7ba132cba3dc9fa452d07eb5a0c62ce2cca7673e5135ee0a7d7be45f570a1711b413ebeba05eac755153c87fee30094fd8f999488af3035e0daf6", &(0x7f0000002900)="685c2e509c865c2f2feec9de7fd9f85205875192b7b61e0387c135b55763056047d49fd054d3ae66f73202fe29444b5ffb5bf1671a391ddf72897334b8a646625fb0d4cef3f1fec91f0f845bb72223a6fdac76500cfc7d369ed8308ea79f477117fc41a12b9b191de50246a33b9a7857e8d765ecde034e8a4759a57f", 0x1, 0x0, 0x246}, 0x50) accept$packet(r11, &(0x7f0000002a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000002a40)=0x14) 12.776435067s ago: executing program 2 (id=4514): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x10, 0x8, 0xffffffff, 0x4}, 0x10) (async) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000100)=0x2000039, 0x4) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000a00), 0xffffffffffffffff) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) (async) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x840) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async, rerun: 64) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="05000000010000008e000000c9e7000001"], 0x48) (rerun: 64) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r8}, 0x38) (async, rerun: 64) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 64) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r10, &(0x7f0000000b00), 0x0}, 0x20) setsockopt$IP_VS_SO_SET_STARTDAEMON(r9, 0x0, 0x48b, &(0x7f0000000040)={0x4, 'syz_tun\x00', 0x2}, 0x18) (async, rerun: 32) r11 = socket$netlink(0x10, 0x3, 0x10) (async, rerun: 32) unshare(0x2a020400) (async, rerun: 64) r12 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) (rerun: 64) mkdirat$cgroup(r12, &(0x7f0000000000)='syz0\x00', 0x1ff) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0x7, 0x0, 0x64) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0600000004000000080000000d00000000010000", @ANYRES32, @ANYBLOB="090072256359943774fe00000000000000000000919df740382c596ab193c0c31779dd4b38656023748ea080f7ba51951f685fb2ca244fa4620300000043450bd27e50e831ee499d5aa6f135c3bbc5ddb247aa7253b9deecb8eafd35365b95b1a030420d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000080000000000000000000850000005000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12.674572147s ago: executing program 2 (id=4515): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7fff}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3032, 0xffffffffffffffff, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r2, &(0x7f0000000280)=[{&(0x7f0000002040)="18a418e4181d8f36b2d931688c2c7e54a74d86cd84fabbf1d96d7edcbc9ea253116601cdafc8e4d252cfc031cbee3640e07553a072b9f608b7e6a44188558bd61ba3320fb3766d1815c9ddaf7d91193d044d06c859610943fb9b7798a776804c1c7af74782a1d88d143d10c1f40c6552848bb08861f1cef0a0b24e5069a002ae1b377488ca852ca8a429d19b717e3f3e1e6825281d9aa6f09b18b4c576cca899dd55b15c101aaed740d94b8212e9dea8e0e40df1e52f89d6aeb63b5c9c84a2f82a", 0xc1}], 0x1) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) (async) readv(r2, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in=@multicast2, 0x4e23, 0xfffc, 0x4e23, 0x3, 0xa, 0x80, 0x10}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x0, 0x9}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) (async) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xffe0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000740)={@dev={0xac, 0x14, 0x14, 0x16}, @empty}, 0xc) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 12.448237035s ago: executing program 2 (id=4516): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r4, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000100), 0x1, 0x2b, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8b34, &(0x7f0000000000)={'virt_wifi0\x00', @random="0000230c1100"}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="58fd35b1c935ea0c74ace4f5d12d3c663ef172ad4aa97c1549eaa717", @ANYRES16=r3, @ANYBLOB="000425bd7000fbdbdf25440000000800a0000900000005001801330000000800a10007000000080026006c090000080026009916000008002700000000000800a0000a00000008009f00030000000400bf00"], 0x58}}, 0x44004) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYRES8=r1], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x8844}, 0x800) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r7, 0x0) r8 = accept4(r6, 0x0, 0x0, 0x80000) setsockopt(r8, 0x84, 0x81, &(0x7f00000001c0)="020000000980ffff", 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000002200000091a040000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xd, &(0x7f00000000c0)=""/13, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 12.268390076s ago: executing program 2 (id=4518): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x2, 0x18, 0x0, 0x0, 0xc, 0x0, 0x70bd2d, 0x25dfdbfb, [@sadb_address={0x5, 0x7, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @multicast1}}, @sadb_x_sa2={0x2, 0x13, 0x6, 0x0, 0x0, 0xf0bd2b, 0x3505}]}, 0x60}}, 0x10) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6e}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x1) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x10, 0x3, 0x10) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r6 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0x80800) setsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f00000000c0)=0x55, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4, 0x4, {0xa, 0x4e21, 0xa, @loopback, 0x9}}}, 0x32) r7 = accept4$x25(0xffffffffffffffff, &(0x7f0000000100)={0x9, @remote}, &(0x7f0000000140)=0x12, 0x800) ioctl$sock_x25_SIOCADDRT(r7, 0x890b, &(0x7f0000000180)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}, 0xa, 'syzkaller1\x00'}) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000540)="43210098") 11.371126444s ago: executing program 2 (id=4522): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) (async, rerun: 64) r1 = socket$tipc(0x1e, 0x2, 0x0) (rerun: 64) sendmsg$tipc(r1, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0xfffd}}, 0x10, 0x0}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 32) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r3, 0x0, 0xfaf}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000140000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0c009985f2330fd547793c000800a0003a0900080500390104000000080026"], 0x40}}, 0x0) (async) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x3, @local, 0xa4d}, @in6={0xa, 0x4e24, 0x9a5c, @mcast2, 0x8}, @in6={0xa, 0x4e22, 0x8, @empty, 0x40}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e20, 0x401, @empty, 0x14}, @in6={0xa, 0x4e24, 0x7fffffff, @empty, 0x10}, @in6={0xa, 0x4e24, 0x4, @mcast1, 0x568}, @in={0x2, 0x4e22, @private=0xa010101}, @in6={0xa, 0x4e24, 0x20, @dev={0xfe, 0x80, '\x00', 0x3b}, 0xffff15a1}], 0xf4) (async, rerun: 64) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400000025000100000000000000040006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (rerun: 64) 3.347678011s ago: executing program 5 (id=4592): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000500)={'wpan0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) unshare(0x62040200) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendto$llc(r3, &(0x7f0000000180)="ccd0b1195f16b94bb92206c5e70b0b148b7bfbf7b57bb1c57d7138d231a4ac738a2ed63659dc6899cc1e321965e3d2b442", 0x31, 0x0, &(0x7f00000001c0)={0x1a, 0x312, 0x7f, 0x1, 0x3, 0x6, @broadcast}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r9, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x3) r10 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x49, 0x0, &(0x7f0000000480)="6ca5be3b34c28922e98842ab6b1b52724eb0f9e6d71b6ccf3f22aa02b0540de2ad4f9b9efcd0e686093d04cbaa0b4fc649601d85253bd2b1c447d06fb9dea3efbc0e11ae2c70e6c589", 0x0, 0x0, 0x503, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff80fe}, 0x50) 2.960597006s ago: executing program 1 (id=4596): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @func_proto, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}}, 0x0, 0x5a}, 0x28) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000), 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x16c2, @private2, 0x80000000}}, 0xfdf, 0x9}, &(0x7f0000000200)=0x90) 2.929212589s ago: executing program 1 (id=4597): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvfrom(r0, &(0x7f0000000440)=""/29, 0x1d, 0x43, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6800000010000100000000000000000000e2ff0964000000060a090400000000000000000a0000000900010073797a30009e703bbe00020073797a320000000038000480340001800c0001007061796c6f616400240002800800044000000000080002400000000008000540002000090800034000000000140000001100010000000000000000000a0a"], 0x8c}}, 0x40000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x60, 0x1403, 0x200, 0x70bd27, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'dvmrp0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40040}, 0x4008080) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x54, 0x11, 0x4, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {0xc, 0x6}, {0x7}, {0xc}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0xe76}, {0x8, 0xb, 0x2}]}, 0x54}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x9800000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb0, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x90, 0x6, "027d9b6c67f7bc57df7ba9646e080167660bfbc8f259df9cbb297938190663c9ecffaae3636fe004be237584e341ba403a2983870acf9375d4ddb8726033d383a566dd591e1d5f6eddb2c6af8da660244d8ae4f543e02e302f5095cb1cccdb1ce73ae4ed37591438047651e7c128721a58c68abdbbea3eebbed1e63608d61f52fbdbd01d49119377ac66f719"}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x68, r5, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffff8, 0x30}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 2.587248997s ago: executing program 1 (id=4601): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000006000000040000000000000e03000000000000000100000000000011048000000a000000000000000000000202000000002e00006100"], 0x0, 0x4a}, 0x28) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) (async) unshare(0x22020400) (async) r4 = socket(0x2, 0x2, 0x0) (async) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r5, &(0x7f0000000580)="dfe7ac607e8abbca38ad3faed98fe9b9eb4f9f37b74619121096a35bd16eb8c41a1316123a1128ad64bc130da806e16c3142b9c8e62e8c037d4b9fd096c3f38ed19d93ef9b2b38e53765deafed60c46aab8d830fa5cb66638c4e268a8fcef6109bf20fb9c4e2b4132f97514b72d24561da7b358eb430dcd2545aaf49d58b1098b42508de0aea843ba39894cdd25b516b1f45b584c95e688b1d5a8c6df1925078f737340bf9c6929b4bfe43cdf6cbfa69e72809a2705e7e77d0717be813216fd190da", &(0x7f00000001c0)=@tcp=r4}, 0x20) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$tipc(r6, &(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x0, 0x4}, 0x4}}, 0x10) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x24004010}, 0x0) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000200), 0x2, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) poll(&(0x7f0000000340)=[{r0, 0x3028}, {r9, 0x1000}, {r3, 0x11c}, {r1}, {r7, 0x200}, {r2, 0x42}, {r0, 0x80}, {0xffffffffffffffff, 0x3400}, {r1, 0x401}, {r1, 0x501a}], 0xa, 0x6) write$cgroup_subtree(r8, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) (async) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="c3ff0000000000002400128009000100626f6e64000000001400028008000f00ff000000050021"], 0x44}}, 0x0) 2.260100562s ago: executing program 1 (id=4605): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000004280)=[{{&(0x7f0000000500)={0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000540)='\'', 0x1}], 0x1}}, {{&(0x7f00000009c0)={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3}, 0x1c, &(0x7f0000002d40)=[{&(0x7f0000001ac0)="15976e94", 0x4}], 0x1}}], 0x2, 0x20000040) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(0x4) (async) close(0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000bfe365ecb5a1d62e04a9689e905b933a020b773c3289424e213facd39a79023bd2f07cc1790aaf44260bea55a867116bc48b487e64bcae0dd30a7d797b6b5b175ac646283d7b1bfb137d503d18801edb4c13d8d00f2470605c52e233b327aaad547af3eed2545d2d6c33751daed034ee20e763729b3e083a33ec4f08c4daab356719", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000bfe365ecb5a1d62e04a9689e905b933a020b773c3289424e213facd39a79023bd2f07cc1790aaf44260bea55a867116bc48b487e64bcae0dd30a7d797b6b5b175ac646283d7b1bfb137d503d18801edb4c13d8d00f2470605c52e233b327aaad547af3eed2545d2d6c33751daed034ee20e763729b3e083a33ec4f08c4daab356719", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0xfffffffffffffcae, 0x0}, 0x8004) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10060) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, &(0x7f0000000400)={0x0, 0xb, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r5, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x3}, {0x8, 0x8e, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240000c4}, 0xc000) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0xfffffffc, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x2}]}}}]}, 0x3c}}, 0x4) (async) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0xfffffffc, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x2}]}}}]}, 0x3c}}, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404d0c4c731b168d80d1f7f1dbb33f596", @ANYRES32=r4], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4000914) (async) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404d0c4c731b168d80d1f7f1dbb33f596", @ANYRES32=r4], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4000914) socket$kcm(0x2, 0xa, 0x2) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x400, 0x70bd2a, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bond0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000100003040000fff30000ea0000000400", @ANYRES32=r9, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) (async) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000100003040000fff30000ea0000000400", @ANYRES32=r9, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x50, r3, 0xffffe000) close(r3) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000600)={0x0, 'veth0_to_batadv\x00'}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r7, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x4, 0x8, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000804) 2.115550231s ago: executing program 5 (id=4607): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'pim6reg0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f0000000140)={'batadv0\x00', 0x12}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x411}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x3) r4 = openat$cgroup_int(r0, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) sendfile(r1, r4, 0x0, 0x100000000) close(0x3) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) pselect6(0x40, &(0x7f0000000400)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x100000001, 0x0, 0x400000}, 0x0, &(0x7f0000000240)={0xb, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x6, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x916}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xb, 0x0, 0x0, 0x7ffffffb, 0x2}, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001780)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004040) unshare(0x6a040000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.797587267s ago: executing program 1 (id=4608): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000019000000040000000100000000000000", @ANYRES32=r1], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x2, 0xffff, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x7b) (async) r3 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000100)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0xffff, 0x400, 0xa}, {0x0, 0x9}, {0xdc, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d6, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x95c0}}, 0xe8) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f0000003e80)={'sit0\x00', &(0x7f0000003e40)={@private2, @empty, 0x1f, 0x7}}) (async) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r5, &(0x7f0000000d40), 0x0}, 0x20) (async) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0xa}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc090}, 0x2000004) 1.788253006s ago: executing program 1 (id=4610): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="400401000000faff08001a"], 0x50}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad44b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000001940)=[{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000580)="fe093007a036b825dbc02c3f6a3312e7", 0x10}], 0x1, 0x0, 0x0, 0x40010}], 0x1, 0x8001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b708000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r6, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000280)=r7}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r8], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) r10 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r10, &(0x7f00000005c0), 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 1.30841614s ago: executing program 3 (id=4611): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000900000000000000fdffffff850000003600000018010000756c6c2700000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xca) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) setsockopt$ax25_int(r1, 0x101, 0x5, &(0x7f00000008c0)=0x7, 0x4) r2 = socket(0x2, 0x3, 0xff) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) shutdown(r2, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x8, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xc0}, 0x1, 0x0, 0x0, 0x44881}, 0xc4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40000000000000069107e00000000000400000000000000950000000000dfff16568a37965f47176be671b4a7bc9986cabd255d4054d8be96c6917c"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x24}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000000280)={{r4}, &(0x7f0000000540), 0x0}, 0x20) socket(0x1f, 0x800, 0x1) 1.307847004s ago: executing program 6 (id=4612): r0 = socket$phonet(0x23, 0x2, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20004040}, 0x44040) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x871a15abc695f30d, 0x5, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0xff}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0xd, 0x6, 0x7f, 0x4}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x800}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x80) writev(r1, &(0x7f0000000200)=[{0x0}, {0x0}, {&(0x7f0000000140)="a7d5b9bc75", 0x5}, {&(0x7f0000001580)}], 0x4) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg(r0, &(0x7f0000005100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000) sendmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x22, 0x5, 0x7) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000000440)={&(0x7f0000000240)={0xa, 0x4e20, 0x2d6, @mcast2, 0x6}, 0x1c, &(0x7f0000000b80)=[{&(0x7f0000000700)="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", 0xfc}, {&(0x7f0000000800)="d6f227dd7de75bb555ae0a820089f38c1ace32875dd0118bfa714f8a563e7e39cbb42d90cfebe2f25ed17330136672ac38063806a42d5f8178c7bc39c6d25156bb1540b2a404e30a36eebb2dc787932cd5969fc8b7cb6a7cd3950e7052c215b92bce8889ae30a9e487d9dfd1d97e5ab8070294a2239c9ec9174d030c7a22ec04c2e0ee22135c96f29ebc5de9e0a60d11f85b43076613675a5e908b3561", 0x9d}, {&(0x7f0000000980)="4af9dcd53377cc3a07cfcba37bf3022b475fa77c87a3d7245a60ab334a6c412d5892ab1ec49b60b27481bca4424e27824c395a8f5c0ab4a2a9cf0f6fd4d8da33", 0x40}], 0x3, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x420}, 0x4000001) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003fc0)={0x6, 0xf, &(0x7f0000002d80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xe}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000005c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) syz_emit_ethernet(0x33, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x11, 0x0, @gue={{0x2, 0x1, 0x1, 0xfd, 0x100, @val=0x80}, 'N'}}}}}}, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c000280080012000dfffff814000300626f6e6430"], 0x50}}, 0x40) 1.116664812s ago: executing program 3 (id=4613): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd70000000000008000000180001801400020073797a5f74756e0000000000000000001c00028018000380100001800800010009000000040003004e00fa2fd9f1c15d7a07fa99b2435f2a04b49c2ea1b4abcbafb3b946946bb6e2696e9d7de7c3dbfb1247f8ee05002ed6d01c068a213f7f0000000000000005af637a9502004126ee91"], 0x48}}, 0x0) 911.274071ms ago: executing program 3 (id=4614): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@ipv6_getnetconf={0x0, 0x52, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@NETCONFA_RP_FILTER={0x0, 0x3, 0x10000}, @NETCONFA_RP_FILTER={0x0, 0x3, 0x373}, @NETCONFA_PROXY_NEIGH={0x0, 0x5, 0xf}]}, 0xffffffffffffff98}}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@delnexthop={0x38, 0x69, 0x400, 0x70bd25, 0x25dfdbfe, {}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x8001) 904.10726ms ago: executing program 5 (id=4615): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0xffe2, 0xffff}, {0x2, 0xb}, {0x6, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00 \x00', @ANYRES16=r1, @ANYBLOB="020026bd7000fedbdf258700000008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000000000006004800630000000a00060008021100000000000a00060008021100000100000a0006000802110000010000060048001d000000"], 0x5c}, 0x1, 0x0, 0x0, 0x51}, 0x28044841) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x13, &(0x7f0000000080)=0x1, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000440), r0) sendmsg$WG_CMD_GET_DEVICE(r6, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, r7, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_FLAGS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008880) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r10, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000004) shutdown(r11, 0x2) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd26, 0x25dfdbff, {0x60, 0x0, 0x0, r9, {0x0, 0x3}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}}, 0x4c040) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r13, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r13, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r14) sendmsg$TIPC_NL_MEDIA_SET(r14, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001880)={0x3c, r15, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3c}, @TIPC_NLA_PROP_TOL={0x6, 0x2, 0xdbe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4020}, 0x8094) ioctl$TUNSETVNETHDRSZ(r12, 0x400454d8, &(0x7f0000000100)=0x1) bind$inet6(r5, 0xfffffffffffffffe, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) 820.378566ms ago: executing program 6 (id=4616): syz_emit_ethernet(0x76, &(0x7f0000000080)={@link_local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb3e02", 0x40, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "974367", 0x0, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [@dstopts={0x0, 0x1, '\x00', [@padn={0x1, 0x33, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2008000000000015000c0080ffffff3d03010000000000950000d300000000bc26080000000000bf67000000000000070300000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586162c17600674290ca9d8d6413b8199e34f67ceaaa78710f9f8aba4765c91382f497585ca39c595b21afa6bce62b5ab0d44e9c32ad6f0349d92962a58d39494a19a9183362382792ac85578d3de07b7e155cf4ee5e3dd51212d2831bd8e2655b2fbd88791e4c66c832a774919b28b8a62711f0f156e636804e1d3f44a5ff3d63a3a51f0c7ec0c8c25e072194ddd83aa155a537e15c0d91f502deef03f83e826718705c9aef9613ac4a325a428d147c1749196e94226671fd9573ab0d079d44b13b56f793e98ab571c58e98e022f18a3be3f318e0690fff93f44f22473dc8004fc758218349bd3f0516a72a7ea913bfa7603063ed3118b2d680cbc"], &(0x7f0000000100)='GPL\x00'}, 0x48) 781.354092ms ago: executing program 3 (id=4617): r0 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000000c0)={0x2, 0xa, "dfc0874fd1e76753432c"}) syz_extract_tcp_res(&(0x7f0000000240)={0x41424344, 0x41424344}, 0x4, 0xffffffff) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x2, 0x2e, 0x3c, 0x65, 0x0, 0x2, 0x6, 0x0, @private=0xa010102, @remote, {[@timestamp_addr={0x44, 0xc, 0x9d, 0x1, 0x9, [{@broadcast, 0x898}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x4, 0x91, 0x1, 0x1}]}}, {{0x4e24, 0x4e23, 0x41424344, r1, 0x1, 0x0, 0x5, 0x8, 0xfffd, 0x0, 0x57}}}}}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000180)={@random="ef29793c3a8c", @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x1c, 0x6, 0x0, @local, @dev={0xfe, 0x80, '\x00', 0x23}, {[], {{0xfffe, 0x4009, r1, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1001, {[@sack_perm={0x4, 0x2}, @window={0x3, 0x3, 0xc}, @sack={0x5, 0x2}]}}}}}}}}, 0x0) r2 = accept(r0, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000080)=0x80) shutdown(r2, 0x0) r3 = socket(0x5, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c0000001000030400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x6c}}, 0x0) socket(0x18, 0x80000, 0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000340)={0x0, 0x7d, "674c85d5119045aa45be377b2a953ffee6e8538d29def5ab4f2abd7267798fd46a5e30c36c3102783a1b2094d5f9a7dc33b64bc7abfbb49c9ee53efb414265ae1fc341b7524b225a9139b226920eb9e48501041a51d60bcc4b026d98d046cc1d6c933707dd9cbd85e2bc3cf7468074d180bd9a6c9498ac9b0efd5c9948"}, &(0x7f0000000100)=0x85) 577.059848ms ago: executing program 6 (id=4618): bpf$MAP_CREATE(0x2000000000000000, &(0x7f00000002c0)=@base={0xa, 0x4, 0x8000, 0x80000000, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 456.474145ms ago: executing program 3 (id=4619): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000180)=@int=0x5, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x4, 0x10, 0x3, 0x20, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) socket(0x2, 0x80805, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r1, 0x0) (async) close(0x3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000180)=@int=0x5, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x4, 0x10, 0x3, 0x20, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) (async) 401.827662ms ago: executing program 6 (id=4620): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000087000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ab99dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c41ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42cea68bef67422ecc13968a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f381ba6e0363d0a4a8a813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c60"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"/268], 0x104}}, 0x0) 347.267562ms ago: executing program 5 (id=4621): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001c000110004000800000000007000000", @ANYRES32=r1, @ANYBLOB="1000b2000a000200aaaaaaaaaa2200000600050004100000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14008000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x38, 0x4000001}}], 0x2, 0x40000) 232.495295ms ago: executing program 6 (id=4622): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'vlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x3c, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4dc1, 0x8000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4) 176.493043ms ago: executing program 5 (id=4623): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, 0x24, 0x101, 0x70bd22, 0xfffffffc, {0x19}}, 0x14}, 0x1, 0x0, 0x0, 0x449d7}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1e9000, 0x16, 0x200000006c832, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x88, 0x67, &(0x7f00000002c0), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x4, 0xa, 0x40}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r3, 0xffffffffffffffff, 0x14, 0x0, @val=@perf_event={0x5}}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x3}, {&(0x7f00000001c0)=""/117, 0x75}, &(0x7f0000001b40)=[{&(0x7f0000000140)=""/86, 0x56}], 0x1}}], 0x48}, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)={0x3c, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_TX={0x8}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x7f}]}, 0x3c}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x50, r7, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xffff0000}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xfffff98a}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2daf16d6}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5}, @ETHTOOL_A_LINKMODES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 175.401163ms ago: executing program 3 (id=4624): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (rerun: 32) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) (async) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @private, @private}, &(0x7f0000000500)=0xc) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) (async, rerun: 32) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) (async, rerun: 32) syz_emit_ethernet(0x1011, &(0x7f0000000640)={@local, @multicast, @void, {@x25={0x805, {0x0, 0x7, 0x17, "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"}}}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "41328ac33100", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) (async) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x8}}], 0x18}, 0x8000) (async, rerun: 64) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000580)={@dev={0xfe, 0x80, '\x00', 0x36}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0xfff, 0x0, 0x10, 0x900, 0x1, 0x90000, r2}) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = accept4(r0, &(0x7f0000000340)=@l2={0x1f, 0x0, @none}, &(0x7f00000001c0)=0x80, 0x80000) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8982, &(0x7f00000003c0)={0x6, 'pim6reg\x00', {0x3}, 0xb}) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000040)={0xfff9, 0x7, 0x0, 0x1006}, 0x8) sendto$inet6(r5, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000000)={0xa, 0x0, 0x6, @private1, 0x8}, 0x1c) setsockopt$inet6_int(r5, 0x84, 0x43, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000100)={0x6, &(0x7f00000000c0)=[{0x5, 0x2, 0x4, 0x4}, {0x2, 0x7, 0xf8, 0xbaba}, {0xfda4, 0x5, 0x0, 0x7}, {0x6, 0xd2, 0x1}, {0x900, 0x3, 0x7, 0xffff8001}, {0x2, 0xb, 0x2, 0x3}]}, 0x10) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f786dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='vnet_rx_stopped_ack\x00', r6, 0x0, 0x8}, 0x18) (async, rerun: 32) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000400)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x40000}, {0xfbfffff7}]}}) 25.879989ms ago: executing program 6 (id=4625): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="180000003a00090603000000fdffffff02"], 0x18}}, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f0000000080)={{0x2, 0x4e23, @private=0xa010100}, {0x306, @broadcast}, 0x2e, {0x2, 0x4e21, @empty}, 'ip6gretap0\x00'}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x9, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xabd}, [@generic={0xda, 0xd, 0x2, 0x7, 0x1}, @map_val={0x18, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7db}, @generic={0x6, 0x7, 0x1}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x5}]}, &(0x7f00000000c0)='GPL\x00', 0x1, 0xa2, &(0x7f00000003c0)=""/162, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0xd, 0x5, 0xcb7}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000480)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x0, 0x1, 0xb, 0x6}, {0x4, 0x5, 0x10, 0xb}, {0x5, 0x3, 0xc}, {0x1, 0x3, 0xa, 0x7}, {0x1, 0x4, 0xf, 0x2}, {0x3, 0x1, 0xf, 0x9ba9ca2ad97171c5}], 0x10, 0x4}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r2) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r5, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) mmap(&(0x7f0000953000/0x4000)=nil, 0x4000, 0x2000004, 0x3b071, r0, 0xe2706000) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x18, &(0x7f0000000680)=ANY=[@ANYBLOB="180000008f00000000000000d641000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf09000000000000550901008004000095000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000800000085000000060000007500f4fff0ffffffbf91000000000000b70200000300000085000000ae000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 0s ago: executing program 5 (id=4626): unshare(0x6a040000) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}}], {0x14}}, 0x68}}, 0x0) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200001a00000000000000000000008500000036000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000cd00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) unshare(0x600) (async) write(0xffffffffffffffff, 0x0, 0x0) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) (async) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}], 0x1}}], 0x2, 0x4048884) (async) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x2, 0x9, 0x200, 0x0, 0xa77a, {0x0, @in6={{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff7}}, 0x74, 0x4, 0xe60e, 0x8, 0x7}}, &(0x7f0000000280)=0xb0) (async) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x6, @mcast2}, 0x1c) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0), 0x18) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) kernel console output (not intermixed with test programs): ] netlink: 4100 bytes leftover after parsing attributes in process `syz.1.3194'. [ 615.863837][T16382] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.871098][T16382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 615.904425][T16378] IPVS: stop unused estimator thread 0... [ 615.911089][T16382] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.918300][T16382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 616.464729][T18239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 616.585067][T18239] veth0_vlan: entered promiscuous mode [ 616.614687][T18239] veth1_vlan: entered promiscuous mode [ 616.627196][ T5143] Bluetooth: hci2: command tx timeout [ 616.695083][T18239] veth0_macvtap: entered promiscuous mode [ 616.729232][T18239] veth1_macvtap: entered promiscuous mode [ 616.775785][T18239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 616.822499][T18239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 616.842328][T16393] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.876407][T16393] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.896091][T16393] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.944637][T16393] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.102425][T16393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.126717][T16393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.200264][T16381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.221536][T18512] netlink: 'syz.0.3208': attribute type 4 has an invalid length. [ 617.228838][T16381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.399679][T18519] xt_CT: You must specify a L4 protocol and not use inversions on it [ 617.434226][T18522] ip6gre1: entered allmulticast mode [ 617.673961][T18535] Unsupported ieee802154 address type: 0 [ 617.705049][T18537] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 617.762392][T18535] lo speed is unknown, defaulting to 1000 [ 617.784088][T16381] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 617.819486][T18540] __nla_validate_parse: 6 callbacks suppressed [ 617.819503][T18540] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3218'. [ 617.951298][T18542] netlink: 'syz.1.3219': attribute type 3 has an invalid length. [ 617.998842][T18542] netlink: 'syz.1.3219': attribute type 1 has an invalid length. [ 618.006108][T18545] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3220'. [ 618.038084][T18543] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3219'. [ 618.047173][T18542] netlink: 212 bytes leftover after parsing attributes in process `syz.1.3219'. [ 618.225276][T18552] netlink: 'syz.1.3221': attribute type 1 has an invalid length. [ 618.235966][ T5826] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 618.257003][T18552] netlink: 'syz.1.3221': attribute type 2 has an invalid length. [ 618.275367][ T5826] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 618.284520][ T5826] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 618.300658][ T5826] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 618.394304][ T5826] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 618.559542][T18558] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3223'. [ 618.587115][T18558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3223'. [ 618.607253][T18558] netlink: 'syz.4.3223': attribute type 13 has an invalid length. [ 618.684616][T18550] lo speed is unknown, defaulting to 1000 [ 618.945728][T18578] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3228'. [ 619.294678][T18572] lo speed is unknown, defaulting to 1000 [ 619.604047][T18592] : entered promiscuous mode [ 619.914444][T18606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3235'. [ 619.932017][T18606] bridge_slave_1: left allmulticast mode [ 619.938243][T18606] bridge_slave_1: left promiscuous mode [ 619.944399][T18606] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.955146][T18606] bridge_slave_0: left allmulticast mode [ 619.961706][T18606] bridge_slave_0: left promiscuous mode [ 619.967977][T18606] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.366540][T18628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3241'. [ 620.475530][ T5143] Bluetooth: hci5: command tx timeout [ 620.476188][T18637] netlink: del zone limit has 4 unknown bytes [ 620.515822][T18550] chnl_net:caif_netlink_parms(): no params data found [ 620.718875][T18647] IPv6: Can't replace route, no match found [ 620.863337][T18655] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3248'. [ 620.876820][T18655] netlink: 'syz.2.3248': attribute type 5 has an invalid length. [ 620.948661][T18550] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.966351][T18550] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.980787][T18550] bridge_slave_0: entered allmulticast mode [ 620.998925][T18550] bridge_slave_0: entered promiscuous mode [ 621.015148][T18550] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.031182][T18550] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.041778][T18550] bridge_slave_1: entered allmulticast mode [ 621.050674][T18550] bridge_slave_1: entered promiscuous mode [ 621.124087][T18665] tipc: Started in network mode [ 621.137093][T18665] tipc: Node identity b697cea9104c, cluster identity 4711 [ 621.157731][T18665] tipc: Enabled bearer , priority 0 [ 621.234959][T18671] syzkaller0: entered promiscuous mode [ 621.244209][T18671] syzkaller0: entered allmulticast mode [ 621.264391][T18550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 621.301074][T18550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.311090][T18676] netlink: 'syz.4.3254': attribute type 13 has an invalid length. [ 621.319297][T18676] netlink: 'syz.4.3254': attribute type 17 has an invalid length. [ 621.329766][T18665] tipc: Resetting bearer [ 621.363632][T18674] netlink: 'syz.2.3253': attribute type 18 has an invalid length. [ 621.385485][T18676] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 621.402503][T18661] tipc: Resetting bearer [ 621.431589][T18661] tipc: Disabling bearer [ 621.487350][T18550] team0: Port device team_slave_0 added [ 621.502527][T18550] team0: Port device team_slave_1 added [ 621.607699][T18690] netlink: 'syz.1.3258': attribute type 39 has an invalid length. [ 621.631117][T18550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 621.665874][T18550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 621.704674][T18550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 621.765932][T18550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 621.774963][T18550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 621.821887][T18550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 621.837348][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 622.000534][T18550] hsr_slave_0: entered promiscuous mode [ 622.008175][T18550] hsr_slave_1: entered promiscuous mode [ 622.105442][T18709] netlink: 'syz.4.3264': attribute type 21 has an invalid length. [ 622.550818][ T5143] Bluetooth: hci5: command tx timeout [ 622.660777][T18729] ip6gretap0: entered promiscuous mode [ 622.885626][T18550] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 622.941295][T18550] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 622.983642][T18749] __nla_validate_parse: 7 callbacks suppressed [ 622.983660][T18749] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3275'. [ 623.004145][T18550] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 623.014564][T18749] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3275'. [ 623.032577][T18550] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 623.042365][T18744] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3272'. [ 623.063440][T18750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3273'. [ 623.088669][T18751] netlink: 'syz.2.3273': attribute type 2 has an invalid length. [ 623.106325][T18751] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3273'. [ 623.341991][T18774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3278'. [ 623.465871][T18550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 623.485381][T18776] lo speed is unknown, defaulting to 1000 [ 623.530012][T18550] 8021q: adding VLAN 0 to HW filter on device team0 [ 623.563298][T16378] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.570578][T16378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 623.660484][T16378] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.667779][T16378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 623.765499][T18790] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 624.248366][T18798] IPv6: NLM_F_REPLACE set, but no existing node found! [ 624.318710][T18783] lo speed is unknown, defaulting to 1000 [ 624.549493][T18807] netlink: 'syz.2.3280': attribute type 2 has an invalid length. [ 624.629846][ T5143] Bluetooth: hci5: command tx timeout [ 624.731836][T18814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3291'. [ 624.764902][T18550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 624.934464][T18822] syz_tun: entered promiscuous mode [ 624.940358][T18822] syz_tun: entered allmulticast mode [ 624.950515][T18822] netlink: 'syz.1.3294': attribute type 2 has an invalid length. [ 625.135014][T18550] veth0_vlan: entered promiscuous mode [ 625.376275][T18550] veth1_vlan: entered promiscuous mode [ 625.462176][T18550] veth0_macvtap: entered promiscuous mode [ 625.501274][T18550] veth1_macvtap: entered promiscuous mode [ 625.552447][T18550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 625.591710][T18550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 625.623960][T16382] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.644675][T16382] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.715195][T16382] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.731329][T16382] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.923495][T16378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.942213][T16378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.954587][T18851] batadv_slave_1: entered promiscuous mode [ 626.013921][T16352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.023395][T16352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.037478][T18849] batadv_slave_1: left promiscuous mode [ 626.215182][T18862] tipc: Started in network mode [ 626.220851][T18862] tipc: Node identity 1261e60720ba, cluster identity 4711 [ 626.228814][T18862] tipc: Enabled bearer , priority 0 [ 626.250897][T18862] tipc: Disabling bearer [ 626.268447][T18867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3212'. [ 626.289540][T18867] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3212'. [ 626.310267][T18871] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3309'. [ 626.322079][T18873] netlink: 'syz.4.3308': attribute type 1 has an invalid length. [ 626.337147][T18871] 0ªX¹¦D: renamed from gretap0 (while UP) [ 626.346435][T18871] 0ªX¹¦D: entered allmulticast mode [ 626.352867][T18871] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 626.528818][T18871] lo speed is unknown, defaulting to 1000 [ 626.622305][T18884] bond1: invalid ARP target 0.0.0.0 specified for addition [ 626.647937][T18884] bond1: option arp_ip_target: invalid value (0) [ 626.658584][T18884] bond1 (unregistering): Released all slaves [ 626.717078][ T5143] Bluetooth: hci5: command tx timeout [ 626.985565][T18897] can: request_module (can-proto-0) failed. [ 627.357950][T18923] netlink: 'syz.2.3321': attribute type 6 has an invalid length. [ 627.859658][T18934] tipc: Started in network mode [ 627.864608][T18934] tipc: Node identity , cluster identity 4711 [ 627.871074][T18934] tipc: Failed to obtain node identity [ 627.876798][T18934] tipc: Enabling of bearer rejected, failed to enable media [ 627.958919][T18934] syzkaller0: entered promiscuous mode [ 627.964429][T18934] syzkaller0: entered allmulticast mode [ 629.522644][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 629.950190][T18940] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1500) ! [ 630.328130][T18977] __nla_validate_parse: 4 callbacks suppressed [ 630.328150][T18977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3336'. [ 630.512386][T18993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3341'. [ 630.857773][T18990] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 630.909200][T18995] bond0: entered promiscuous mode [ 630.914272][T18995] bond_slave_0: entered promiscuous mode [ 630.941366][T18995] bond_slave_1: entered promiscuous mode [ 630.992496][T19000] lo speed is unknown, defaulting to 1000 [ 631.019957][T19005] netlink: 'syz.4.3343': attribute type 1 has an invalid length. [ 631.037435][T19005] netlink: 'syz.4.3343': attribute type 21 has an invalid length. [ 631.055825][T19005] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3343'. [ 631.176769][T19005] netlink: 'syz.4.3343': attribute type 1 has an invalid length. [ 631.341422][T19013] lo speed is unknown, defaulting to 1000 [ 631.749477][T19038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3350'. [ 631.759161][T19038] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 632.272627][T19042] block nbd2: Unsupported socket: should be TCP or UNIX. [ 632.295374][T19047] Bluetooth: MGMT ver 1.23 [ 632.320302][T19047] netlink: 'syz.4.3352': attribute type 49 has an invalid length. [ 632.456685][T19047] netlink: 'syz.4.3352': attribute type 49 has an invalid length. [ 632.741425][T19067] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3360'. [ 632.751464][T19067] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3360'. [ 632.791542][T19070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3358'. [ 632.804279][T19071] netlink: 'syz.3.3359': attribute type 13 has an invalid length. [ 632.829980][T19071] netlink: 'syz.3.3359': attribute type 17 has an invalid length. [ 632.847863][T19070] vlan2: entered promiscuous mode [ 632.862213][T19070] bond0: entered promiscuous mode [ 632.870122][T19070] bond_slave_0: entered promiscuous mode [ 632.877157][T19070] bond_slave_1: entered promiscuous mode [ 632.941402][T19071] 0ªX¹¦D: left allmulticast mode [ 633.038926][T19071] bond0: left promiscuous mode [ 633.074548][T19071] bond_slave_0: left promiscuous mode [ 633.082648][T19071] bond_slave_1: left promiscuous mode [ 633.095791][T19071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 633.127400][T19071] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 633.170312][T19081] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 633.185803][T19081] batman_adv: batadv0: Adding interface: gretap1 [ 633.192925][T19081] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 633.220803][T19081] batman_adv: batadv0: Interface activated: gretap1 [ 633.315347][T19064] lo speed is unknown, defaulting to 1000 [ 633.417600][T19096] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 633.569898][T19100] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3367'. [ 633.608237][T19102] netlink: 7906 bytes leftover after parsing attributes in process `syz.4.3369'. [ 633.618680][T19088] lo speed is unknown, defaulting to 1000 [ 633.690179][T19104] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3370'. [ 633.959699][T19118] netlink: 'syz.4.3374': attribute type 1 has an invalid length. [ 633.969171][T19094] lo speed is unknown, defaulting to 1000 [ 634.274076][T19128] x_tables: duplicate underflow at hook 2 [ 634.343388][T19115] lo speed is unknown, defaulting to 1000 [ 634.656148][T19135] lo speed is unknown, defaulting to 1000 [ 635.426885][ T5143] Bluetooth: hci3: command 0x0401 tx timeout [ 635.454454][T14429] IPVS: starting estimator thread 0... [ 635.463334][T19146] __nla_validate_parse: 6 callbacks suppressed [ 635.463352][T19146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3381'. [ 635.577688][T19148] IPVS: using max 27 ests per chain, 64800 per kthread [ 635.615587][T19147] bridge: RTM_NEWNEIGH with invalid ether address [ 635.635169][T19149] bridge: RTM_NEWNEIGH with invalid ether address [ 635.729107][T19152] tc_dump_action: action bad kind [ 636.028721][T19171] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3387'. [ 636.059876][T19160] lo speed is unknown, defaulting to 1000 [ 636.398024][T19162] lo speed is unknown, defaulting to 1000 [ 636.635458][T19183] netlink: 'syz.3.3390': attribute type 13 has an invalid length. [ 636.676379][T19190] bond1: option arp_validate: invalid value (18446744073491447809) [ 636.691385][T19190] bond1 (unregistering): Released all slaves [ 637.031205][T19183] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 637.055148][T19183] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 637.308317][T16381] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.330892][T16381] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.397320][T16381] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.422762][T16381] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.437908][T19212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3397'. [ 637.458599][T19212] netlink: 19 bytes leftover after parsing attributes in process `syz.3.3397'. [ 637.642654][T19208] lo speed is unknown, defaulting to 1000 [ 637.687305][T14429] IPVS: starting estimator thread 0... [ 637.797371][T19215] IPVS: using max 34 ests per chain, 81600 per kthread [ 638.450584][T19235] veth3: entered promiscuous mode [ 638.735901][T19244] lo speed is unknown, defaulting to 1000 [ 639.051358][T19257] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3411'. [ 639.063235][T19246] lo speed is unknown, defaulting to 1000 [ 639.111925][T19257] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3411'. [ 645.521957][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 651.122035][T19299] xt_hashlimit: size too large, truncated to 1048576 [ 654.941898][T19301] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3420'. [ 657.430232][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 657.468671][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 657.492874][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 657.532347][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 657.554140][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 657.715988][ T5826] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 657.741523][ T5826] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 657.759719][ T5826] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 657.790617][ T5826] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 657.836092][ T5826] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 658.085011][T19324] lo speed is unknown, defaulting to 1000 [ 658.485048][T19338] netlink: 'syz.3.3431': attribute type 1 has an invalid length. [ 658.637893][T19341] bond1: entered promiscuous mode [ 658.657026][T19341] bond1: entered allmulticast mode [ 658.684721][T19341] 8021q: adding VLAN 0 to HW filter on device bond1 [ 658.921019][T19328] lo speed is unknown, defaulting to 1000 [ 658.933813][T19345] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3433'. [ 658.949376][T19344] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3433'. [ 659.055632][T19349] x_tables: duplicate underflow at hook 1 [ 659.091882][T19352] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3432'. [ 659.421466][T19368] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3436'. [ 659.453976][T19368] batadv1: entered promiscuous mode [ 659.471656][T19368] batadv1: entered allmulticast mode [ 659.589304][T19324] chnl_net:caif_netlink_parms(): no params data found [ 659.667187][ T5826] Bluetooth: hci4: command tx timeout [ 659.772247][T19364] tipc: Enabled bearer , priority 0 [ 659.801903][T16393] bridge_slave_1: left allmulticast mode [ 659.807936][T16393] bridge_slave_1: left promiscuous mode [ 659.815188][T16393] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.828894][T16393] bridge_slave_0: left allmulticast mode [ 659.835766][T16393] bridge_slave_0: left promiscuous mode [ 659.842064][T16393] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.069403][ T5826] Bluetooth: hci6: command tx timeout [ 660.353784][T16393] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 660.364649][T16393] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 660.374977][T16393] bond0 (unregistering): Released all slaves [ 660.395804][T19364] syzkaller0: entered promiscuous mode [ 660.404401][T19364] syzkaller0: entered allmulticast mode [ 660.510099][T19324] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.527724][T19324] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.548186][T19324] bridge_slave_0: entered allmulticast mode [ 660.556399][T19324] bridge_slave_0: entered promiscuous mode [ 660.627450][T19324] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.644963][T19324] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.656301][T19324] bridge_slave_1: entered allmulticast mode [ 660.665044][T19324] bridge_slave_1: entered promiscuous mode [ 660.772713][T19391] tipc: Enabling of bearer rejected, failed to enable media [ 660.809785][T19324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 660.823114][T19324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 660.887783][T14829] tipc: Node number set to 2799423145 [ 660.914731][T19401] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3444'. [ 660.962309][T19328] chnl_net:caif_netlink_parms(): no params data found [ 661.009269][T19324] team0: Port device team_slave_0 added [ 661.031526][T19324] team0: Port device team_slave_1 added [ 661.070897][T19406] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3446'. [ 661.080238][T19406] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3446'. [ 661.152311][T19407] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3446'. [ 661.176169][T19407] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3446'. [ 661.282134][T19324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 661.290025][T19324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 661.318357][T19324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 661.341990][T19324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 661.349696][T19324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 661.377695][T19324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 661.395531][T16393] hsr_slave_0: left promiscuous mode [ 661.403167][T16393] hsr_slave_1: left promiscuous mode [ 661.409261][T16393] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 661.417541][T16393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 661.445883][T16393] pimreg (unregistering): left allmulticast mode [ 661.657558][T19422] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3449'. [ 661.659816][T19425] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3449'. [ 661.746863][ T5826] Bluetooth: hci4: command tx timeout [ 661.965195][T16393] team0 (unregistering): Port device team_slave_1 removed [ 662.012053][T16393] team0 (unregistering): Port device team_slave_0 removed [ 662.153854][ T5826] Bluetooth: hci6: command tx timeout [ 662.613725][T19416] team0 (unregistering): Port device team_slave_1 removed [ 662.754612][T19328] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.773204][T19328] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.775446][T19439] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3452'. [ 662.790930][T19328] bridge_slave_0: entered allmulticast mode [ 662.816832][T19328] bridge_slave_0: entered promiscuous mode [ 662.864630][T19328] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.873426][T19328] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.881747][T19328] bridge_slave_1: entered allmulticast mode [ 662.892000][T19328] bridge_slave_1: entered promiscuous mode [ 662.997911][T19324] hsr_slave_0: entered promiscuous mode [ 663.005169][T19324] hsr_slave_1: entered promiscuous mode [ 663.020543][T19324] debugfs: 'hsr0' already exists in 'hsr' [ 663.026484][T19324] Cannot create hsr debugfs directory [ 663.080278][T19328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 663.136208][T19328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 663.185166][T19458] Cannot find add_set index 2 as target [ 663.265969][T19446] lo speed is unknown, defaulting to 1000 [ 663.292355][T19328] team0: Port device team_slave_0 added [ 663.311474][T19328] team0: Port device team_slave_1 added [ 663.414435][T19328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 663.422548][T19328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.450513][T19328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 663.474221][T19328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 663.481361][T19328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.507924][T19328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 663.655657][T19328] hsr_slave_0: entered promiscuous mode [ 663.662257][T19328] hsr_slave_1: entered promiscuous mode [ 663.670429][T19328] debugfs: 'hsr0' already exists in 'hsr' [ 663.677271][T19328] Cannot create hsr debugfs directory [ 663.753944][T16393] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.831287][ T5826] Bluetooth: hci4: command tx timeout [ 663.885311][T16393] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.022620][T16393] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.049199][T19471] netlink: 'syz.1.3461': attribute type 16 has an invalid length. [ 664.063629][T19471] netlink: 'syz.1.3461': attribute type 3 has an invalid length. [ 664.076789][T19471] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.3461'. [ 664.208428][T16393] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.227058][ T5826] Bluetooth: hci6: command tx timeout [ 664.266372][T19324] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 664.288617][T19324] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 664.356759][T19324] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 664.454271][T19324] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 664.585142][T19489] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3463'. [ 664.709976][T19328] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 664.760813][T19328] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 664.785364][T19328] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 664.800619][T19328] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 664.829980][T16393] bridge_slave_1: left allmulticast mode [ 664.835682][T16393] bridge_slave_1: left promiscuous mode [ 664.841971][T16393] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.856158][T16393] bridge_slave_0: left allmulticast mode [ 664.863093][T16393] bridge_slave_0: left promiscuous mode [ 664.870975][T16393] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.892746][T16393] batman_adv: batadv0: Interface deactivated: gretap1 [ 665.259204][T16393] batman_adv: batadv0: Removing interface: gretap1 [ 665.584788][T16393] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 665.599200][T16393] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 665.609922][T16393] bond0 (unregistering): Released all slaves [ 665.654919][T19509] pimreg: tun_chr_ioctl cmd 1074025677 [ 665.662004][T19509] pimreg: linktype set to 780 [ 665.675260][T19493] lo speed is unknown, defaulting to 1000 [ 665.684166][T19507] pimreg: tun_chr_ioctl cmd 35111 [ 665.740058][T19324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 665.829043][T19324] 8021q: adding VLAN 0 to HW filter on device team0 [ 665.851327][T16382] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.858559][T16382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 665.885738][T16382] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.892983][T16382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 665.908523][ T5826] Bluetooth: hci4: command tx timeout [ 666.101321][T19328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 666.211738][T19328] 8021q: adding VLAN 0 to HW filter on device team0 [ 666.239900][T16370] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.247173][T16370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 666.321556][ T5826] Bluetooth: hci6: command tx timeout [ 666.334847][T16382] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.342446][T16382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.451391][T16393] hsr_slave_0: left promiscuous mode [ 666.458821][T16393] hsr_slave_1: left promiscuous mode [ 666.464823][T16393] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 666.473314][T16393] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 666.481667][T16393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 666.490741][T16393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 666.514658][T16393] veth1_macvtap: left promiscuous mode [ 666.520611][T16393] veth0_macvtap: left promiscuous mode [ 666.526178][T16393] veth1_vlan: left promiscuous mode [ 666.531830][T16393] veth0_vlan: left promiscuous mode [ 667.001903][T16393] team0 (unregistering): Port device team_slave_1 removed [ 667.050972][T16393] team0 (unregistering): Port device team_slave_0 removed [ 667.665437][T19535] netlink: 'syz.2.3473': attribute type 13 has an invalid length. [ 667.869600][T19535] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.877349][T19535] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.120252][T19535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 668.155714][T19535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 668.451090][T19539] bond0: option arp_validate: invalid value (18446744073491447809) [ 668.459488][T16382] bond0: (slave bond_slave_0): interface is now down [ 668.466475][T16382] bond0: (slave bond_slave_1): interface is now down [ 668.490037][T16381] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.526690][T16352] bond0: (slave bond_slave_0): interface is now down [ 668.533414][T16352] bond0: (slave bond_slave_1): interface is now down [ 668.547182][T16381] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.566941][T16382] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.597448][T16370] bond0: (slave bond_slave_0): interface is now down [ 668.604157][T16370] bond0: (slave bond_slave_1): interface is now down [ 668.630047][T16395] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.677021][T16395] bond0: (slave bond_slave_0): interface is now down [ 668.686673][T16395] bond0: (slave bond_slave_1): interface is now down [ 668.714721][T16395] bond0: (slave bond_slave_0): interface is now down [ 668.754843][T16395] bond0: (slave bond_slave_1): interface is now down [ 668.799794][T16382] bond0: (slave bond_slave_0): interface is now down [ 668.806521][T16382] bond0: (slave bond_slave_1): interface is now down [ 668.840172][T16395] bond0: (slave bond_slave_0): interface is now down [ 668.840452][T19324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 668.887074][T16395] bond0: (slave bond_slave_1): interface is now down [ 668.917190][T16395] bond0: (slave bond_slave_0): interface is now down [ 668.924613][T16395] bond0: (slave bond_slave_1): interface is now down [ 668.980941][T16395] bond0: (slave bond_slave_0): interface is now down [ 668.987798][T16395] bond0: (slave bond_slave_1): interface is now down [ 669.041794][T16395] bond0: (slave bond_slave_0): interface is now down [ 669.049964][T19568] __nla_validate_parse: 1 callbacks suppressed [ 669.049981][T19568] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3477'. [ 669.053819][T16395] bond0: (slave bond_slave_1): interface is now down [ 669.092357][T16395] bond0: now running without any active interface! [ 669.206544][T19328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 669.611356][T19324] veth0_vlan: entered promiscuous mode [ 669.634577][T19324] veth1_vlan: entered promiscuous mode [ 669.690871][T19324] veth0_macvtap: entered promiscuous mode [ 669.708980][T19324] veth1_macvtap: entered promiscuous mode [ 669.758341][T19324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 669.795354][T19324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 669.833091][T16382] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.859624][T16382] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.890205][T16382] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.914190][T16382] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.073127][T16395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.093508][T16395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 670.128260][T19328] veth0_vlan: entered promiscuous mode [ 670.200842][T16352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.215161][T19328] veth1_vlan: entered promiscuous mode [ 670.232048][T16352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 670.319604][T19328] veth0_macvtap: entered promiscuous mode [ 670.341386][T19328] veth1_macvtap: entered promiscuous mode [ 670.381253][T19328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 670.457737][T19328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 670.515445][T16393] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.551673][T16393] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.573684][T16352] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.634670][T16352] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.828083][T19637] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3487'. [ 671.012550][T19641] netlink: 'syz.3.3489': attribute type 1 has an invalid length. [ 671.246432][T19641] bond2: entered promiscuous mode [ 671.252040][T19641] bond2: entered allmulticast mode [ 671.284368][T19642] bridge2: entered promiscuous mode [ 671.313006][T19642] bridge2: entered allmulticast mode [ 671.330922][T19642] bond2: (slave bridge2): making interface the new active one [ 671.371308][T19642] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 671.561539][T19653] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 671.677279][T16382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.687604][T19659] x_tables: duplicate underflow at hook 1 [ 671.691023][T16382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.740608][T19661] batadv_slave_0: entered promiscuous mode [ 671.773782][T19660] lo speed is unknown, defaulting to 1000 [ 671.787414][T16393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.795253][T16393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.796351][T19653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3492'. [ 672.634628][T19658] lo speed is unknown, defaulting to 1000 [ 672.676457][T19691] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3502'. [ 673.076874][T19701] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3505'. [ 673.092495][T19700] ip6gretap0: left promiscuous mode [ 673.131481][T19700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 673.167570][T19700] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 674.275658][T19740] netlink: 'syz.1.3516': attribute type 10 has an invalid length. [ 674.304798][T19743] netlink: 'syz.2.3517': attribute type 11 has an invalid length. [ 674.348332][T19740] 8021q: adding VLAN 0 to HW filter on device team0 [ 674.358111][T19746] netlink: 'syz.5.3518': attribute type 1 has an invalid length. [ 674.377340][T16352] bond0: (slave team0): interface is now down [ 674.383696][T19740] bond0: (slave team0): Enslaving as an active interface with an up link [ 674.396876][T16382] bond0: (slave team0): interface is now down [ 674.421625][T16378] bond0: (slave team0): interface is now down [ 674.428379][T16378] bond0: now running without any active interface! [ 674.439128][T19740] netlink: 'syz.1.3516': attribute type 1 has an invalid length. [ 674.495270][T19756] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3520'. [ 674.504709][T19754] lo speed is unknown, defaulting to 1000 [ 674.521894][T19752] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3519'. [ 674.662099][T19762] netlink: 5636 bytes leftover after parsing attributes in process `syz.1.3521'. [ 674.683272][T19763] netlink: 288 bytes leftover after parsing attributes in process `syz.2.3523'. [ 674.721439][T19763] netlink: 'syz.2.3523': attribute type 1 has an invalid length. [ 674.744510][T19763] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3523'. [ 674.763310][T19760] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.764695][T19763] netlink: 'syz.2.3523': attribute type 2 has an invalid length. [ 674.808689][T19763] netlink: 'syz.2.3523': attribute type 1 has an invalid length. [ 674.826839][T19763] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3523'. [ 674.829290][T19764] macsec1: entered promiscuous mode [ 674.892873][T19764] macsec1: entered allmulticast mode [ 674.923808][T19760] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.119368][T19760] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.148809][T19773] netlink: 'syz.1.3525': attribute type 1 has an invalid length. [ 675.188064][T19773] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3525'. [ 675.373574][T19760] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.587847][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 675.734164][T16352] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.773801][T16378] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.860216][T16377] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.934527][T16377] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.981835][T19800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3536'. [ 676.242586][T19818] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3541'. [ 676.598256][T19839] pim6reg99999999: entered allmulticast mode [ 676.678633][T19845] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3548'. [ 676.719591][T19848] team_slave_1: entered promiscuous mode [ 676.725481][T19848] team_slave_1: entered allmulticast mode [ 677.125995][T19874] geneve2: entered promiscuous mode [ 677.155219][T19874] batadv0: entered promiscuous mode [ 677.161624][T19874] macsec1: entered promiscuous mode [ 677.173137][T19874] batadv0: left promiscuous mode [ 677.373040][T19889] vlan2: entered allmulticast mode [ 677.378671][T19889] bridge0: entered allmulticast mode [ 677.398611][T19888] lo speed is unknown, defaulting to 1000 [ 678.079397][T19893] lo speed is unknown, defaulting to 1000 [ 678.168978][T19915] netlink: 'syz.6.3564': attribute type 5 has an invalid length. [ 678.600670][T19923] netlink: 'syz.6.3566': attribute type 12 has an invalid length. [ 678.632404][T19921] tipc: Enabling of bearer rejected, failed to enable media [ 678.668976][T19924] lo speed is unknown, defaulting to 1000 [ 678.970965][T19933] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 679.751411][T19934] syz.6.3567 (19934) used greatest stack depth: 17784 bytes left [ 679.932509][T19960] batadv_slave_1: entered promiscuous mode [ 680.109469][T19968] __nla_validate_parse: 4 callbacks suppressed [ 680.109487][T19968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3573'. [ 680.144936][T19968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3573'. [ 680.187871][T19959] batadv_slave_1: left promiscuous mode [ 680.366488][T19970] netlink: 'syz.6.3575': attribute type 4 has an invalid length. [ 680.541395][T19980] netlink: 'syz.1.3577': attribute type 1 has an invalid length. [ 680.602822][T19983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3577'. [ 680.640807][T19987] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3579'. [ 680.888595][T19981] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3579'. [ 680.902371][T19991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3580'. [ 680.933135][T19991] netlink: zone id is out of range [ 680.938972][T19991] netlink: zone id is out of range [ 680.946011][T19991] netlink: zone id is out of range [ 680.953708][T19991] netlink: zone id is out of range [ 680.962556][T19991] netlink: zone id is out of range [ 680.971999][T19991] netlink: zone id is out of range [ 680.988285][T19992] netlink: zone id is out of range [ 681.037838][T19992] netlink: del zone limit has 4 unknown bytes [ 681.111824][T19991] netlink: set zone limit has 4 unknown bytes [ 681.142673][T19994] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3581'. [ 681.158418][T19994] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3581'. [ 681.177791][T19994] tipc: Cannot configure node identity twice [ 681.184245][T19994] tipc: Cannot configure node identity twice [ 681.266171][T20003] warn_alloc: 4 callbacks suppressed [ 681.266190][T20003] syz.6.3585: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 681.336722][T20003] CPU: 0 UID: 0 PID: 20003 Comm: syz.6.3585 Not tainted syzkaller #0 PREEMPT(full) [ 681.336747][T20003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 681.336759][T20003] Call Trace: [ 681.336765][T20003] [ 681.336775][T20003] dump_stack_lvl+0x189/0x250 [ 681.336811][T20003] ? __pfx_dump_stack_lvl+0x10/0x10 [ 681.336831][T20003] ? __pfx__printk+0x10/0x10 [ 681.336852][T20003] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 681.336874][T20003] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 681.336899][T20003] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 681.336924][T20003] warn_alloc+0x214/0x310 [ 681.336943][T20003] ? stack_depot_save_flags+0x40/0x860 [ 681.336967][T20003] ? __pfx_warn_alloc+0x10/0x10 [ 681.336992][T20003] ? kasan_save_track+0x4f/0x80 [ 681.337012][T20003] ? xskq_create+0x56/0x170 [ 681.337033][T20003] ? xsk_init_queue+0xb0/0x110 [ 681.337053][T20003] ? xsk_setsockopt+0x4dc/0x8d0 [ 681.337073][T20003] ? do_sock_setsockopt+0x179/0x1b0 [ 681.337095][T20003] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 681.337117][T20003] ? do_syscall_64+0xfa/0xfa0 [ 681.337140][T20003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.337167][T20003] __vmalloc_node_range_noprof+0x125/0x12f0 [ 681.337222][T20003] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 681.337250][T20003] ? __kasan_kmalloc+0x93/0xb0 [ 681.337270][T20003] vmalloc_user_noprof+0xad/0xf0 [ 681.337292][T20003] ? xskq_create+0xbf/0x170 [ 681.337316][T20003] xskq_create+0xbf/0x170 [ 681.337343][T20003] xsk_init_queue+0xb0/0x110 [ 681.337369][T20003] xsk_setsockopt+0x4dc/0x8d0 [ 681.337395][T20003] ? __pfx_xsk_setsockopt+0x10/0x10 [ 681.337422][T20003] ? __pfx_aa_sk_perm+0x10/0x10 [ 681.337447][T20003] ? aa_sock_opt_perm+0xff/0x1b0 [ 681.337474][T20003] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 681.337497][T20003] ? __pfx_xsk_setsockopt+0x10/0x10 [ 681.337520][T20003] do_sock_setsockopt+0x179/0x1b0 [ 681.337550][T20003] __x64_sys_setsockopt+0x13f/0x1b0 [ 681.337580][T20003] do_syscall_64+0xfa/0xfa0 [ 681.337603][T20003] ? lockdep_hardirqs_on+0x9c/0x150 [ 681.337627][T20003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.337645][T20003] ? clear_bhb_loop+0x60/0xb0 [ 681.337668][T20003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.337685][T20003] RIP: 0033:0x7fb66298eec9 [ 681.337703][T20003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 681.337718][T20003] RSP: 002b:00007fb66378c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 681.337738][T20003] RAX: ffffffffffffffda RBX: 00007fb662be5fa0 RCX: 00007fb66298eec9 [ 681.337750][T20003] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 681.337761][T20003] RBP: 00007fb662a11f91 R08: 0000000000000004 R09: 0000000000000000 [ 681.337773][T20003] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 681.337785][T20003] R13: 00007fb662be6038 R14: 00007fb662be5fa0 R15: 00007ffd4100d1e8 [ 681.337829][T20003] [ 681.337838][T20003] Mem-Info: [ 681.474626][T20011] vlan2: entered promiscuous mode [ 681.561963][T20014] openvswitch: netlink: VXLAN extension message has 9 unknown bytes. [ 681.569346][T20003] active_anon:7005 inactive_anon:0 isolated_anon:0 [ 681.569346][T20003] active_file:3504 inactive_file:40110 isolated_file:0 [ 681.569346][T20003] unevictable:768 dirty:221 writeback:0 [ 681.569346][T20003] slab_reclaimable:13094 slab_unreclaimable:211419 [ 681.569346][T20003] mapped:29359 shmem:1359 pagetables:1001 [ 681.569346][T20003] sec_pagetables:0 bounce:0 [ 681.569346][T20003] kernel_misc_reclaimable:0 [ 681.569346][T20003] free:1198422 free_pcp:12450 free_cma:0 [ 681.625303][T20011] macvtap0: entered promiscuous mode [ 681.657019][T20003] Node 0 active_anon:28220kB inactive_anon:0kB active_file:14016kB inactive_file:160236kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117436kB dirty:880kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16392kB pagetables:3852kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 681.764475][T20015] netlink: 'syz.6.3585': attribute type 1 has an invalid length. [ 681.774609][T20015] netlink: 236 bytes leftover after parsing attributes in process `syz.6.3585'. [ 681.787031][T20003] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 681.817142][T20015] NCSI netlink: No device for ifindex 813332851 [ 681.843015][T20003] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 681.874918][T20003] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 681.882503][T20003] Node 0 DMA32 free:879404kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28876kB inactive_anon:0kB active_file:14016kB inactive_file:158412kB unevictable:1536kB writepending:880kB present:3129332kB managed:2562036kB mlocked:0kB bounce:0kB free_pcp:38416kB local_pcp:17768kB free_cma:0kB [ 681.921097][T20003] lowmem_reserve[]: 0 0 1 1 1 [ 681.926212][T20003] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1824kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 681.958233][T20003] lowmem_reserve[]: 0 0 0 0 0 [ 681.971480][T20003] Node 1 Normal free:3898408kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:10504kB local_pcp:5696kB free_cma:0kB [ 681.974049][T20022] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3588'. [ 682.044984][T20003] lowmem_reserve[]: 0 0 0 0 0 [ 682.055338][T20003] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 682.072717][T20003] Node 0 DMA32: 3*4kB (ME) 2*8kB (UM) 54*16kB (UME) 218*32kB (UME) 166*64kB (UME) 119*128kB (UM) 50*256kB (UME) 31*512kB (UM) 17*1024kB (UME) 4*2048kB (UME) 193*4096kB (UM) = 878524kB [ 682.105537][T20003] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 682.120188][T20003] Node 1 Normal: 174*4kB (UM) 54*8kB (UME) 52*16kB (UME) 194*32kB (UM) 61*64kB (UME) 14*128kB (UME) 4*256kB (UME) 5*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3898408kB [ 682.140150][T20003] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 682.155673][T20003] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 682.167946][T20003] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 682.180655][T20003] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 682.191507][T20003] 44970 total pagecache pages [ 682.196345][T20003] 0 pages in swap cache [ 682.202148][T20003] Free swap = 124996kB [ 682.206468][T20003] Total swap = 124996kB [ 682.211881][T20003] 2097051 pages RAM [ 682.215972][T20003] 0 pages HighMem/MovableOnly [ 682.222479][T20003] 424452 pages reserved [ 682.228340][T20003] 0 pages cma reserved [ 682.245947][T20016] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.401288][T20016] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.453971][ T8891] IPVS: starting estimator thread 0... [ 682.489153][T20016] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.569157][T20034] IPVS: using max 25 ests per chain, 60000 per kthread [ 682.692542][T20016] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.742060][T20042] tipc: Started in network mode [ 682.750171][T20042] tipc: Node identity b2da16827918, cluster identity 4711 [ 682.769375][T20042] tipc: Enabled bearer , priority 0 [ 682.790756][T20042] syzkaller0: entered promiscuous mode [ 682.802285][T20042] syzkaller0: entered allmulticast mode [ 682.851673][T20042] tipc: Resetting bearer [ 682.879637][T20041] tipc: Resetting bearer [ 682.954147][T20041] tipc: Disabling bearer [ 682.992097][T16352] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.017600][T16352] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.057641][T16352] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.079241][T16352] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.823469][T20066] netlink: 'syz.5.3598': attribute type 1 has an invalid length. [ 707.844403][T20066] __nla_validate_parse: 5 callbacks suppressed [ 707.844422][T20066] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3598'. [ 708.020507][T20075] lo speed is unknown, defaulting to 1000 [ 708.788735][T20077] lo speed is unknown, defaulting to 1000 [ 709.090342][T20107] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3608'. [ 709.369213][T20119] openvswitch: netlink: Flow key attr not present in new flow. [ 709.388008][T20118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3614'. [ 709.406848][T20118] bridge0: entered promiscuous mode [ 709.412607][T20118] macsec1: entered allmulticast mode [ 709.425533][T20118] bridge0: entered allmulticast mode [ 709.458851][T20118] bridge0: port 3(macsec1) entered blocking state [ 709.465464][T20118] bridge0: port 3(macsec1) entered disabled state [ 709.503502][T20118] bridge0: left allmulticast mode [ 709.510098][T20118] bridge0: left promiscuous mode [ 709.626173][T20131] lo speed is unknown, defaulting to 1000 [ 710.182919][T20143] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 1, id = 0 [ 710.745084][T20157] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3621'. [ 711.276438][T20175] netlink: 'syz.5.3627': attribute type 1 has an invalid length. [ 711.314504][T20175] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3627'. [ 711.855336][T20191] netlink: 'syz.3.3631': attribute type 12 has an invalid length. [ 711.936238][T20200] netlink: 'syz.6.3633': attribute type 2 has an invalid length. [ 711.941788][T20196] syzkaller1: entered promiscuous mode [ 711.952288][T20196] syzkaller1: entered allmulticast mode [ 712.012043][T20205] netlink: 'syz.6.3635': attribute type 6 has an invalid length. [ 712.118248][T20212] netlink: 'syz.1.3636': attribute type 11 has an invalid length. [ 712.334108][T20227] tipc: Started in network mode [ 712.348401][T20227] tipc: Node identity 9ee994ebe478, cluster identity 4711 [ 712.367044][T20227] tipc: Enabled bearer , priority 0 [ 712.375522][T20227] syzkaller0: entered promiscuous mode [ 712.394714][T20227] syzkaller0: entered allmulticast mode [ 712.569653][T20226] tipc: Resetting bearer [ 712.617431][T20226] tipc: Disabling bearer [ 712.698345][T20242] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 712.715033][T20247] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3645'. [ 712.717597][T20242] bond1 (unregistering): Released all slaves [ 712.794988][T20246] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3644'. [ 712.913996][T20257] tipc: Enabling of bearer rejected, failed to enable media [ 713.088122][T20271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3647'. [ 713.210741][T20277] netlink: 'syz.1.3652': attribute type 6 has an invalid length. [ 713.359604][T20285] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3654'. [ 713.398227][T20285] netlink: 'syz.1.3654': attribute type 25 has an invalid length. [ 713.408663][T20284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3653'. [ 713.938203][T20296] lo speed is unknown, defaulting to 1000 [ 714.362558][T20314] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3661'. [ 714.635703][T20321] bond1: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 714.649050][T20321] bond1 (unregistering): Released all slaves [ 714.678565][T20307] lo speed is unknown, defaulting to 1000 [ 714.813065][T20328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3663'. [ 714.822786][T20328] netlink: 'syz.2.3663': attribute type 5 has an invalid length. [ 714.844995][T20328] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3663'. [ 714.995537][T20326] bond1: entered promiscuous mode [ 715.000922][T20326] bond1: entered allmulticast mode [ 715.007634][T20326] 8021q: adding VLAN 0 to HW filter on device bond1 [ 715.030456][T20327] netlink: 'syz.2.3663': attribute type 26 has an invalid length. [ 715.045352][T20328] geneve4: entered promiscuous mode [ 715.057133][T20328] geneve4: entered allmulticast mode [ 715.161043][T16393] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 715.173795][T20327] bridge_slave_0: left allmulticast mode [ 715.181180][T20327] bridge_slave_0: left promiscuous mode [ 715.188082][T20327] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.221414][T20327] bridge_slave_1: left allmulticast mode [ 715.224548][T20337] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3665'. [ 715.237143][T20327] bridge_slave_1: left promiscuous mode [ 715.243270][T20327] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.258005][T20327] bond0: (slave bond_slave_0): Releasing backup interface [ 715.266336][T20327] bond_slave_0: left promiscuous mode [ 715.288748][T20327] bond0: (slave bond_slave_1): Releasing backup interface [ 715.300566][T20327] bond_slave_1: left promiscuous mode [ 715.309546][T20327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 715.317646][T20327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 715.325354][T20327] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 715.364521][T16393] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 715.373439][T16393] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 715.383663][T16393] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 715.555484][T20345] netlink: 'syz.2.3667': attribute type 33 has an invalid length. [ 715.563678][T20345] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3667'. [ 715.576426][T20343] tipc: Enabled bearer , priority 0 [ 715.606862][T20343] syzkaller0: entered promiscuous mode [ 715.612378][T20343] syzkaller0: entered allmulticast mode [ 715.647487][T20343] tipc: Resetting bearer [ 715.661980][T20342] tipc: Resetting bearer [ 715.691622][T20342] tipc: Disabling bearer [ 715.714496][T20351] netlink: 'syz.5.3669': attribute type 1 has an invalid length. [ 715.725963][T20348] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3668'. [ 715.736006][T20348] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3668'. [ 715.829622][T20354] netlink: 'syz.5.3669': attribute type 7 has an invalid length. [ 715.837345][T20356] netlink: 'syz.6.3670': attribute type 1 has an invalid length. [ 715.845317][T20356] NCSI netlink: No device for ifindex 813332851 [ 715.852504][T20354] netlink: 'syz.5.3669': attribute type 8 has an invalid length. [ 715.896782][T20354] netlink: 'syz.5.3669': attribute type 4 has an invalid length. [ 715.935799][T20351] 8021q: adding VLAN 0 to HW filter on device bond1 [ 715.946426][T20362] macvlan1: entered allmulticast mode [ 715.982480][T20362] veth1_vlan: entered allmulticast mode [ 716.004476][T20362] bond1: (slave macvlan1): making interface the new active one [ 716.021269][T20362] bond1: (slave macvlan1): Enslaving as an active interface with an up link [ 716.379517][T20384] sctp: [Deprecated]: syz.3.3676 (pid 20384) Use of int in maxseg socket option. [ 716.379517][T20384] Use struct sctp_assoc_value instead [ 716.487316][T20380] veth7: entered promiscuous mode [ 716.518032][T20388] openvswitch: netlink: IP tunnel dst address not specified [ 716.740861][T20402] IPVS: set_ctl: invalid protocol: 47 172.30.0.2:20002 [ 717.051489][T20418] lo speed is unknown, defaulting to 1000 [ 717.569446][T20433] lo speed is unknown, defaulting to 1000 [ 718.022576][T20459] tipc: Enabled bearer , priority 0 [ 718.095079][T20459] tipc: Disabling bearer [ 718.126218][T20468] __nla_validate_parse: 8 callbacks suppressed [ 718.126238][T20468] netlink: 134788 bytes leftover after parsing attributes in process `syz.3.3703'. [ 718.284326][T20466] tipc: Enabled bearer , priority 0 [ 718.325414][T20476] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3705'. [ 718.373664][T20473] 8021q: adding VLAN 0 to HW filter on device bond1 [ 718.381178][T20474] syzkaller0: entered promiscuous mode [ 718.388203][T20474] syzkaller0: entered allmulticast mode [ 718.398582][T20478] validate_nla: 2 callbacks suppressed [ 718.398600][T20478] netlink: 'syz.3.3706': attribute type 1 has an invalid length. [ 718.522693][T20466] tipc: Resetting bearer [ 718.549159][T20465] tipc: Resetting bearer [ 718.626847][ T5826] Bluetooth: hci1: command 0x0406 tx timeout [ 718.638394][T20465] tipc: Disabling bearer [ 718.677401][T20489] netlink: 'syz.3.3708': attribute type 1 has an invalid length. [ 718.701435][T20486] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3708'. [ 718.804167][T20493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3710'. [ 718.873861][T20497] netlink: 'syz.3.3712': attribute type 1 has an invalid length. [ 719.096809][T20505] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 719.170987][T20510] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3717'. [ 719.186466][T20509] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3717'. [ 719.245560][T20521] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3720'. [ 719.248517][T20520] netlink: 'syz.3.3721': attribute type 4 has an invalid length. [ 719.277194][T20516] netlink: 360 bytes leftover after parsing attributes in process `syz.2.3719'. [ 719.290768][T20520] netlink: 'syz.3.3721': attribute type 4 has an invalid length. [ 719.302417][T20521] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3720'. [ 719.348362][T16352] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 719.365917][T16352] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 719.403604][T16352] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 719.421805][T16352] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 719.453698][T20520] lo speed is unknown, defaulting to 1000 [ 719.641460][T20539] tipc: Enabled bearer , priority 0 [ 719.652209][T20538] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3725'. [ 719.683546][T20532] tipc: Disabling bearer [ 733.988649][ T5143] Bluetooth: hci2: command 0x0406 tx timeout [ 737.027205][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 742.791606][T20552] __nla_validate_parse: 2 callbacks suppressed [ 742.791626][T20552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3727'. [ 742.822249][T20547] lo speed is unknown, defaulting to 1000 [ 742.830228][T20552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3727'. [ 742.849656][T20552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3727'. [ 743.033978][T20566] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3734'. [ 743.063691][ T30] audit: type=1800 audit(1759947782.287:10): pid=20566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3734" name="memory.events" dev="tmpfs" ino=775 res=0 errno=0 [ 743.100490][T20569] tipc: Enabled bearer , priority 0 [ 743.110811][T20569] syzkaller0: entered promiscuous mode [ 743.117249][T20569] syzkaller0: entered allmulticast mode [ 743.123043][ T30] audit: type=1804 audit(1759947782.287:11): pid=20566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3734" name="/newroot/148/memory.events" dev="tmpfs" ino=775 res=1 errno=0 [ 743.136705][T20573] netlink: 'syz.2.3737': attribute type 1 has an invalid length. [ 743.154108][T20569] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 743.218502][T20573] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 743.337070][T20568] tipc: Resetting bearer [ 743.489415][T20587] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3741'. [ 743.499989][T20568] tipc: Disabling bearer [ 743.803671][T20606] Bluetooth: MGMT ver 1.23 [ 744.143469][T20624] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3751'. [ 744.243957][T20638] netlink: 'syz.6.3754': attribute type 1 has an invalid length. [ 744.263679][T20639] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 744.272762][T20638] netlink: 'syz.6.3754': attribute type 2 has an invalid length. [ 744.412470][T20646] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3755'. [ 744.434057][T20648] nft_compat: unsupported protocol 0 [ 744.461532][T20646] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3755'. [ 744.482209][T20649] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3756'. [ 744.892497][T20657] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.900340][T20657] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.910824][T20662] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3760'. [ 745.071474][T20657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 745.088446][T20657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 745.162000][T20657] veth1_vlan: left allmulticast mode [ 745.168751][T20657] macvlan1: left allmulticast mode [ 745.286943][T16382] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 745.295420][T16382] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.305031][T16382] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 745.326383][T16382] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.394853][T16382] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 745.405420][T16382] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.418161][T16382] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 745.427399][T16382] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.440659][T20673] syzkaller0: entered promiscuous mode [ 745.452629][T20673] syzkaller0: entered allmulticast mode [ 745.809444][T20699] tipc: New replicast peer: 0.0.0.0 [ 745.818532][T20699] tipc: Enabled bearer , priority 10 [ 745.843619][T20694] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 745.909235][T20699] tipc: New replicast peer: 255.255.255.255 [ 746.540150][T20739] syzkaller0: entered promiscuous mode [ 746.545750][T20739] syzkaller0: entered allmulticast mode [ 746.778131][T20754] xt_ecn: cannot match TCP bits for non-tcp packets [ 746.928428][ T8880] tipc: Node number set to 3418494594 [ 747.695040][T20805] lo speed is unknown, defaulting to 1000 [ 747.798698][T20815] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 748.477891][T20833] __nla_validate_parse: 10 callbacks suppressed [ 748.477912][T20833] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3805'. [ 748.724121][T20849] lo speed is unknown, defaulting to 1000 [ 749.157300][T20865] lo speed is unknown, defaulting to 1000 [ 749.707724][T20876] lo speed is unknown, defaulting to 1000 [ 749.981982][T20891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3821'. [ 750.307919][ T5826] Bluetooth: hci6: command tx timeout [ 750.662794][T20917] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3827'. [ 750.888077][T20931] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3829'. [ 750.896746][T20933] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3832'. [ 750.907061][T20927] 8021q: adding VLAN 0 to HW filter on device bond3 [ 750.914360][T20927] bridge0: port 1(bond3) entered blocking state [ 750.921364][T20927] bridge0: port 1(bond3) entered disabled state [ 750.928053][T20927] bond3: entered allmulticast mode [ 750.935880][T20927] bond3: entered promiscuous mode [ 751.133115][T20946] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 751.159758][T20951] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3834'. [ 751.176268][T20947] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 751.237683][T20931] lo speed is unknown, defaulting to 1000 [ 751.378562][T20962] dvmrp8: entered allmulticast mode [ 751.513460][T20958] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.535464][T20967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3836'. [ 751.569343][T20964] netlink: 'syz.2.3836': attribute type 322 has an invalid length. [ 751.612977][T20967] team0: entered promiscuous mode [ 751.619499][T20967] team0: entered allmulticast mode [ 751.636671][T20962] lo speed is unknown, defaulting to 1000 [ 751.730210][T20958] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.870665][T20958] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.009513][T20982] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3841'. [ 752.061368][T20984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3843'. [ 752.070665][T20984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3843'. [ 752.191802][T20958] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.237289][T20961] dvmrp8: left allmulticast mode [ 752.635747][T16395] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.690142][T16377] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.737245][T16377] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.799531][T16377] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.241115][T21018] netlink: 'syz.3.3855': attribute type 4 has an invalid length. [ 753.302351][T21023] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 753.435799][T21025] lo speed is unknown, defaulting to 1000 [ 753.742603][T21044] __nla_validate_parse: 3 callbacks suppressed [ 753.742622][T21044] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.3862'. [ 754.395508][T21058] tipc: Enabled bearer , priority 0 [ 754.409415][T21058] syzkaller0: entered promiscuous mode [ 754.415533][T21058] syzkaller0: entered allmulticast mode [ 754.489875][T21058] dummy0: entered promiscuous mode [ 754.516642][T21062] sctp: [Deprecated]: syz.1.3867 (pid 21062) Use of int in max_burst socket option. [ 754.516642][T21062] Use struct sctp_assoc_value instead [ 754.547432][T21058] debugfs: 'hsr1' already exists in 'hsr' [ 754.554073][T21058] Cannot create hsr debugfs directory [ 754.560519][T21058] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 754.606821][T21058] hsr1: Slave B (dummy0) is not up; please bring it up to get a fully working HSR network [ 754.633621][T21058] hsr1: entered promiscuous mode [ 754.645815][T21068] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3868'. [ 754.661228][ T8882] IPVS: starting estimator thread 0... [ 754.667058][T21058] hsr1: entered allmulticast mode [ 754.672111][T21058] bond0: entered allmulticast mode [ 754.687863][T21058] dummy0: entered allmulticast mode [ 754.704529][T21066] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3866'. [ 754.743736][T21074] syzkaller0: mtu greater than device maximum [ 754.757008][T21077] IPVS: using max 33 ests per chain, 79200 per kthread [ 754.807671][T21057] tipc: Resetting bearer [ 754.870583][T21057] tipc: Disabling bearer [ 754.926736][T21086] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3872'. [ 755.046353][T21089] IPVS: set_ctl: invalid protocol: 0 10.1.1.1:20004 [ 755.420602][T21107] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3878'. [ 755.645278][T21116] netlink: zone id is out of range [ 755.684714][T21116] netlink: zone id is out of range [ 755.728397][T21116] netlink: zone id is out of range [ 755.763371][T21116] netlink: zone id is out of range [ 755.784967][T21110] lo speed is unknown, defaulting to 1000 [ 755.795045][T21116] netlink: zone id is out of range [ 755.828403][T21116] netlink: zone id is out of range [ 756.141198][T21116] net_ratelimit: 26 callbacks suppressed [ 756.141218][T21116] netlink: zone id is out of range [ 756.195372][T21116] netlink: zone id is out of range [ 756.268023][T21116] netlink: zone id is out of range [ 756.273685][T21116] netlink: zone id is out of range [ 756.376308][T21116] netlink: set zone limit has 4 unknown bytes [ 757.017357][T21169] netlink: 'syz.5.3894': attribute type 6 has an invalid length. [ 757.050174][T21172] netlink: 'syz.2.3892': attribute type 1 has an invalid length. [ 757.361605][T21176] bond2: (slave bridge4): making interface the new active one [ 757.365814][T21187] netlink: 596 bytes leftover after parsing attributes in process `syz.1.3898'. [ 757.370783][T21176] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 757.388102][T21180] tipc: Enabling of bearer rejected, already enabled [ 757.398121][T21190] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3897'. [ 757.471052][T21173] syzkaller1: entered promiscuous mode [ 757.486609][T21173] syzkaller1: entered allmulticast mode [ 757.698332][T21198] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3900'. [ 757.861801][T21191] vlan2: entered allmulticast mode [ 757.901710][T21191] bridge1: port 1(vlan2) entered blocking state [ 757.903229][T21214] netlink: 'syz.1.3901': attribute type 13 has an invalid length. [ 757.929922][T21191] bridge1: port 1(vlan2) entered disabled state [ 757.939589][T21191] vlan2: entered promiscuous mode [ 757.944642][T21191] bridge0: entered promiscuous mode [ 757.950822][T21214] netlink: 'syz.1.3901': attribute type 17 has an invalid length. [ 758.021676][T21214] syz_tun: left promiscuous mode [ 758.031188][T21214] syz_tun: left allmulticast mode [ 758.078941][T21214] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 758.095527][T21222] netlink: 292 bytes leftover after parsing attributes in process `syz.3.3903'. [ 758.132617][T21184] mac80211_hwsim hwsim55 wlan0: entered allmulticast mode [ 758.215707][T21213] lo speed is unknown, defaulting to 1000 [ 758.895890][T21254] pimreg: entered allmulticast mode [ 758.933382][T21254] pimreg: left allmulticast mode [ 759.010361][T21251] lo speed is unknown, defaulting to 1000 [ 759.013190][T21263] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3916'. [ 759.207306][T21271] netlink: 'syz.1.3917': attribute type 1 has an invalid length. [ 759.219742][T21271] netlink: 'syz.1.3917': attribute type 3 has an invalid length. [ 759.228541][T21271] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3917'. [ 759.280722][T21275] netlink: 'syz.2.3919': attribute type 83 has an invalid length. [ 759.407546][T21279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3921'. [ 759.444887][T21283] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3922'. [ 760.177704][T21295] vxcan1: entered allmulticast mode [ 760.674347][T21309] xt_CT: You must specify a L4 protocol and not use inversions on it [ 760.765993][T21308] vlan3: entered promiscuous mode [ 760.786805][T21308] bond0: entered promiscuous mode [ 760.792019][T21308] bond_slave_0: entered promiscuous mode [ 760.807500][T21308] bond_slave_1: entered promiscuous mode [ 760.826447][T21308] team0: entered promiscuous mode [ 760.832407][T21308] team_slave_0: entered promiscuous mode [ 760.847001][T21308] team_slave_1: entered promiscuous mode [ 760.989604][T21315] netlink: 'syz.3.3929': attribute type 2 has an invalid length. [ 761.041870][T21294] lo speed is unknown, defaulting to 1000 [ 761.125608][T21319] dvmrp8: entered allmulticast mode [ 761.265000][T21326] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3932'. [ 761.285043][T21325] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3932'. [ 761.488879][T21337] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3934'. [ 761.569704][T21339] netlink: 'syz.1.3935': attribute type 1 has an invalid length. [ 761.650027][T21319] lo speed is unknown, defaulting to 1000 [ 762.283914][T21355] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3941'. [ 762.488575][T21355] 8021q: adding VLAN 0 to HW filter on device bond2 [ 762.678017][T21357] 8021q: adding VLAN 0 to HW filter on device bond2 [ 762.687753][T21357] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 762.700283][T21357] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 762.744350][T21363] netlink: 'syz.1.3943': attribute type 1 has an invalid length. [ 762.752762][T21364] netlink: 'syz.1.3943': attribute type 1 has an invalid length. [ 763.142954][T21380] lo speed is unknown, defaulting to 1000 [ 763.380038][T21390] tipc: Enabled bearer , priority 0 [ 763.413976][T21390] syzkaller0: entered promiscuous mode [ 763.431575][T21390] syzkaller0: entered allmulticast mode [ 763.630341][T21398] tipc: Resetting bearer [ 763.642823][T21391] lo speed is unknown, defaulting to 1000 [ 763.649457][T21389] tipc: Resetting bearer [ 763.710693][T21389] tipc: Disabling bearer [ 763.785897][T21401] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3951'. [ 764.022842][T21405] x_tables: duplicate underflow at hook 2 [ 764.209575][T21407] netlink: 'syz.3.3952': attribute type 2 has an invalid length. [ 764.248225][T21412] netlink: 200 bytes leftover after parsing attributes in process `syz.6.3954'. [ 764.296872][T21415] Àÿ: renamed from team_slave_1 (while UP) [ 764.551394][T21420] lo speed is unknown, defaulting to 1000 [ 764.775957][T21439] syz_tun: entered allmulticast mode [ 764.798517][T21438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3962'. [ 764.903377][T21438] syz_tun (unregistering): left allmulticast mode [ 765.315490][T21457] xt_TCPMSS: Only works on TCP SYN packets [ 765.435903][T21459] netlink: 'syz.1.3967': attribute type 14 has an invalid length. [ 765.514005][T21463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3968'. [ 765.858003][T21477] netlink: 'syz.5.3973': attribute type 2 has an invalid length. [ 765.886801][T21477] netlink: 137592 bytes leftover after parsing attributes in process `syz.5.3973'. [ 766.007527][T21485] x_tables: duplicate underflow at hook 2 [ 766.014796][T21488] netlink: 'syz.1.3974': attribute type 9 has an invalid length. [ 766.046652][T21488] netlink: 184 bytes leftover after parsing attributes in process `syz.1.3974'. [ 766.224729][T21499] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3980'. [ 766.276196][T21499] nbd: socks must be embedded in a SOCK_ITEM attr [ 766.650791][T21521] vlan2: entered promiscuous mode [ 766.663503][T21521] macvtap0: entered promiscuous mode [ 766.684828][T21522] netlink: 'syz.1.3983': attribute type 8 has an invalid length. [ 766.696168][T21522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3983'. [ 766.698285][T21525] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3984'. [ 766.728078][T21522] veth1_to_bridge: entered promiscuous mode [ 766.735479][T21522] ip6gretap0: entered promiscuous mode [ 766.743890][T21522] debugfs: 'hsr1' already exists in 'hsr' [ 766.750117][T21522] Cannot create hsr debugfs directory [ 766.756046][T21522] hsr1: entered promiscuous mode [ 766.764216][T21527] netlink: 576 bytes leftover after parsing attributes in process `syz.5.3985'. [ 767.223691][T21547] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3991'. [ 767.275372][T21547] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 767.491579][T21557] lo speed is unknown, defaulting to 1000 [ 767.626269][T21574] gre1: entered promiscuous mode [ 767.646711][T21574] gre1: entered allmulticast mode [ 767.915955][T21589] netlink: 'syz.5.3998': attribute type 39 has an invalid length. [ 768.201988][T21598] tipc: Enabled bearer , priority 0 [ 768.291075][T21598] syzkaller0: entered promiscuous mode [ 768.297699][T21598] syzkaller0: entered allmulticast mode [ 768.304421][T21598] tipc: Resetting bearer [ 768.332306][T21597] tipc: Resetting bearer [ 769.199142][T19542] tipc: Node number set to 456029872 [ 770.239500][T21597] tipc: Disabling bearer [ 770.258704][T21618] IPv6: sit2: Disabled Multicast RS [ 770.264834][T21618] sit2: entered allmulticast mode [ 770.446830][T21631] __nla_validate_parse: 2 callbacks suppressed [ 770.446848][T21631] netlink: 2 bytes leftover after parsing attributes in process `syz.5.4011'. [ 770.501015][T21630] netlink: 2 bytes leftover after parsing attributes in process `syz.5.4011'. [ 770.596281][T21648] !: renamed from dummy0 [ 770.722328][T21651] tipc: Enabled bearer , priority 0 [ 770.730735][T21644] lo speed is unknown, defaulting to 1000 [ 770.731539][T21651] syzkaller0: entered promiscuous mode [ 770.742195][T21651] syzkaller0: entered allmulticast mode [ 770.795608][T21651] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 770.859538][T21651] SET target dimension over the limit! [ 770.894718][T21651] tipc: Resetting bearer [ 770.944656][T21651] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 770.986858][T21651] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 770.995345][T21651] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 771.108966][T21664] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4017'. [ 771.478919][T21649] tipc: Resetting bearer [ 771.549474][T21649] tipc: Disabling bearer [ 771.580979][T21681] netlink: 'syz.1.4021': attribute type 30 has an invalid length. [ 771.805148][T21690] sctp: [Deprecated]: syz.2.4023 (pid 21690) Use of int in maxseg socket option. [ 771.805148][T21690] Use struct sctp_assoc_value instead [ 771.833333][T21690] syzkaller1: entered promiscuous mode [ 771.839218][T21690] syzkaller1: entered allmulticast mode [ 772.148479][T21706] netlink: 'syz.5.4028': attribute type 21 has an invalid length. [ 772.160481][T21706] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4028'. [ 772.268664][T21711] sctp: [Deprecated]: syz.1.4031 (pid 21711) Use of struct sctp_assoc_value in delayed_ack socket option. [ 772.268664][T21711] Use struct sctp_sack_info instead [ 772.291213][T21715] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4030'. [ 772.297334][T21717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4029'. [ 772.891501][T21741] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4037'. [ 772.906065][T21741] bond0: entered promiscuous mode [ 772.920338][T21742] xt_hashlimit: max too large, truncated to 1048576 [ 772.941503][T21741] bond_slave_0: entered promiscuous mode [ 772.960266][T21741] bond_slave_1: entered promiscuous mode [ 773.335754][T21755] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20001 [ 773.622717][T21756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4042'. [ 774.060748][T21764] lo speed is unknown, defaulting to 1000 [ 774.146416][T21774] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4046'. [ 774.391274][T21752] lo speed is unknown, defaulting to 1000 [ 774.645750][T21783] lo speed is unknown, defaulting to 1000 [ 775.689189][T21808] netlink: 'syz.1.4055': attribute type 1 has an invalid length. [ 775.721330][T21808] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4055'. [ 775.733968][T21808] netlink: 'syz.1.4055': attribute type 1 has an invalid length. [ 775.745692][T21808] netlink: 388 bytes leftover after parsing attributes in process `syz.1.4055'. [ 775.763731][T21812] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4057'. [ 775.903971][T21822] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4059'. [ 775.970612][T21826] sctp: [Deprecated]: syz.6.4060 (pid 21826) Use of int in maxseg socket option. [ 775.970612][T21826] Use struct sctp_assoc_value instead [ 775.976043][T21830] netlink: 'syz.1.4062': attribute type 5 has an invalid length. [ 775.994668][T21826] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4060'. [ 776.331078][T21840] netlink: 'syz.5.4064': attribute type 1 has an invalid length. [ 776.346910][T21840] netlink: 144 bytes leftover after parsing attributes in process `syz.5.4064'. [ 776.362630][T21840] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4064'. [ 776.604653][T21844] lo speed is unknown, defaulting to 1000 [ 776.840280][T21850] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4068'. [ 777.311218][T21862] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4071'. [ 777.702638][T21885] netlink: 92 bytes leftover after parsing attributes in process `syz.5.4076'. [ 777.990637][T21891] lo speed is unknown, defaulting to 1000 [ 778.002760][T21893] syzkaller0: entered promiscuous mode [ 778.037248][T21893] syzkaller0: entered allmulticast mode [ 778.134146][T21906] netlink: 'syz.2.4081': attribute type 10 has an invalid length. [ 778.318630][T21916] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 778.391626][T21921] xfrm1: entered allmulticast mode [ 778.484760][T21897] lo speed is unknown, defaulting to 1000 [ 778.547332][T21920] sch_tbf: burst 14 is lower than device gretap0 mtu (1476) ! [ 779.511670][T16370] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 256 - 0 [ 779.541561][T16370] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 256 - 0 [ 779.714372][T16370] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 256 - 0 [ 779.769704][T21964] team1: entered promiscuous mode [ 779.776127][T21964] team1: entered allmulticast mode [ 779.790435][T21964] 8021q: adding VLAN 0 to HW filter on device team1 [ 779.831020][T21968] team2: entered promiscuous mode [ 779.836099][T21968] team2: entered allmulticast mode [ 779.841884][T21968] 8021q: adding VLAN 0 to HW filter on device team2 [ 779.855098][T16370] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 256 - 0 [ 779.921576][T21976] ipt_REJECT: ECHOREPLY no longer supported. [ 780.087439][T15150] Bluetooth: hci4: command 0x0406 tx timeout [ 780.329912][T21993] lo speed is unknown, defaulting to 1000 [ 780.342608][T21996] lo: entered allmulticast mode [ 780.385080][T21996] dvmrp1: entered allmulticast mode [ 780.922714][T21992] lo: left allmulticast mode [ 781.184491][T22040] __nla_validate_parse: 184 callbacks suppressed [ 781.184510][T22040] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4111'. [ 781.219763][T22040] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4111'. [ 781.579250][T22049] netlink: 'syz.1.4117': attribute type 2 has an invalid length. [ 781.586476][T22048] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4119'. [ 781.633174][T22052] netlink: 'syz.3.4121': attribute type 1 has an invalid length. [ 781.653281][T22052] netlink: 'syz.3.4121': attribute type 1 has an invalid length. [ 781.664094][T22049] netlink: 'syz.1.4117': attribute type 322 has an invalid length. [ 781.670565][T22052] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4121'. [ 781.734780][T22056] dvmrp0: entered allmulticast mode [ 781.750201][ T5826] Bluetooth: hci6: command 0x0405 tx timeout [ 782.122166][T22085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4128'. [ 782.133258][T22085] bond3: left allmulticast mode [ 782.151764][T22085] bond3: left promiscuous mode [ 782.162090][T22085] bridge0: port 1(bond3) entered disabled state [ 782.214086][T22087] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 782.619778][T22118] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4135'. [ 782.713603][T22122] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4138'. [ 783.039035][T22150] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4146'. [ 783.048944][T22147] nbd: illegal input index -1 [ 783.056852][T22147] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4145'. [ 783.076006][T22147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4145'. [ 783.369858][T22151] syzkaller0: entered promiscuous mode [ 783.375378][T22151] syzkaller0: entered allmulticast mode [ 786.545189][T22223] __nla_validate_parse: 7 callbacks suppressed [ 786.545209][T22223] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4165'. [ 786.615650][T22229] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4163'. [ 786.647478][T22229] vlan0: entered promiscuous mode [ 786.781531][T22239] xt_hashlimit: max too large, truncated to 1048576 [ 786.822031][T22239] xt_bpf: check failed: parse error [ 787.010407][T22251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4173'. [ 787.027912][T22251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4173'. [ 788.917713][T22261] tipc: Enabling of bearer rejected, failed to enable media [ 789.090485][T22286] tipc: Enabling of bearer rejected, failed to enable media [ 789.113137][T22289] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4182'. [ 789.134358][T22292] dvmrp8: entered allmulticast mode [ 789.180637][T22286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4178'. [ 789.195263][T22286] netlink: 5252 bytes leftover after parsing attributes in process `syz.1.4178'. [ 789.217842][T22286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4178'. [ 789.233063][T22286] netlink: 5252 bytes leftover after parsing attributes in process `syz.1.4178'. [ 789.308400][T22292] lo speed is unknown, defaulting to 1000 [ 789.503698][T22300] lo speed is unknown, defaulting to 1000 [ 789.985037][T22287] dvmrp8: left allmulticast mode [ 790.153183][T22321] lo speed is unknown, defaulting to 1000 [ 792.983148][T22353] netlink: 'syz.3.4194': attribute type 2 has an invalid length. [ 793.216480][T22354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 793.234445][T22354] 8021q: adding VLAN 0 to HW filter on device team0 [ 793.277412][T22354] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 793.301125][T22353] k›*·: entered promiscuous mode [ 793.467998][T22372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4199'. [ 793.500734][T22372] netlink: 'syz.1.4199': attribute type 1 has an invalid length. [ 793.529944][T22333] lo speed is unknown, defaulting to 1000 [ 793.593992][T22372] 8021q: adding VLAN 0 to HW filter on device bond3 [ 793.643385][T22379] bond3: (slave geneve2): making interface the new active one [ 793.665084][T22379] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 793.676307][T16352] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 793.707194][T16352] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 793.801232][T16352] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 793.817106][T16352] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 794.232985][T22406] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 794.388608][T22414] xt_connbytes: Forcing CT accounting to be enabled [ 795.281278][T22435] netlink: 'syz.1.4215': attribute type 3 has an invalid length. [ 795.292948][T22433] IPv6: sit2: Disabled Multicast RS [ 795.297048][T22435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4215'. [ 795.308162][T22433] sit2: entered allmulticast mode [ 795.314301][T22437] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4214'. [ 795.337252][T22442] tipc: Can't bind to reserved service type 1 [ 795.895105][T22471] tipc: Enabled bearer , priority 0 [ 796.049044][T22477] lo speed is unknown, defaulting to 1000 [ 796.178588][T22481] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4224'. [ 796.256018][T22493] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4225'. [ 796.408883][T22489] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 796.447119][T22489] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 796.468191][T22489] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 797.006687][T14423] tipc: Node number set to 853272071 [ 797.094162][T22525] netlink: 'syz.3.4235': attribute type 1 has an invalid length. [ 797.102815][T22525] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4235'. [ 797.121117][T22525] netlink: 'syz.3.4235': attribute type 1 has an invalid length. [ 797.129721][T22525] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4235'. [ 797.752644][T22557] xt_hashlimit: size too large, truncated to 1048576 [ 797.760477][T22557] xt_hashlimit: max too large, truncated to 1048576 [ 797.787434][T22555] tipc: Enabled bearer , priority 10 [ 797.793212][T22557] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 797.938537][T22563] netlink: 'syz.5.4244': attribute type 1 has an invalid length. [ 797.958369][T22563] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4244'. [ 798.151394][T22576] lo speed is unknown, defaulting to 1000 [ 798.176257][T22579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4249'. [ 798.225896][T22584] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 798.330549][T22588] vlan2: entered promiscuous mode [ 798.352270][T22588] erspan0: entered promiscuous mode [ 798.589106][T22577] lo speed is unknown, defaulting to 1000 [ 798.620340][T22601] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4257'. [ 798.753088][T22613] netlink: 'syz.5.4260': attribute type 1 has an invalid length. [ 798.845280][T22623] netlink: 6 bytes leftover after parsing attributes in process `syz.3.4261'. [ 798.866304][T22613] 8021q: adding VLAN 0 to HW filter on device bond3 [ 798.917384][T22613] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4260'. [ 798.999086][T22629] x_tables: ip_tables: osf match: only valid for protocol 6 [ 799.246285][T22641] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4263'. [ 799.273170][T22640] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4265'. [ 799.295493][T22640] netlink: 'syz.5.4265': attribute type 10 has an invalid length. [ 799.393057][T22638] lo speed is unknown, defaulting to 1000 [ 799.747713][T22657] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 800.451775][T22688] netlink: 'syz.5.4278': attribute type 10 has an invalid length. [ 800.519980][T22688] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 800.524967][T22694] netlink: 'syz.3.4280': attribute type 10 has an invalid length. [ 800.540937][T22694] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4280'. [ 800.563925][T22688] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 800.593645][T22694] team0: Port device geneve0 added [ 800.631073][T22697] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 800.648404][T16382] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.679397][T16382] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.720404][T16382] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.757590][T16382] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.369158][T22728] netlink: 64691 bytes leftover after parsing attributes in process `syz.5.4289'. [ 801.383442][T22731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4290'. [ 801.686827][T22752] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4295'. [ 801.705203][T22750] lo speed is unknown, defaulting to 1000 [ 801.814865][T16370] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x35 [ 801.886477][T22767] netlink: 'syz.2.4298': attribute type 10 has an invalid length. [ 801.927896][T22767] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4298'. [ 801.999398][T22767] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 802.174292][T22781] FAULT_INJECTION: forcing a failure. [ 802.174292][T22781] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 802.198233][T22781] CPU: 0 UID: 0 PID: 22781 Comm: syz.1.4303 Not tainted syzkaller #0 PREEMPT(full) [ 802.198259][T22781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 802.198271][T22781] Call Trace: [ 802.198279][T22781] [ 802.198288][T22781] dump_stack_lvl+0x189/0x250 [ 802.198313][T22781] ? __pfx____ratelimit+0x10/0x10 [ 802.198336][T22781] ? __pfx_dump_stack_lvl+0x10/0x10 [ 802.198354][T22781] ? __pfx__printk+0x10/0x10 [ 802.198373][T22781] ? __might_fault+0xb0/0x130 [ 802.198404][T22781] should_fail_ex+0x414/0x560 [ 802.198432][T22781] _copy_from_user+0x2d/0xb0 [ 802.198456][T22781] ___sys_sendmsg+0x158/0x2a0 [ 802.198484][T22781] ? __pfx____sys_sendmsg+0x10/0x10 [ 802.198545][T22781] ? __fget_files+0x2a/0x420 [ 802.198564][T22781] ? __fget_files+0x3a0/0x420 [ 802.198595][T22781] __x64_sys_sendmsg+0x19b/0x260 [ 802.198620][T22781] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 802.198652][T22781] ? __pfx_ksys_write+0x10/0x10 [ 802.198674][T22781] ? do_syscall_64+0xbe/0xfa0 [ 802.198699][T22781] do_syscall_64+0xfa/0xfa0 [ 802.198719][T22781] ? lockdep_hardirqs_on+0x9c/0x150 [ 802.198741][T22781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.198759][T22781] ? clear_bhb_loop+0x60/0xb0 [ 802.198779][T22781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.198795][T22781] RIP: 0033:0x7f557bb8eec9 [ 802.198811][T22781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 802.198826][T22781] RSP: 002b:00007f557ca4a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 802.198846][T22781] RAX: ffffffffffffffda RBX: 00007f557bde5fa0 RCX: 00007f557bb8eec9 [ 802.198859][T22781] RDX: 0000000000000084 RSI: 0000200000000000 RDI: 0000000000000003 [ 802.198870][T22781] RBP: 00007f557ca4a090 R08: 0000000000000000 R09: 0000000000000000 [ 802.198881][T22781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 802.198892][T22781] R13: 00007f557bde6038 R14: 00007f557bde5fa0 R15: 00007ffc66414bb8 [ 802.198924][T22781] [ 827.966768][T22794] __nla_validate_parse: 1 callbacks suppressed [ 827.966786][T22794] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4308'. [ 828.021828][T22797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4305'. [ 828.031991][T22785] lo speed is unknown, defaulting to 1000 [ 828.049385][T22797] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4305'. [ 828.071324][T22797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4305'. [ 828.090775][T22797] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4305'. [ 828.109348][T22804] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4310'. [ 828.223228][T22808] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4311'. [ 828.249749][T22808] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 828.604238][T22821] FAULT_INJECTION: forcing a failure. [ 828.604238][T22821] name failslab, interval 1, probability 0, space 0, times 0 [ 828.627443][T22821] CPU: 0 UID: 0 PID: 22821 Comm: syz.2.4314 Not tainted syzkaller #0 PREEMPT(full) [ 828.627468][T22821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 828.627478][T22821] Call Trace: [ 828.627485][T22821] [ 828.627493][T22821] dump_stack_lvl+0x189/0x250 [ 828.627517][T22821] ? __pfx____ratelimit+0x10/0x10 [ 828.627539][T22821] ? __pfx_dump_stack_lvl+0x10/0x10 [ 828.627555][T22821] ? __pfx__printk+0x10/0x10 [ 828.627578][T22821] ? __pfx___might_resched+0x10/0x10 [ 828.627606][T22821] should_fail_ex+0x414/0x560 [ 828.627630][T22821] should_failslab+0xa8/0x100 [ 828.627652][T22821] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 828.627672][T22821] ? __alloc_skb+0x112/0x2d0 [ 828.627699][T22821] __alloc_skb+0x112/0x2d0 [ 828.627725][T22821] netlink_sendmsg+0x5c6/0xb30 [ 828.627758][T22821] ? __pfx_netlink_sendmsg+0x10/0x10 [ 828.627783][T22821] ? aa_sock_msg_perm+0xf1/0x1d0 [ 828.627809][T22821] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 828.627831][T22821] ? __pfx_netlink_sendmsg+0x10/0x10 [ 828.627855][T22821] __sock_sendmsg+0x21c/0x270 [ 828.627878][T22821] ____sys_sendmsg+0x505/0x830 [ 828.627909][T22821] ? __pfx_____sys_sendmsg+0x10/0x10 [ 828.627943][T22821] ? import_iovec+0x74/0xa0 [ 828.627971][T22821] ___sys_sendmsg+0x21f/0x2a0 [ 828.627998][T22821] ? __pfx____sys_sendmsg+0x10/0x10 [ 828.628063][T22821] ? __fget_files+0x2a/0x420 [ 828.628082][T22821] ? __fget_files+0x3a0/0x420 [ 828.628114][T22821] __x64_sys_sendmsg+0x19b/0x260 [ 828.628142][T22821] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 828.628178][T22821] ? __pfx_ksys_write+0x10/0x10 [ 828.628209][T22821] ? do_syscall_64+0xbe/0xfa0 [ 828.628238][T22821] do_syscall_64+0xfa/0xfa0 [ 828.628261][T22821] ? lockdep_hardirqs_on+0x9c/0x150 [ 828.628289][T22821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.628306][T22821] ? clear_bhb_loop+0x60/0xb0 [ 828.628329][T22821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.628345][T22821] RIP: 0033:0x7f1a3af8eec9 [ 828.628363][T22821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 828.628378][T22821] RSP: 002b:00007f1a3be3a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 828.628402][T22821] RAX: ffffffffffffffda RBX: 00007f1a3b1e5fa0 RCX: 00007f1a3af8eec9 [ 828.628415][T22821] RDX: 0000000000000084 RSI: 0000200000000000 RDI: 0000000000000003 [ 828.628427][T22821] RBP: 00007f1a3be3a090 R08: 0000000000000000 R09: 0000000000000000 [ 828.628439][T22821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 828.628449][T22821] R13: 00007f1a3b1e6038 R14: 00007f1a3b1e5fa0 R15: 00007ffc5a99e9c8 [ 828.628483][T22821] [ 828.636885][T22818] lo speed is unknown, defaulting to 1000 [ 828.963954][T22829] netlink: 14212 bytes leftover after parsing attributes in process `syz.1.4316'. [ 829.031051][T22831] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4317'. [ 829.074939][T22835] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4318'. [ 829.112889][T22834] netlink: 'syz.5.4318': attribute type 7 has an invalid length. [ 829.162968][T22834] netlink: 'syz.5.4318': attribute type 8 has an invalid length. [ 829.255714][T22838] xt_NFQUEUE: number of queues (65532) out of range (got 118598) [ 829.273082][T22819] lo speed is unknown, defaulting to 1000 [ 829.950991][T22850] lo speed is unknown, defaulting to 1000 [ 830.103075][T22862] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 830.414987][T22869] bridge: RTM_NEWNEIGH with invalid ether address [ 830.600074][T22872] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.611452][T22872] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 830.761143][T22872] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.777128][T22872] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 831.012849][T22872] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.043704][T22872] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 831.195010][T22872] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.206210][T22872] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 831.224184][T22885] batadv0: entered promiscuous mode [ 831.603490][T16382] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 831.628977][T16382] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 831.670621][T16350] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 831.704052][T16350] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 831.739764][T22907] FAULT_INJECTION: forcing a failure. [ 831.739764][T22907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 831.761931][T22907] CPU: 1 UID: 0 PID: 22907 Comm: syz.6.4338 Not tainted syzkaller #0 PREEMPT(full) [ 831.761958][T22907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 831.761969][T22907] Call Trace: [ 831.761976][T22907] [ 831.761985][T22907] dump_stack_lvl+0x189/0x250 [ 831.762008][T22907] ? __pfx____ratelimit+0x10/0x10 [ 831.762033][T22907] ? __pfx_dump_stack_lvl+0x10/0x10 [ 831.762051][T22907] ? __pfx__printk+0x10/0x10 [ 831.762069][T22907] ? __might_fault+0xb0/0x130 [ 831.762100][T22907] should_fail_ex+0x414/0x560 [ 831.762124][T22907] _copy_from_iter+0x1de/0x1790 [ 831.762154][T22907] ? rcu_is_watching+0x15/0xb0 [ 831.762173][T22907] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 831.762194][T22907] ? __pfx__copy_from_iter+0x10/0x10 [ 831.762217][T22907] ? __build_skb_around+0x257/0x3e0 [ 831.762243][T22907] ? netlink_sendmsg+0x642/0xb30 [ 831.762264][T22907] ? skb_put+0x11b/0x210 [ 831.762296][T22907] netlink_sendmsg+0x6b2/0xb30 [ 831.762328][T22907] ? __pfx_netlink_sendmsg+0x10/0x10 [ 831.762354][T22907] ? aa_sock_msg_perm+0xf1/0x1d0 [ 831.762379][T22907] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 831.762400][T22907] ? __pfx_netlink_sendmsg+0x10/0x10 [ 831.762423][T22907] __sock_sendmsg+0x21c/0x270 [ 831.762446][T22907] ____sys_sendmsg+0x505/0x830 [ 831.762475][T22907] ? __pfx_____sys_sendmsg+0x10/0x10 [ 831.762509][T22907] ? import_iovec+0x74/0xa0 [ 831.762536][T22907] ___sys_sendmsg+0x21f/0x2a0 [ 831.762561][T22907] ? __pfx____sys_sendmsg+0x10/0x10 [ 831.762625][T22907] ? __fget_files+0x2a/0x420 [ 831.762644][T22907] ? __fget_files+0x3a0/0x420 [ 831.762676][T22907] __x64_sys_sendmsg+0x19b/0x260 [ 831.762703][T22907] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 831.762737][T22907] ? __pfx_ksys_write+0x10/0x10 [ 831.762760][T22907] ? do_syscall_64+0xbe/0xfa0 [ 831.762787][T22907] do_syscall_64+0xfa/0xfa0 [ 831.762808][T22907] ? lockdep_hardirqs_on+0x9c/0x150 [ 831.762831][T22907] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.762848][T22907] ? clear_bhb_loop+0x60/0xb0 [ 831.762868][T22907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.762885][T22907] RIP: 0033:0x7fb66298eec9 [ 831.762902][T22907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 831.762917][T22907] RSP: 002b:00007fb66378c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 831.762936][T22907] RAX: ffffffffffffffda RBX: 00007fb662be5fa0 RCX: 00007fb66298eec9 [ 831.762950][T22907] RDX: 0000000000000084 RSI: 0000200000000000 RDI: 0000000000000003 [ 831.762961][T22907] RBP: 00007fb66378c090 R08: 0000000000000000 R09: 0000000000000000 [ 831.762972][T22907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 831.762983][T22907] R13: 00007fb662be6038 R14: 00007fb662be5fa0 R15: 00007ffd4100d1e8 [ 831.763016][T22907] [ 832.067527][T22901] lo speed is unknown, defaulting to 1000 [ 832.081151][T22911] tipc: Enabling of bearer rejected, already enabled [ 832.154134][T22904] tipc: Resetting bearer [ 832.175563][T16350] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 832.186733][T16350] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 832.213920][T22918] Unsupported xt match [ 832.213937][T22918] unable to load match [ 832.247268][T16350] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 832.265840][T16350] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 832.400883][T22903] lo speed is unknown, defaulting to 1000 [ 833.229204][T19543] IPVS: starting estimator thread 0... [ 833.336838][T22952] IPVS: using max 27 ests per chain, 64800 per kthread [ 833.673423][T22962] : renamed from veth0_to_bond (while UP) [ 833.846276][T22974] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 834.299830][T23001] __nla_validate_parse: 14 callbacks suppressed [ 834.299851][T23001] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4366'. [ 834.591777][T23017] netlink: 'syz.3.4370': attribute type 1 has an invalid length. [ 834.689391][T23019] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 834.701117][T23019] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 834.742881][T23017] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4370'. [ 834.832569][T23017] netlink: 1496 bytes leftover after parsing attributes in process `syz.3.4370'. [ 834.932699][T23030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4374'. [ 835.163838][T23051] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4377'. [ 835.292810][T23056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4380'. [ 835.319149][T23056] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 835.477827][T23072] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4384'. [ 835.500821][T23070] lo speed is unknown, defaulting to 1000 [ 835.540062][T23075] netlink: 'syz.5.4386': attribute type 1 has an invalid length. [ 835.774731][T23080] batman_adv: batadv0: Adding interface: dummy0 [ 835.781286][T23080] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 835.807404][T23080] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 835.879033][T23081] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 835.885471][T23080] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 835.966100][T23086] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4388'. [ 835.987754][T23086] team_slave_0: entered allmulticast mode [ 836.420833][T23098] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4395'. [ 836.577497][T23105] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4393'. [ 836.937648][T23124] lo speed is unknown, defaulting to 1000 [ 837.828095][ T5826] Bluetooth: hci4: command 0x0406 tx timeout [ 838.044463][T23171] netlink: 'syz.6.4414': attribute type 1 has an invalid length. [ 839.063022][T23223] lo speed is unknown, defaulting to 1000 [ 839.484173][T23241] __nla_validate_parse: 10 callbacks suppressed [ 839.484193][T23241] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4434'. [ 839.522205][T23241] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4434'. [ 839.562320][T23241] netlink: 'syz.6.4434': attribute type 14 has an invalid length. [ 839.586126][T23241] netlink: 'syz.6.4434': attribute type 11 has an invalid length. [ 839.609782][T23225] lo speed is unknown, defaulting to 1000 [ 839.907986][ T5826] Bluetooth: hci4: command 0x0406 tx timeout [ 840.263023][T23236] lo speed is unknown, defaulting to 1000 [ 840.352598][T23278] syzkaller1: entered promiscuous mode [ 840.358392][T23278] syzkaller1: entered allmulticast mode [ 840.370468][T23278] syzkaller1: left promiscuous mode [ 840.375844][T23278] syzkaller1: left allmulticast mode [ 840.397980][T23278] netlink: 'syz.3.4444': attribute type 3 has an invalid length. [ 841.249227][T23298] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4449'. [ 841.528579][T23310] netlink: 'syz.5.4451': attribute type 12 has an invalid length. [ 841.536435][T23310] netlink: 9472 bytes leftover after parsing attributes in process `syz.5.4451'. [ 841.784260][T23319] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4454'. [ 841.905323][T23325] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 842.073285][T23340] openvswitch: netlink: IP tunnel dst address not specified [ 842.107909][T23342] lo speed is unknown, defaulting to 1000 [ 842.145665][T23344] netlink: 'syz.2.4459': attribute type 1 has an invalid length. [ 842.260002][T23348] netlink: 'syz.1.4462': attribute type 5 has an invalid length. [ 842.363294][T23356] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4464'. [ 842.450239][T23356] team1: entered promiscuous mode [ 842.455365][T23356] team1: entered allmulticast mode [ 842.461676][T23356] 8021q: adding VLAN 0 to HW filter on device team1 [ 842.739336][T23371] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4468'. [ 842.758437][T23371] netlink: 'syz.6.4468': attribute type 7 has an invalid length. [ 842.766320][T23371] netlink: 'syz.6.4468': attribute type 3 has an invalid length. [ 842.774756][T23371] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4468'. [ 842.860244][T23361] lo speed is unknown, defaulting to 1000 [ 843.060005][T23380] netlink: 'syz.6.4471': attribute type 30 has an invalid length. [ 843.091631][T23380] netlink: 'syz.6.4471': attribute type 5 has an invalid length. [ 843.187398][T23383] netlink: 'syz.6.4471': attribute type 1 has an invalid length. [ 843.208449][T23383] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 843.224813][T23383] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4471'. [ 843.244355][T23383] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4471'. [ 843.558209][T23391] syz.2.4474 (23391) used obsolete PPPIOCDETACH ioctl [ 843.911418][T16393] wlan1: Trigger new scan to find an IBSS to join [ 844.288089][T23422] netlink: 'syz.3.4482': attribute type 3 has an invalid length. [ 844.638542][T23437] netlink: zone id is out of range [ 844.657365][T23437] netlink: zone id is out of range [ 844.666216][T23437] netlink: zone id is out of range [ 844.672217][T23437] netlink: zone id is out of range [ 844.678252][T23437] netlink: zone id is out of range [ 844.685040][T23437] netlink: zone id is out of range [ 844.690789][T23437] netlink: zone id is out of range [ 845.309859][T23487] bond5: Removing last arp target with arp_interval on [ 845.315334][T23489] __nla_validate_parse: 2 callbacks suppressed [ 845.315352][T23489] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4498'. [ 845.428587][T23489] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 845.482916][T23489] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 845.814076][T23504] lo speed is unknown, defaulting to 1000 [ 846.530229][T23528] netlink: 184 bytes leftover after parsing attributes in process `syz.5.4507'. [ 846.651727][T23534] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4509'. [ 846.762091][T23508] lo speed is unknown, defaulting to 1000 [ 847.150382][T23519] lo speed is unknown, defaulting to 1000 [ 847.480243][T23561] net_ratelimit: 559 callbacks suppressed [ 847.480263][T23561] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 847.685528][T23521] lo speed is unknown, defaulting to 1000 [ 848.436318][T23576] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 848.785588][T23587] netlink: 45 bytes leftover after parsing attributes in process `syz.5.4524'. [ 848.867328][T16346] wlan1: Trigger new scan to find an IBSS to join [ 848.979746][T23592] netlink: 16215 bytes leftover after parsing attributes in process `syz.5.4525'. [ 849.257520][T23598] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4528'. [ 849.268073][T23598] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4528'. [ 849.409590][T23604] lo speed is unknown, defaulting to 1000 [ 849.778734][T23622] bond6: option resend_igmp: invalid value (2878) [ 849.788293][T16345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 849.804836][T23622] bond6: option resend_igmp: allowed values 0 - 255 [ 849.871032][T23622] bond6 (unregistering): Released all slaves [ 849.897046][T23626] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4534'. [ 850.226391][T23638] validate_nla: 2 callbacks suppressed [ 850.226413][T23638] netlink: 'syz.5.4537': attribute type 4 has an invalid length. [ 850.633046][T23660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4541'. [ 850.693054][T23659] lo speed is unknown, defaulting to 1000 [ 850.811934][T23669] tipc: Enabling of bearer rejected, already enabled [ 850.831289][T23672] tipc: Enabling of bearer rejected, already enabled [ 850.857035][T23671] tipc: Enabling of bearer rejected, already enabled [ 850.878944][T23672] syzkaller0: entered promiscuous mode [ 850.885504][T23672] syzkaller0: entered allmulticast mode [ 850.962136][T23637] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 850.988337][T23671] tipc: Resetting bearer [ 851.028586][T23671] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4545'. [ 851.038590][T23671] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4545'. [ 851.039071][T23672] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4545'. [ 851.228189][T23665] lo speed is unknown, defaulting to 1000 [ 852.400669][T23709] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4555'. [ 852.452428][T23711] lo speed is unknown, defaulting to 1000 [ 852.953883][T23725] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 853.719158][T23760] lo speed is unknown, defaulting to 1000 [ 854.112379][T23767] tipc: Failed to remove unknown binding: 66,1,1/2799423145:732868875/732868877 [ 854.123809][T23767] tipc: Failed to remove unknown binding: 66,1,1/2799423145:732868875/732868877 [ 854.133481][T23767] tipc: Failed to remove unknown binding: 66,1,1/2799423145:732868875/732868877 [ 854.268306][T23772] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 854.491175][T23784] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 854.523422][T23780] IPVS: Scheduler module ip_vs_ not found [ 854.583367][T23788] geneve1: entered allmulticast mode [ 854.701446][T23797] netlink: 'syz.6.4578': attribute type 1 has an invalid length. [ 854.713122][T23797] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 854.729477][T23796] netlink: 'syz.6.4578': attribute type 1 has an invalid length. [ 854.738579][T23796] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 854.843779][T23801] netlink: 'syz.3.4580': attribute type 21 has an invalid length. [ 854.852878][T23801] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4580'. [ 854.876811][T23801] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4580'. [ 854.927783][T23803] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4581'. [ 854.940636][T23803] bridge_slave_1: left allmulticast mode [ 854.959008][T23803] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.976995][T23803] bridge_slave_0: left allmulticast mode [ 854.982712][T23803] bridge_slave_0: left promiscuous mode [ 854.989202][T23803] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.501750][T23817] tipc: Enabled bearer , priority 0 [ 855.526165][T23817] syzkaller0: entered promiscuous mode [ 855.546788][T23817] syzkaller0: entered allmulticast mode [ 855.564331][T23817] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4585'. [ 855.742259][T23825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4587'. [ 856.339919][T23817] tipc: Resetting bearer [ 856.364597][T23816] tipc: Resetting bearer [ 856.418834][T23816] tipc: Disabling bearer [ 856.498133][T23836] bond6: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 856.554313][T23836] bond6 (unregistering): Released all slaves [ 856.616154][T23841] syzkaller1: entered promiscuous mode [ 856.621983][T23841] syzkaller1: entered allmulticast mode [ 856.670111][T23841] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4591'. [ 856.682253][T23841] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4591'. [ 856.699623][T23848] lo speed is unknown, defaulting to 1000 [ 856.776437][T23853] netlink: zone id is out of range [ 856.782247][T23853] netlink: zone id is out of range [ 856.787669][T23853] netlink: zone id is out of range [ 856.793018][T23853] netlink: zone id is out of range [ 856.801977][T23853] netlink: zone id is out of range [ 856.807307][T23853] netlink: zone id is out of range [ 856.812486][T23853] netlink: zone id is out of range [ 856.971687][T23863] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4597'. [ 857.113551][T23870] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4598'. [ 857.435106][T23884] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 857.482984][T23884] bond4 (unregistering): Released all slaves [ 857.617446][T23893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4603'. [ 857.684109][T23899] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4605'. [ 858.080761][T23924] lo speed is unknown, defaulting to 1000 [ 858.330311][T23926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4609'. [ 859.446161][T23961] sctp: [Deprecated]: syz.3.4619 (pid 23961) Use of int in max_burst socket option deprecated. [ 859.446161][T23961] Use struct sctp_assoc_value instead [ 859.564347][T23966] netlink: 15 bytes leftover after parsing attributes in process `syz.6.4620'. [ 859.803203][T23973] rdma_op ffff888056a141f0 conn xmit_rdma 0000000000000000 [ 859.907740][ C0] ------------[ cut here ]------------ [ 859.913563][ C0] ODEBUG: free active (active state 0) object: ffff8880561a2890 object type: timer_list hint: rose_t0timer_expiry+0x0/0x350 [ 859.927096][ C0] WARNING: CPU: 0 PID: 23982 at lib/debugobjects.c:615 debug_print_object+0x16b/0x1e0 [ 859.936723][ C0] Modules linked in: [ 859.940910][ C0] CPU: 0 UID: 0 PID: 23982 Comm: syz.6.4625 Not tainted syzkaller #0 PREEMPT(full) [ 859.950325][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 859.960442][ C0] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 859.966272][ C0] Code: 4c 89 ff e8 87 9e 8d fd 4d 8b 0f 48 c7 c7 00 45 c0 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 0a 11 ec fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 67 56 07 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 859.985928][ C0] RSP: 0000:ffffc90000007a10 EFLAGS: 00010292 [ 859.992105][ C0] RAX: 56d69a9aa6959e00 RBX: dffffc0000000000 RCX: ffff888063d8dac0 [ 860.000132][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 860.008145][ C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 860.016134][ C0] R10: dffffc0000000000 R11: fffffbfff1bfa138 R12: ffffffff8a37af80 [ 860.024152][ C0] R13: ffffffff8bc04680 R14: ffff8880561a2890 R15: ffffffff8b6ce100 [ 860.032165][ C0] FS: 00005555919d0500(0000) GS:ffff888125d3b000(0000) knlGS:0000000000000000 [ 860.041151][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 860.047784][ C0] CR2: 00007fb662be6080 CR3: 00000000489ae000 CR4: 00000000003526f0 [ 860.055772][ C0] Call Trace: [ 860.059079][ C0] [ 860.061937][ C0] debug_check_no_obj_freed+0x3a2/0x470 [ 860.067539][ C0] ? do_raw_spin_lock+0x121/0x290 [ 860.072592][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 860.077754][ C0] kfree+0x112/0x440 [ 860.081666][ C0] rose_timer_expiry+0x4cb/0x600 [ 860.086644][ C0] ? call_timer_fn+0x155/0x5f0 [ 860.091431][ C0] call_timer_fn+0x17e/0x5f0 [ 860.096039][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 860.101541][ C0] ? call_timer_fn+0xbe/0x5f0 [ 860.106234][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 860.111398][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 860.116632][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 860.121844][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 860.127380][ C0] __run_timer_base+0x61a/0x860 [ 860.132271][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 860.137705][ C0] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 860.143984][ C0] run_timer_softirq+0xb7/0x180 [ 860.148883][ C0] handle_softirqs+0x283/0x870 [ 860.153679][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 860.158515][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 860.163846][ C0] __irq_exit_rcu+0xca/0x1f0 [ 860.168498][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 860.173738][ C0] irq_exit_rcu+0x9/0x30 [ 860.178045][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 860.183702][ C0] [ 860.186657][ C0] [ 860.189601][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 860.195594][ C0] RIP: 0010:lock_acquire+0x175/0x360 [ 860.200927][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 6b ec f1 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 860.220585][ C0] RSP: 0000:ffffc9000ec87058 EFLAGS: 00000206 [ 860.226709][ C0] RAX: 56d69a9aa6959e00 RBX: 0000000000000000 RCX: 56d69a9aa6959e00 [ 860.234699][ C0] RDX: 0000000000000000 RSI: ffffffff8d9c68ab RDI: ffffffff8bc03b60 [ 860.242752][ C0] RBP: ffffffff8172ad05 R08: 0000000000000000 R09: ffffffff8172ad05 [ 860.250793][ C0] R10: ffffc9000ec87218 R11: ffffffff81ab4450 R12: 0000000000000002 [ 860.258813][ C0] R13: ffffffff8e13a960 R14: 0000000000000000 R15: 0000000000000246 [ 860.266830][ C0] ? unwind_next_frame+0xa5/0x2390 [ 860.271967][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 860.278161][ C0] ? unwind_next_frame+0xa5/0x2390 [ 860.283319][ C0] ? unwind_next_frame+0xa5/0x2390 [ 860.288467][ C0] ? vma_alloc_folio_noprof+0xe4/0x200 [ 860.293993][ C0] ? unwind_next_frame+0xa5/0x2390 [ 860.299134][ C0] unwind_next_frame+0xc2/0x2390 [ 860.304084][ C0] ? unwind_next_frame+0xa5/0x2390 [ 860.309248][ C0] ? unwind_next_frame+0xa5/0x2390 [ 860.314375][ C0] ? alloc_pages_mpol+0x232/0x4a0 [ 860.319451][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 860.325623][ C0] arch_stack_walk+0x11c/0x150 [ 860.330432][ C0] ? vma_alloc_folio_noprof+0xe4/0x200 [ 860.335918][ C0] stack_trace_save+0x9c/0xe0 [ 860.340631][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 860.346016][ C0] ? __lock_acquire+0xab9/0xd20 [ 860.350932][ C0] save_stack+0xf5/0x1f0 [ 860.355222][ C0] ? __pfx_save_stack+0x10/0x10 [ 860.360142][ C0] ? post_alloc_hook+0x240/0x2a0 [ 860.365096][ C0] ? get_page_from_freelist+0x21e4/0x22c0 [ 860.370859][ C0] ? __alloc_frozen_pages_noprof+0x181/0x370 [ 860.376881][ C0] ? alloc_pages_mpol+0x232/0x4a0 [ 860.381918][ C0] ? vma_alloc_folio_noprof+0xe4/0x200 [ 860.387539][ C0] ? seqcount_lockdep_reader_access+0x102/0x180 [ 860.393807][ C0] __set_page_owner+0x8d/0x4a0 [ 860.398613][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 860.404012][ C0] post_alloc_hook+0x240/0x2a0 [ 860.408823][ C0] get_page_from_freelist+0x21e4/0x22c0 [ 860.414445][ C0] ? __pfx_get_page_from_freelist+0x10/0x10 [ 860.420387][ C0] ? prepare_alloc_pages+0x213/0x610 [ 860.425700][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 860.431548][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 860.437917][ C0] ? __resched_curr+0x202/0x3e0 [ 860.442793][ C0] ? __pfx___resched_curr+0x10/0x10 [ 860.448035][ C0] ? policy_nodemask+0x27c/0x720 [ 860.452986][ C0] ? __pfx___calc_delta+0x10/0x10 [ 860.458053][ C0] alloc_pages_mpol+0x232/0x4a0 [ 860.462929][ C0] vma_alloc_folio_noprof+0xe4/0x200 [ 860.468257][ C0] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 860.474184][ C0] folio_prealloc+0x30/0x180 [ 860.478810][ C0] do_wp_page+0x1231/0x5800 [ 860.483369][ C0] ? __pfx_do_wp_page+0x10/0x10 [ 860.488249][ C0] ? do_raw_spin_lock+0x121/0x290 [ 860.493297][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 860.498724][ C0] __handle_mm_fault+0x1033/0x5440 [ 860.503866][ C0] ? lock_vma_under_rcu+0x19f/0x3d0 [ 860.509098][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 860.514589][ C0] ? lock_vma_under_rcu+0x35a/0x3d0 [ 860.519822][ C0] ? lock_vma_under_rcu+0xdf/0x3d0 [ 860.524982][ C0] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 860.530572][ C0] handle_mm_fault+0x40a/0x8e0 [ 860.535364][ C0] do_user_addr_fault+0xa7c/0x1380 [ 860.540534][ C0] ? rcu_is_watching+0x15/0xb0 [ 860.545355][ C0] ? trace_page_fault_user+0x84/0x1e0 [ 860.550783][ C0] exc_page_fault+0x82/0x100 [ 860.555404][ C0] asm_exc_page_fault+0x26/0x30 [ 860.560282][ C0] RIP: 0033:0x7fb662856266 [ 860.564717][ C0] Code: 00 00 00 00 53 48 89 fb 48 85 ff 74 47 80 3d 94 f4 eb 00 00 75 1e 80 3d 5f be 38 00 00 75 55 48 8b 43 18 48 c7 00 00 00 00 00 43 48 00 5b c3 0f 1f 40 00 8b 3b 31 d2 31 c0 be 68 63 00 00 e8 [ 860.584364][ C0] RSP: 002b:00007ffd4100d340 EFLAGS: 00010246 [ 860.590483][ C0] RAX: 00007fb6623ff000 RBX: 00007fb662be6038 RCX: 00007fb662946397 [ 860.598511][ C0] RDX: 00007fb662be5fa0 RSI: 00007fb662be5fa0 RDI: 00007fb662be6038 [ 860.606517][ C0] RBP: 0000000000000000 R08: 00007fb662be5fa0 R09: 00007ffd4100d1e7 [ 860.614495][ C0] R10: 0000000000000008 R11: 0000000000000246 R12: 00007fb662be5fac [ 860.622517][ C0] R13: 00007fb662be5fa0 R14: 00000000000000af R15: 0000000000000003 [ 860.630563][ C0] [ 860.633607][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 860.640890][ C0] CPU: 0 UID: 0 PID: 23982 Comm: syz.6.4625 Not tainted syzkaller #0 PREEMPT(full) [ 860.650269][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 860.660345][ C0] Call Trace: [ 860.663623][ C0] [ 860.666459][ C0] dump_stack_lvl+0x99/0x250 [ 860.671058][ C0] ? __asan_memcpy+0x40/0x70 [ 860.675647][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 860.680842][ C0] ? __pfx__printk+0x10/0x10 [ 860.685442][ C0] vpanic+0x281/0x750 [ 860.689421][ C0] ? __pfx__printk+0x10/0x10 [ 860.693999][ C0] ? __pfx_vpanic+0x10/0x10 [ 860.698496][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 860.703789][ C0] panic+0xb9/0xc0 [ 860.707503][ C0] ? __pfx_panic+0x10/0x10 [ 860.711945][ C0] __warn+0x31b/0x4b0 [ 860.715940][ C0] ? debug_print_object+0x16b/0x1e0 [ 860.721167][ C0] ? debug_print_object+0x16b/0x1e0 [ 860.726368][ C0] report_bug+0x2be/0x4f0 [ 860.730708][ C0] ? debug_print_object+0x16b/0x1e0 [ 860.735901][ C0] ? debug_print_object+0x16b/0x1e0 [ 860.741089][ C0] ? debug_print_object+0x16d/0x1e0 [ 860.746273][ C0] handle_bug+0x84/0x160 [ 860.750508][ C0] exc_invalid_op+0x1a/0x50 [ 860.754999][ C0] asm_exc_invalid_op+0x1a/0x20 [ 860.759841][ C0] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 860.765635][ C0] Code: 4c 89 ff e8 87 9e 8d fd 4d 8b 0f 48 c7 c7 00 45 c0 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 0a 11 ec fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 67 56 07 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 860.785232][ C0] RSP: 0000:ffffc90000007a10 EFLAGS: 00010292 [ 860.791329][ C0] RAX: 56d69a9aa6959e00 RBX: dffffc0000000000 RCX: ffff888063d8dac0 [ 860.799293][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 860.807255][ C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 860.815213][ C0] R10: dffffc0000000000 R11: fffffbfff1bfa138 R12: ffffffff8a37af80 [ 860.823180][ C0] R13: ffffffff8bc04680 R14: ffff8880561a2890 R15: ffffffff8b6ce100 [ 860.831148][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 860.836805][ C0] debug_check_no_obj_freed+0x3a2/0x470 [ 860.842346][ C0] ? do_raw_spin_lock+0x121/0x290 [ 860.847366][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 860.852477][ C0] kfree+0x112/0x440 [ 860.856364][ C0] rose_timer_expiry+0x4cb/0x600 [ 860.861300][ C0] ? call_timer_fn+0x155/0x5f0 [ 860.866061][ C0] call_timer_fn+0x17e/0x5f0 [ 860.870643][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 860.876099][ C0] ? call_timer_fn+0xbe/0x5f0 [ 860.880771][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 860.885885][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 860.891077][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 860.896273][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 860.901730][ C0] __run_timer_base+0x61a/0x860 [ 860.906590][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 860.911975][ C0] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 860.918230][ C0] run_timer_softirq+0xb7/0x180 [ 860.923073][ C0] handle_softirqs+0x283/0x870 [ 860.927838][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 860.932608][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 860.937896][ C0] __irq_exit_rcu+0xca/0x1f0 [ 860.942482][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 860.947683][ C0] irq_exit_rcu+0x9/0x30 [ 860.951923][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 860.957555][ C0] [ 860.960472][ C0] [ 860.963393][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 860.969374][ C0] RIP: 0010:lock_acquire+0x175/0x360 [ 860.974658][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 6b ec f1 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 860.994254][ C0] RSP: 0000:ffffc9000ec87058 EFLAGS: 00000206 [ 861.000314][ C0] RAX: 56d69a9aa6959e00 RBX: 0000000000000000 RCX: 56d69a9aa6959e00 [ 861.008274][ C0] RDX: 0000000000000000 RSI: ffffffff8d9c68ab RDI: ffffffff8bc03b60 [ 861.016245][ C0] RBP: ffffffff8172ad05 R08: 0000000000000000 R09: ffffffff8172ad05 [ 861.024226][ C0] R10: ffffc9000ec87218 R11: ffffffff81ab4450 R12: 0000000000000002 [ 861.032199][ C0] R13: ffffffff8e13a960 R14: 0000000000000000 R15: 0000000000000246 [ 861.040169][ C0] ? unwind_next_frame+0xa5/0x2390 [ 861.045279][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 861.051430][ C0] ? unwind_next_frame+0xa5/0x2390 [ 861.056556][ C0] ? unwind_next_frame+0xa5/0x2390 [ 861.061657][ C0] ? vma_alloc_folio_noprof+0xe4/0x200 [ 861.067106][ C0] ? unwind_next_frame+0xa5/0x2390 [ 861.072205][ C0] unwind_next_frame+0xc2/0x2390 [ 861.077129][ C0] ? unwind_next_frame+0xa5/0x2390 [ 861.082236][ C0] ? unwind_next_frame+0xa5/0x2390 [ 861.087341][ C0] ? alloc_pages_mpol+0x232/0x4a0 [ 861.092362][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 861.098508][ C0] arch_stack_walk+0x11c/0x150 [ 861.103270][ C0] ? vma_alloc_folio_noprof+0xe4/0x200 [ 861.108725][ C0] stack_trace_save+0x9c/0xe0 [ 861.113391][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 861.118756][ C0] ? __lock_acquire+0xab9/0xd20 [ 861.123612][ C0] save_stack+0xf5/0x1f0 [ 861.127851][ C0] ? __pfx_save_stack+0x10/0x10 [ 861.132689][ C0] ? post_alloc_hook+0x240/0x2a0 [ 861.137615][ C0] ? get_page_from_freelist+0x21e4/0x22c0 [ 861.143326][ C0] ? __alloc_frozen_pages_noprof+0x181/0x370 [ 861.149298][ C0] ? alloc_pages_mpol+0x232/0x4a0 [ 861.154312][ C0] ? vma_alloc_folio_noprof+0xe4/0x200 [ 861.159768][ C0] ? seqcount_lockdep_reader_access+0x102/0x180 [ 861.166001][ C0] __set_page_owner+0x8d/0x4a0 [ 861.170757][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 861.176133][ C0] post_alloc_hook+0x240/0x2a0 [ 861.180895][ C0] get_page_from_freelist+0x21e4/0x22c0 [ 861.186483][ C0] ? __pfx_get_page_from_freelist+0x10/0x10 [ 861.192387][ C0] ? prepare_alloc_pages+0x213/0x610 [ 861.197680][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 861.203484][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 861.209804][ C0] ? __resched_curr+0x202/0x3e0 [ 861.214651][ C0] ? __pfx___resched_curr+0x10/0x10 [ 861.219847][ C0] ? policy_nodemask+0x27c/0x720 [ 861.224773][ C0] ? __pfx___calc_delta+0x10/0x10 [ 861.229793][ C0] alloc_pages_mpol+0x232/0x4a0 [ 861.234646][ C0] vma_alloc_folio_noprof+0xe4/0x200 [ 861.239925][ C0] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 861.245822][ C0] folio_prealloc+0x30/0x180 [ 861.250404][ C0] do_wp_page+0x1231/0x5800 [ 861.254921][ C0] ? __pfx_do_wp_page+0x10/0x10 [ 861.259757][ C0] ? do_raw_spin_lock+0x121/0x290 [ 861.264777][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 861.270153][ C0] __handle_mm_fault+0x1033/0x5440 [ 861.275270][ C0] ? lock_vma_under_rcu+0x19f/0x3d0 [ 861.280467][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 861.285932][ C0] ? lock_vma_under_rcu+0x35a/0x3d0 [ 861.291122][ C0] ? lock_vma_under_rcu+0xdf/0x3d0 [ 861.296224][ C0] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 861.301764][ C0] handle_mm_fault+0x40a/0x8e0 [ 861.306533][ C0] do_user_addr_fault+0xa7c/0x1380 [ 861.311646][ C0] ? rcu_is_watching+0x15/0xb0 [ 861.316405][ C0] ? trace_page_fault_user+0x84/0x1e0 [ 861.321781][ C0] exc_page_fault+0x82/0x100 [ 861.326369][ C0] asm_exc_page_fault+0x26/0x30 [ 861.331207][ C0] RIP: 0033:0x7fb662856266 [ 861.335618][ C0] Code: 00 00 00 00 53 48 89 fb 48 85 ff 74 47 80 3d 94 f4 eb 00 00 75 1e 80 3d 5f be 38 00 00 75 55 48 8b 43 18 48 c7 00 00 00 00 00 43 48 00 5b c3 0f 1f 40 00 8b 3b 31 d2 31 c0 be 68 63 00 00 e8 [ 861.355215][ C0] RSP: 002b:00007ffd4100d340 EFLAGS: 00010246 [ 861.361278][ C0] RAX: 00007fb6623ff000 RBX: 00007fb662be6038 RCX: 00007fb662946397 [ 861.369241][ C0] RDX: 00007fb662be5fa0 RSI: 00007fb662be5fa0 RDI: 00007fb662be6038 [ 861.377206][ C0] RBP: 0000000000000000 R08: 00007fb662be5fa0 R09: 00007ffd4100d1e7 [ 861.385252][ C0] R10: 0000000000000008 R11: 0000000000000246 R12: 00007fb662be5fac [ 861.393212][ C0] R13: 00007fb662be5fa0 R14: 00000000000000af R15: 0000000000000003 [ 861.401194][ C0] [ 861.404466][ C0] Kernel Offset: disabled [ 861.408796][ C0] Rebooting in 86400 seconds..