last executing test programs: 2m58.096651479s ago: executing program 4 (id=632): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) connect$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNGETFILTER(r2, 0x801054db, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'xfrm0\x00', 0x10}) 2m57.802038556s ago: executing program 4 (id=635): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)=@newsa={0x150, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x401, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x0, 0x3500, 0x2, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x1, 0x0) (async) ioctl$sock_inet_udp_SIOCINQ(r4, 0x5760, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, 0x3e, 0x107, 0xfffffffe, 0x0, {0x4, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="428758e2"]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) (async) write(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000080000000000000020000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000f984000000700000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) (async) sendmsg$unix(r8, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r9 = socket(0x2a, 0x2, 0x0) r10 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r10, 0x29, 0xca, &(0x7f0000000000)={0xffff, 0x1, 0x0, 0x0, 0x8000}, 0xc) (async) getsockname$packet(r10, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0xfffffffffffffd77) r11 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4}]}, &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r12 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r11, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r12, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) (async) writev(r11, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x1fffa2}], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r1, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000700)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3e, &(0x7f00000007c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x77, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) sendmsg$inet6(r9, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)="fd3e73057b06021eb683fad824df24c41537ffc14ff929c8f8c43545f7177587ef7ec8803b8786838c8d235539200c46823bc12978a603079eda0028a1a4f0e332f349dad56090f3fb4c06149f88ed5e3bef1e2a450910a34267347c1624261f4e0c8abb2c4fbc6c1b", 0x69}, {&(0x7f0000000000)="9bd01225527e5d1d3b8d3cba085f2df145096218", 0x14}, {&(0x7f0000000380)="8847935738ac363f4f92b88fbeec724b5a09529b2308b17dca5833c638078dc376a8cd1f213a859590970f4e9a9dfefc4294b129f37bb455706108ad5684", 0x3e}, {&(0x7f00000003c0)="91342bc9bcf0de0806a3d5d0e96f3074937803ef9f98c1037203a62ba84dfcd69bc4996df3a2aff342d8ee956cb9e5c4020f16444d3396fe7e45f0e9123516581802745d52c51d45b393dc42aebca703fadf50b7dff798cb120c967958b5508119326244ae96009fc063501bc6796905e1d1cc26ab483a7b21926cdcd36f5cb484e3b29e9f8b47ee706e1a6c0096e8a4446c84b17db732cfa2097c2b184a619e8e0d3702660ecdd6b9a2e23e9acf46fb08fd71e7c5babec0617e7d66f35bc1142d", 0xc1}, {&(0x7f00000004c0)="2cdebd06b784", 0x6}, {&(0x7f0000000500)="1f8421e7f0495ae03998f985f55246cbe716391cd895426538181585915e6f3b7776d63b2c7769ae02e59066795f57f7350aa6208b52d3a19a727cd6bc2735bcb01bf3b137ef1562a0334d108eb9a99b2d15253d8898293a9a40acd59394626bd36be24a070b11bab3ccbacbbc00447e92a5adda74c1eb50bbce0d1f32e4e8d5073fcee61fd16858ff014ef6039438cc84ae1dffdbb78cf335a094e67d653451d9e1d6017c4aa937e42f5fe8ac12795173db99b8fd02701b2f19d837", 0xbc}], 0x6, &(0x7f0000000a00)=[@dontfrag={{0x14, 0x29, 0x3e, 0x6}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2, r13}}}], 0x40}, 0x4040800) (async) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0xfff9, @multicast1}, 0x10) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}, 0x20, 0x0, 0x0, 0x814}, 0x48844) 2m57.648298705s ago: executing program 4 (id=638): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r5 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r5, &(0x7f0000000080)={'some', 0x20, 0x30000000000000, 0x20, 0x9}, 0x2f) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x190) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x44, 0x3e, 0x2, 0x70bd2c, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x20, 0x2, 0x0, 0x1, [@nested={0x1c, 0x9a, 0x0, 0x1, [@nested={0x18, 0x19, 0x0, 0x1, [@typed={0x14, 0x77, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) 2m57.462920031s ago: executing program 4 (id=641): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) (async, rerun: 32) mmap(&(0x7f0000333000/0x4000)=nil, 0x4000, 0x7, 0x10, 0xffffffffffffffff, 0xc7304000) (async, rerun: 32) unshare(0x62040200) (rerun: 32) socket$rxrpc(0x21, 0x2, 0xa) (async) socket$kcm(0x2, 0x1000000000000002, 0x0) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x0, 0x4, 0xcb, &(0x7f00000006c0)=""/203, 0x41100, 0x50, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10, @void, @value}, 0x94) (async) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x4040000) close(r2) (async, rerun: 32) r3 = socket$tipc(0x1e, 0x2, 0x0) (rerun: 32) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000240)={0x41, 0x800000, 0x3, 0x3}, 0x10) (async) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) (async) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000000500f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r6 = socket(0x840000000002, 0x3, 0x100) (async, rerun: 64) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4000) (rerun: 64) connect$inet(r6, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket(0x40000000015, 0x5, 0x0) getsockopt(r8, 0x200000000114, 0x8, &(0x7f0000032380)=""/102400, &(0x7f0000000000)=0x19000) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f0000000480)={'lo\x00', @local}) (async, rerun: 32) sendmmsg$inet(r6, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) (rerun: 32) 2m56.932315348s ago: executing program 4 (id=645): getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000580)=""/184, &(0x7f0000000200)=0xb8) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) r2 = socket(0xa, 0x3, 0x3a) ioctl$SIOCPNADDRESOURCE(r2, 0x89e0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x5, 0x8, 0xed, {}, {}, {0x3}, 0x1, @can={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "1b34ba6b471f0adc"}}, 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x800) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r3}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x7, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x2, 0x4, 0x8fff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r7, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x2c, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad"}, @NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}]}}}, {0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 2m56.753709555s ago: executing program 4 (id=648): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1f, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r0, 0x0, 0xb9b}, 0x18) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r3, 0x0, 0xb9b}, 0x18) (async) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m41.580045947s ago: executing program 32 (id=648): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1f, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r0, 0x0, 0xb9b}, 0x18) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r3, 0x0, 0xb9b}, 0x18) (async) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m29.179562187s ago: executing program 2 (id=915): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000150081044e81f782db44b9040a78080206000000040000a118000300ff05000006000e1208000f0100810401a80016eaa400010000005f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e00600000000d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bfffdccf85df947e5e0", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x25, 0x0, 0x11, 0x4, @broadcast, 0x9, "306fcfea2f1077"}]}}}}}}}}, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) poll(&(0x7f0000000080)=[{r1, 0x4}, {r1, 0x10}, {r1, 0x8000}, {r1, 0x2}, {r1}], 0x5, 0x101) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002380)="1b0000001a007f029e741683c28f7b331d00"/27, 0x1b}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000005600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m28.846539272s ago: executing program 2 (id=918): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x8c, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x70, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x24, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x0, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_ID={0x3c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}]}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000041}, 0x4880) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r3) sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x18000}, 0x0) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r4, 0x200, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x9}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x3}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004c004}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) 2m28.683900234s ago: executing program 2 (id=921): socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r2) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r2) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000002c0)) (async) clock_gettime(0x0, &(0x7f00000002c0)) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) socket$netlink(0x10, 0x3, 0x10) (async) socket$netlink(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x21, 0x5, 0x2) write(r5, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r5, 0x10e, 0x8, &(0x7f0000000000)=0x4, 0x4) (async) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r5, 0x10e, 0x8, &(0x7f0000000000)=0x4, 0x4) recvmmsg(r5, &(0x7f0000005c80), 0x1b, 0x10122, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000100003042abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="b4a5af8840000067431aa80014a95f938345c1642c617461647600000400028008001f00"], 0x3c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000001180)="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", 0x108}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r8, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) (async) recvmsg$unix(r8, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1e00000000000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000eb13da8904e7"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x2000000, 0xe, 0x0, &(0x7f00000005c0)="63ecedae46dc7634cb41c9f7b943", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x2000000, 0xe, 0x0, &(0x7f00000005c0)="63ecedae46dc7634cb41c9f7b943", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="060000000000000000000000004000000d000000"], 0x14}, 0x1, 0x0, 0x0, 0x84401}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000012c0)=ANY=[@ANYBLOB="380000000314010028bd7000fbdbdf250900020073797a31000000000800410068697700140033007465616d301000000000000000000000f756e375e9e4bc27646ed97d118105b1579ad85d81e06902bfd4a64429fb32c610f7d1fc4c595c04f69527c6d15c242f66c529abc82ce20633124b7a9f2e674855aff85df85f480266e7b782d47660e348d3e7c461792d7c36c382b3e6bd4e1ad06e24864c35a89b7dabcc312576a65aeaf6cd4f7b5251ecdf3d294e9ee8bd4c18"], 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x40080c0) socket(0x2, 0x80805, 0x0) (async) r11 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r11, 0x84, 0x84, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x4e22, 0x5, @mcast2, 0x8}}, 0x100, 0x0, 0x0, 0x2}}, &(0x7f0000000280)=0xb0) (async) getsockopt$inet_sctp6_SCTP_STATUS(r11, 0x84, 0x84, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x4e22, 0x5, @mcast2, 0x8}}, 0x100, 0x0, 0x0, 0x2}}, &(0x7f0000000280)=0xb0) 2m28.301234015s ago: executing program 2 (id=923): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x0, 0x1, 0x3}, 0x10) sendmmsg$sock(r1, &(0x7f0000002100)=[{{&(0x7f0000000180)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0xd48736fbd2dd94f1}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000084) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x7, 0x6, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000840)='virtio_transport_alloc_pkt\x00', r3}, 0x18) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r4, 0x29, 0x31, 0xffffffffffffffff, &(0x7f0000000000)) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e23, 0x2, @mcast1, 0x5a89}}}, 0x3a) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r7) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, r8, 0xb03, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0xa6ffffffffffffff, 0x0, 0x4000}, 0x20040880) sendmsg$IPSET_CMD_TYPE(r5, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, 0xd, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008000}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYRESOCT=r5], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) 2m28.030224962s ago: executing program 2 (id=925): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1345, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000100)="89e7ee0000000000000004c988a8", 0xe}, {&(0x7f0000000c00)="712e543da7ded9", 0x7}], 0x2) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x4c}}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000000)={r8, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f00000001c0)={r8, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x2, &(0x7f00000003c0)={r8, 0x1, 0x6, @remote}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x9, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x19, &(0x7f0000000180)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x14, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xcc, r5, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x0, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0xffffffffffffff52, 0x3, 0x2}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4044004}, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x2, 0x2be}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, 0x0, 0x0) mmap$xdp(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) 2m25.737132633s ago: executing program 2 (id=935): r0 = socket$inet(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000012c0)=ANY=[@ANYBLOB="140000002500010325997440ffdbdf2501"], 0x14}, 0x1, 0x0, 0x0, 0xc083}, 0x4000810) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000011000500000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000000000000014001a80100004800c", @ANYRES16=r3], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x44048010) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f0000000040), 0x4) r6 = accept4(r0, 0x0, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000080)={r4, @remote, @rand_addr=0x64010100}, 0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0x1e, "ecc1a809e5a82bbb8b0896a74d91d6ad2ad6a1239fde5b3ec9cb7b1ccb20"}, &(0x7f0000000100)=0x26) 2m10.51433661s ago: executing program 33 (id=935): r0 = socket$inet(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000012c0)=ANY=[@ANYBLOB="140000002500010325997440ffdbdf2501"], 0x14}, 0x1, 0x0, 0x0, 0xc083}, 0x4000810) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000011000500000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000000000000014001a80100004800c", @ANYRES16=r3], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x44048010) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f0000000040), 0x4) r6 = accept4(r0, 0x0, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000080)={r4, @remote, @rand_addr=0x64010100}, 0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0x1e, "ecc1a809e5a82bbb8b0896a74d91d6ad2ad6a1239fde5b3ec9cb7b1ccb20"}, &(0x7f0000000100)=0x26) 1m56.670348704s ago: executing program 5 (id=1179): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x8}}, 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 1m56.172453775s ago: executing program 5 (id=1183): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xaf}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x3, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r0, &(0x7f00000001c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xaf}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x3, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) pipe(&(0x7f0000000180)) (async) openat$cgroup_ro(r0, &(0x7f00000001c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async) 1m55.898513327s ago: executing program 5 (id=1186): r0 = socket$alg(0x26, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = openat$cgroup_procs(r2, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000100), 0x12) r6 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r7 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000000c0), 0x12) pread64(r7, &(0x7f0000001840)=""/4096, 0x1000, 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000400000003"], 0x50) close(0x3) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000008000000040000000600000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000200"/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r9}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x8, 0xd, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfffffffffffffe5c) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r10}, 0x10) openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r11 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r11, &(0x7f0000007a40)=[{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000b80)="1a816649d5bf265d732360c99fc72bbf", 0x10}], 0x1, &(0x7f0000000600)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x80}], 0x1, 0x4004041) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x11, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r12, &(0x7f0000000000), &(0x7f0000000200)=@tcp, 0x3}, 0x20) recvmmsg(r11, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0xffffff0a}], 0x1, 0x2160, 0x0) 1m55.680753034s ago: executing program 5 (id=1187): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="0a3e6c79c131d9a26f72967b6539a8143e79bfa309aebb6005f6e6fb5871f84af9d5494db64dc53681331b7821ead696c0ee9ddde144faa4c248514a203768", @ANYRESDEC, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c00020008"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20000090) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000001c0008001c00000002000000000000000200000d00000000020000000000000001008000010000000000"], 0x0, 0x36, 0x0, 0x1, 0x3ff, 0x0, @void, @value}, 0x18) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000080)=0x7) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={r1}) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) ioctl$SIOCAX25GETINFOOLD(r3, 0x89e3, &(0x7f0000000180)) bind$xdp(r2, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x80000040}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r7, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xc00c0}, 0x0) recvmsg$unix(r5, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x40000062) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r10 = socket(0xf, 0x6, 0xbfaac6b8) write(r10, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r10, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$sock_SIOCGIFBR(r8, 0x8940, &(0x7f0000000300)=@add_del={0x2, &(0x7f0000000240)='ip6tnl0\x00'}) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f00000003c0)={'syztnl2\x00', 0x0}) write$cgroup_subtree(r8, 0x0, 0x32600) 1m55.015033632s ago: executing program 5 (id=1193): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000017c0)=ANY=[@ANYBLOB="400000006800010003001000fdffff7f00001b00000000000c000200020000000800000014000c80080003000700000008003b4bf6ffffff0600030001"], 0x40}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) socket$inet(0x2, 0x1, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x20, r6, 0x5, 0x110000, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0x4}]}, 0x20}}, 0x24000844) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc2b513448242cd97}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x214, r6, 0x300, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x2, 0x48}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x4}, @NL80211_ATTR_PEER_MEASUREMENTS={0x1cc, 0x111, 0x0, 0x1, {0x1c8, 0x5, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x1a8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x160, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xf8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x38, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}]}]}}]}, 0x214}, 0x1, 0x0, 0x0, 0x2000c050}, 0x4000803) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c0000380004803220"], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) unshare(0x40020000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r10 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r10, 0x6a, 0x3, 0x0, &(0x7f0000000000)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f00000000c0)="001008000020000000000010000000800000002300000000", 0x18) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c951ee12e"}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) 1m54.328071404s ago: executing program 5 (id=1197): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000380)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f00000003c0)=0x2c) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e22, @loopback}}, 0xfff, 0x7, 0x2, 0x1, 0x84}, &(0x7f0000000040)=0x98) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000100)={r3, 0x2f76}, &(0x7f0000000200)=0x8) (async) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000100)={r3, 0x2f76}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000280)={0x0, 0xffffc672}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000340)={r4, 0x4, 0xda28}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000340)={r4, 0x4, 0xda28}, 0x8) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = accept(r7, &(0x7f0000000080)=@phonet, &(0x7f0000000100)=0x80) socket$inet(0x2, 0x2, 0x1) (async) r9 = socket$inet(0x2, 0x2, 0x1) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r10, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="310300000000000000000500000008000300", @ANYRES8=r9], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r8, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002cbd7000fbdbdf250d00000008003b000300000008002b000800000008000b000600000005002f000000000000300001000000"], 0x44}, 0x1, 0x0, 0x0, 0x20004890}, 0x4040000) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r8, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002cbd7000fbdbdf250d00000008003b000300000008002b000800000008000b000600000005002f000000000000300001000000"], 0x44}, 0x1, 0x0, 0x0, 0x20004890}, 0x4040000) r12 = gettid() sendmsg$unix(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r12, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r6, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @broadcast}, 0x10) (async) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000280)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x7, 0x11, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000002c0), 0x4e, r13, 0x0, 0x1c000000007400}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000002c0), 0x4e, r13, 0x0, 0x1c000000007400}, 0x38) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000240), r14) 1m39.161763762s ago: executing program 34 (id=1197): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000380)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f00000003c0)=0x2c) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e22, @loopback}}, 0xfff, 0x7, 0x2, 0x1, 0x84}, &(0x7f0000000040)=0x98) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000100)={r3, 0x2f76}, &(0x7f0000000200)=0x8) (async) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000100)={r3, 0x2f76}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000280)={0x0, 0xffffc672}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000340)={r4, 0x4, 0xda28}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000340)={r4, 0x4, 0xda28}, 0x8) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = accept(r7, &(0x7f0000000080)=@phonet, &(0x7f0000000100)=0x80) socket$inet(0x2, 0x2, 0x1) (async) r9 = socket$inet(0x2, 0x2, 0x1) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r10, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="310300000000000000000500000008000300", @ANYRES8=r9], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r8, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002cbd7000fbdbdf250d00000008003b000300000008002b000800000008000b000600000005002f000000000000300001000000"], 0x44}, 0x1, 0x0, 0x0, 0x20004890}, 0x4040000) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r8, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002cbd7000fbdbdf250d00000008003b000300000008002b000800000008000b000600000005002f000000000000300001000000"], 0x44}, 0x1, 0x0, 0x0, 0x20004890}, 0x4040000) r12 = gettid() sendmsg$unix(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r12, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r6, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @broadcast}, 0x10) (async) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000280)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x7, 0x11, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000002c0), 0x4e, r13, 0x0, 0x1c000000007400}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000002c0), 0x4e, r13, 0x0, 0x1c000000007400}, 0x38) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000240), r14) 1m29.664094486s ago: executing program 6 (id=1416): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x38, r4, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x94, r4, 0x1, 0x80, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6b32}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x68a}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x2805}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, 0x0, 0x4090) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r7, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r8, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4040880) r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r10, &(0x7f0000000140)={{0x6, @rose}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) vmsplice(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000680)}], 0x1, 0x8) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8914, &(0x7f0000000100)={'nr0\x00', 0x2}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x0}, @IPSET_ATTR_PORT={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x58, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x6, 0x7, 0x8001}, {{0x2, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="8500000025000000150000000000000045000000000000209500000000000000e5558e22cea1bf0f3f3e82bddd95106b8ebfc11f271d214118ab739ab200c12344308892805a6b874de28abfd134"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x61, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m18.186047982s ago: executing program 6 (id=1416): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x38, r4, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x94, r4, 0x1, 0x80, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6b32}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x68a}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x2805}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, 0x0, 0x4090) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r7, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r8, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4040880) r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r10, &(0x7f0000000140)={{0x6, @rose}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) vmsplice(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000680)}], 0x1, 0x8) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8914, &(0x7f0000000100)={'nr0\x00', 0x2}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x0}, @IPSET_ATTR_PORT={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x58, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x6, 0x7, 0x8001}, {{0x2, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="8500000025000000150000000000000045000000000000209500000000000000e5558e22cea1bf0f3f3e82bddd95106b8ebfc11f271d214118ab739ab200c12344308892805a6b874de28abfd134"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x61, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m2.614359198s ago: executing program 6 (id=1416): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x38, r4, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x94, r4, 0x1, 0x80, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6b32}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x68a}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x2805}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, 0x0, 0x4090) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r7, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r8, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4040880) r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r10, &(0x7f0000000140)={{0x6, @rose}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) vmsplice(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000680)}], 0x1, 0x8) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8914, &(0x7f0000000100)={'nr0\x00', 0x2}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x0}, @IPSET_ATTR_PORT={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x58, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x6, 0x7, 0x8001}, {{0x2, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="8500000025000000150000000000000045000000000000209500000000000000e5558e22cea1bf0f3f3e82bddd95106b8ebfc11f271d214118ab739ab200c12344308892805a6b874de28abfd134"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x61, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m2.180422612s ago: executing program 3 (id=1602): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_TXQLEN={0x8, 0xd, 0x4}, @IFLA_OPERSTATE={0x5, 0x10, 0x7a}]}, 0x44}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0xc4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket(0x1e, 0x5, 0x0) socket(0x1e, 0x805, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3d, &(0x7f0000000000)='cgroup\x00\x8d\f\xf3\xcd\xc6X$\x01n-Hg\x144-.\xe2\x053\xe2\xf4\xbf[\xe9\xdddU\x91\x9d,\t\x8d\xc3@\x86,\x7f\xe2Z\xe8L\x80\xdbe~c\xbc\x9b\xcf\x9b\x1cH\x95\xf3'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000014c0)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0200000002"], 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="020000000200000000000000", @ANYRES32, @ANYBLOB="2d84161cf2d30d5bd0b628454e291bed885c702b866542b6c04a40d414fb7ad15301de8c3304b78f6156ea6332d3e08b69ff7846288a08d4e345e4f5f7a9834c2e5a41e25fdabb1f029ee8be0992c011040168fa71c8b777a4cfd86aa51f67a06eeaf6f255e78bea03ce830690cf3379f1e58bb58d1298eed8ffe606e28c43f772c55763d238b2c8d7230efecf08231d0a8b8531ac72c1ef", @ANYRES64=0x0], 0x10) socketpair(0xa, 0x1, 0x6, &(0x7f0000000440)) socket(0x1, 0x803, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1m1.892225917s ago: executing program 3 (id=1605): openat$tun(0xffffffffffffff9c, 0x0, 0xc0041, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000006e40)={&(0x7f0000005980)=@generic={0x1, "7f2a5c186b32b4c3e37e9db0cc4d174988d2a7485e8abf2e0d364ef46996432a3c1f52de9d37bbd65c4381f1e88065069a4c67aeb01cefdda4f74f30b0d0cc3280305951c1a9f9bd942b1080f8fe1f9709a4e70d778a658977ef70f8aa3d710a5f78e96bb6f5530f87548ac4914e4cb5a19987d62bb82525306ab2479ead"}, 0x80, 0x0}, 0x4004010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000004c0)='contention_end\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x18, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xc0041, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) sendmsg$sock(0xffffffffffffffff, &(0x7f0000006e40)={&(0x7f0000005980)=@generic={0x1, "7f2a5c186b32b4c3e37e9db0cc4d174988d2a7485e8abf2e0d364ef46996432a3c1f52de9d37bbd65c4381f1e88065069a4c67aeb01cefdda4f74f30b0d0cc3280305951c1a9f9bd942b1080f8fe1f9709a4e70d778a658977ef70f8aa3d710a5f78e96bb6f5530f87548ac4914e4cb5a19987d62bb82525306ab2479ead"}, 0x80, 0x0}, 0x4004010) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000004c0)='contention_end\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x18, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) 1m1.794992915s ago: executing program 3 (id=1607): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="020200090f000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000002000100000004d20000020300000020050005002f8000000a00000000000000ff010000000000000000000000000001000000000000000001001800"], 0x78}}, 0x0) getsockname$packet(r0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r3, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x4000) 48.450656952s ago: executing program 3 (id=1607): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="020200090f000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000002000100000004d20000020300000020050005002f8000000a00000000000000ff010000000000000000000000000001000000000000000001001800"], 0x78}}, 0x0) getsockname$packet(r0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r3, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x4000) 47.561346222s ago: executing program 6 (id=1416): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x38, r4, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x94, r4, 0x1, 0x80, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6b32}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x68a}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x2805}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, 0x0, 0x4090) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r7, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r8, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4040880) r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r10, &(0x7f0000000140)={{0x6, @rose}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) vmsplice(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000680)}], 0x1, 0x8) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8914, &(0x7f0000000100)={'nr0\x00', 0x2}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x0}, @IPSET_ATTR_PORT={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x58, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x6, 0x7, 0x8001}, {{0x2, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="8500000025000000150000000000000045000000000000209500000000000000e5558e22cea1bf0f3f3e82bddd95106b8ebfc11f271d214118ab739ab200c12344308892805a6b874de28abfd134"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x61, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 29.502409686s ago: executing program 3 (id=1607): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="020200090f000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000002000100000004d20000020300000020050005002f8000000a00000000000000ff010000000000000000000000000001000000000000000001001800"], 0x78}}, 0x0) getsockname$packet(r0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r3, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x4000) 24.426429053s ago: executing program 6 (id=1416): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x38, r4, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x94, r4, 0x1, 0x80, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6b32}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x68a}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x2805}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, 0x0, 0x4090) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r7, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r8, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4040880) r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r10, &(0x7f0000000140)={{0x6, @rose}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) vmsplice(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000680)}], 0x1, 0x8) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8914, &(0x7f0000000100)={'nr0\x00', 0x2}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x0}, @IPSET_ATTR_PORT={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x58, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x6, 0x7, 0x8001}, {{0x2, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="8500000025000000150000000000000045000000000000209500000000000000e5558e22cea1bf0f3f3e82bddd95106b8ebfc11f271d214118ab739ab200c12344308892805a6b874de28abfd134"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x61, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 12.11714108s ago: executing program 3 (id=1607): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="020200090f000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000002000100000004d20000020300000020050005002f8000000a00000000000000ff010000000000000000000000000001000000000000000001001800"], 0x78}}, 0x0) getsockname$packet(r0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r3, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x4000) 9.445330606s ago: executing program 6 (id=1416): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x38, r4, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x94, r4, 0x1, 0x80, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6b32}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x68a}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x2805}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, 0x0, 0x4090) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r7, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r8, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4040880) r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r10, &(0x7f0000000140)={{0x6, @rose}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) vmsplice(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000680)}], 0x1, 0x8) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8914, &(0x7f0000000100)={'nr0\x00', 0x2}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x0}, @IPSET_ATTR_PORT={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x58, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x6, 0x7, 0x8001}, {{0x2, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="8500000025000000150000000000000045000000000000209500000000000000e5558e22cea1bf0f3f3e82bddd95106b8ebfc11f271d214118ab739ab200c12344308892805a6b874de28abfd134"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x61, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 7.403259966s ago: executing program 0 (id=1933): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) 7.320705849s ago: executing program 0 (id=1934): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @remote, @empty}, &(0x7f0000000080)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="12000000050000000800000008"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r2, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r2, &(0x7f0000000180)="602cc707b8e1", &(0x7f0000000280)=""/219}, 0x20) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x18, r0}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f00000000c0), &(0x7f0000000180)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x9, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000800000000000000000000711027000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @cgroup_sock=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 7.18260421s ago: executing program 0 (id=1935): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800001965ba917c62e1e6902300000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r0}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0), 0x10b8c}}, 0x0) recvmsg$unix(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)=""/224, 0xe0}, {&(0x7f0000000280)=""/45, 0x2d}], 0x2}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r4, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f588", 0x2}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x2, 0x40) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x0, @empty}}, 0x0, 0x1, 0x3bf8580d, 0x0, 0xb3550aa4ba878396, 0x2}, 0x9c) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 7.05315578s ago: executing program 0 (id=1938): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) (async, rerun: 64) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e20, 0x7, @private2={0xfc, 0x2, '\x00', 0x5}, 0x4}}, 0x0, 0x0, 0x4e, 0x0, "c3218d82c5890101d7cdb23c72887c897926a8856263b50c57bfccf9f362f16f21f5c8facc1d1518103bbde1a9fe13f6545bbdff9c1351ba69e297337d6a5e4a94bd192900"}, 0xd8) (async, rerun: 64) syz_emit_ethernet(0x0, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x10, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x18, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0xae}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000280)={0x0, 0x8}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000740)={r6, @in={{0x2, 0x4e20, @remote}}, 0x443, 0x4, 0x8, 0x3, 0xa0, 0x10001, 0x8}, 0x9c) (async, rerun: 32) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) (async, rerun: 32) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_emit_ethernet(0x56, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6000000000200600fe8000000000000000000000000000aafe000000000000000000000000aa8000400132ffda9dcfd02fd5b7f6a54b7526058fd568e76c09fefbd26fae324d5a6cb9d3cf5605f32917d9ec57a7e2fe878d0be765a10f30df69b2b23d77a875add878699be87dd1c898c88329cb6e4ba07eb430ee5f8f130b85c918986a4ba5e22257de08a711f11a9b8adb2c35f3d6eefdc1a3281d1c90e3fc090000000f7abe83aeec2b30cc9a49400f890000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80020100907800000402fe0af989f16d73c0e798"], 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async, rerun: 32) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000140)={'veth0_to_bridge\x00', 0x2000}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff2}, {0x0, 0xfff1}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x6, 0xc}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r12 = socket$tipc(0x1e, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r8}, 0x8) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, [@alu={0x64b3a20a0c2bf0ef, 0x1, 0x0, 0xa, 0x7, 0x80, 0xffffffffffffffff}]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x10, 0x10000, @void, @value}, 0x94) (rerun: 32) bind$tipc(r12, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) (async, rerun: 64) sendmsg$tipc(r12, &(0x7f0000000500)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x8d4) (rerun: 64) r13 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000840)={r11}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r13, 0x2f00020b, 0x117, 0x0, &(0x7f0000000900)="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", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.349821589s ago: executing program 0 (id=1942): socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xc4}]}, &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x2, 0xa, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000001400000007"], 0x48) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b80)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x154}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0xfc, @private2, 0x8}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="04002dbd7000f2dbdf254f0000000c00839ced540000680000004c007a8008000400000000181c000200134ecc4d908540c3c8630b918a29360800040004005111335ced5fd94e0800040009000000080004000300000048007a801400010003d869f47d8c428eaa74b31794b4b314b5000400000000000c0003004180081ee4f88f1a080004000c0000000c0003007858754e3c504054080004000800000004007a8020007a800800040005000000140002002929590c"], 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES16=r3], 0x48) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 5.905728074s ago: executing program 0 (id=1947): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x891c, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "d3"}]}], {0x14}}, 0x70}}, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r2, 0x0, 0xb9b}, 0x18) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x15, 0xa, 0x201, 0x0, 0x0, {0xb, 0x0, 0x8}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e20, 0x2, @local, 0x80000}}, 0x8, 0x101, 0x10000, 0x38, 0x5a, 0x7c, 0x1}, &(0x7f0000000340)=0x9c) (async) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 4.991473325s ago: executing program 1 (id=1952): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x100}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0xfc}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x20}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000240)=0x1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x5c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008050) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000380)=0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) poll(&(0x7f0000000400)=[{r1, 0x40}], 0x1, 0x3) 3.950741862s ago: executing program 1 (id=1955): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) 3.92498664s ago: executing program 1 (id=1956): r0 = socket$netlink(0x10, 0x3, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000980)}, 0x40) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c00"], 0x28}, 0x1, 0x0, 0x0, 0x10040000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) syz_emit_ethernet(0x82, &(0x7f0000000240)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @rand_addr=0x4, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1=0xe0000089}, {@private}, {@local}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) 2.278481922s ago: executing program 1 (id=1958): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r1 = socket$netlink(0x10, 0x3, 0x10) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x8, &(0x7f0000004380)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x91, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2b) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0x2300}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x3fff}]}}]}, 0x40}}, 0x0) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r2, 0xffffffffffffffff, 0x2, 0x8, 0x4, @void, @value}, 0x20) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000046d100180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000008208500000073000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x791db5641e51ecfe, 0x2c, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bind$netlink(0xffffffffffffffff, 0x0, 0x0) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002d00010026bd7000fcdbdf2504000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008010) 1.985945141s ago: executing program 1 (id=1960): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000002c0)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) (async) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000b40)={0x2, {{0xa, 0x4e20, 0x1, @mcast2}}, 0x0, 0x2, [{{0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00', 0x2}}, {{0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00', 0x5}}]}, 0x190) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000004c0)='percpu_alloc_percpu\x00', r2}, 0x10) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x44b, 0x70bd28, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x54880}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @link_local}]}, 0x40}}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x2, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) sendmsg$NL80211_CMD_GET_STATION(r7, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c020056", @ANYRES16=r8, @ANYBLOB="01002abd7000fddbdf251100000008000300", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x24040080) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e80)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x6}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x4c}}, 0x0) (async) socket$packet(0x11, 0x2, 0x300) 1.696784591s ago: executing program 1 (id=1963): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r3}, 0x18) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x5, @none, 0x0, 0x2}, 0xe) listen(r4, 0xa1) accept4$bt_l2cap(r4, 0x0, 0x0, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r6, {0xb, 0xfff1}, {0x14, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x10ec, 0x3, 0xe2a, 0x7, 0x3, 0x3, 0x8, 0x40, 0x4}}}}]}, 0x58}}, 0x4040) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r8, 0x89a3, &(0x7f0000000200)='veth1_to_hsr\x00') r9 = socket(0x26, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) getsockopt$EBT_SO_GET_ENTRIES(r9, 0x0, 0x81, 0x0, &(0x7f0000000500)) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r7}, 0x8) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x9, 0x12) ioctl$FS_IOC_RESVSP(r10, 0x4030582a, &(0x7f0000000380)={0x0, 0x0, 0x10, 0x80000000}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 1.610669843s ago: executing program 7 (id=1964): r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791130000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xae}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005200010005bd7000040000000200000008000100c2e62ec725e130ab44b2f8ba6444fe5545bd8ac6a8c7570059d42ae135b93b737d6aa06455a85a3f5cf02b3a5638299638764d0fa1cd30cbba34d099c3b2376842a182d60bfa657fae5fd61c1602e3badd8dfab36179", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x800) 1.571524444s ago: executing program 7 (id=1965): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=@alg={0xe0, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {{'xts(twofish)\x00'}, '\x00', '\x00', 0x400, 0x2000}}, 0xe0}, 0x1, 0x0, 0x0, 0x44}, 0x80) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=@alg={0xe0, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {{'xts(twofish)\x00'}, '\x00', '\x00', 0x400, 0x2000}}, 0xe0}, 0x1, 0x0, 0x0, 0x44}, 0x80) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x83, &(0x7f0000000140)={r6}, 0x8) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000000240)={@local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @remote}, 0x2, 0x6, 0x5, 0x400, 0xb, 0x2, r8}) bind$inet6(r7, &(0x7f0000000140)={0xa, 0xe22, 0x3, @loopback={0xff00000000000000}}, 0x1c) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r9, &(0x7f0000000040)={0x1a, 0x0, 0x2, 0x54}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000000), 0xffffff6a) sendfile(r9, r10, 0x0, 0xffffffff000) listen(r9, 0x10001) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000000)={r6, 0xd}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x4000) 567.505897ms ago: executing program 7 (id=1966): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) 346.177958ms ago: executing program 7 (id=1967): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r2, 0x300, 0x70bd28, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc041}, 0x4000000) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000001580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001540)={&(0x7f0000000240)={0x12cc, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_BEACON_HEAD={0x22d, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x3}, @device_b, @broadcast, @from_mac=@broadcast, {0x9, 0x8}}, 0x9, @random=0x1, 0x4000, @void, @void, @val={0x3, 0x1, 0x80}, @val={0x4, 0x6, {0x40, 0x6, 0x36, 0x5}}, @val={0x6, 0x2, 0x8}, @void, @val={0x25, 0x3, {0x0, 0xd, 0x8}}, @val={0x2a, 0x1}, @void, @val={0x2d, 0x1a, {0x2, 0x1, 0x7, 0x0, {0x5e0000, 0x524, 0x0, 0xf0, 0x0, 0x1, 0x0, 0x3}, 0x8, 0x7, 0x7d}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x6, 0x20}}, @void, [{0xdd, 0xd0, "0a9dcf2e58d9725cd079f803e39128eef249810a337a6e9bee26db28a8ad40494847b63924ff435eb4c22e522cd21e6d998866199f101741ec0be92c9e59a2dc5eb8e425d438e3ce3708a21755112a10f27182daf60283e28d686e400658656c2f2974ab03accc85253883fcb5199aa1965f8e462c390e9415f88e2fdc031f277e050ba1ba9679843c3d070ab1c42814f05b1e6c82cfa1415d1dafaf35b37b3349ac87964b86c877fde94e0a6bc790cfdbd61f15d3677f2de72de36e8e66ea4c10f8ea1f43f642cceea4cc505c8b74b0"}, {0xdd, 0xbf, "2a30da0e4b29599bed7a03d3b0de787e6f7d39026b708d9e85b11915ce887e77907b076e6a1fc6cadaf57dbffa6acfc5f10b675f7fe6d601c064e76dfa5383dd4748c3699406226d6a8aa1156d372733017b4bfcd900b5de9c9a66fe6e894d7c256b57e9fda38788011bffe32044ce0d6aba1d5851a35a00e6323d000df3ae6ac698b0c5495a175407201a31484a53fa602300f73187829ce4dd9abb552b59dec7c9a4e92b7b502eef3e71b8cf14016a423927b12a95f7b5b0550d2fb6f2e8"}, {0xdd, 0x2c, "c6bbe87121a35733967aac8e42afba5cb0c289bd466430b89e0ae53b0433b60ce1328113032fb650f6e21e6a"}]}}, @NL80211_ATTR_BEACON_TAIL={0x6f, 0xf, [@chsw_timing={0x68, 0x4, {0xa1, 0x3}}, @tim={0x5, 0x4c, {0x1, 0x3b, 0x1, "77dc02e456e8805362ada4c4db187e2ccf661f600d5bc0961c877271015cad6f2a87b72d803552e981ceb02f3523f67adc3e3bde3fee718eebf74da698e74c0d0a5a65cc10c7a731e3"}}, @chsw_timing={0x68, 0x4, {0x4, 0x6}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0, 0x60}}, @mesh_chsw={0x76, 0x6, {0x2, 0x2, 0x7, 0x5}}]}, @NL80211_ATTR_PROBE_RESP={0x4e1, 0x91, "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"}, @NL80211_ATTR_BEACON_TAIL={0x123, 0xf, [@supported_rates={0x1, 0x8, [{0x9, 0x1}, {0x5}, {0x60, 0x1}, {0x44, 0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x6}]}, @random={0xb3, 0xf5, "fab938b77864d34cd4e1d9655589d34327c78b96e48c4729e72ed4d551ede48a175c281e71fccc110b3e68b83a03c3ce02af5c346cbb6f063cd9c5e53c141c32b5defe5f435d4083a7729c517023053ceed2a7acb13aa6ea84e715ea80f735a84d3d2bae5cd84244910d228a34c90be739cf247271ee2316e61ed129f96e2f1dc0f8bf3b9948104442e59a373fbd283cebba1cb04978b21935371d3755df17d4b9bfe8506ba3403553e65f3cfc0bd093c8f873b30dfdb1a74347dc7824a2f4baba842f9386c3c49c1730079bf35355f3c479bc40aea73af356625ccc0c9e85d87c9c5467d4666aaf178c58151e3b567da9905f64ad"}, @peer_mgmt={0x75, 0x14, {0x1, 0x4, @void, @void, @val="42d6420919df83d8045da8578d49a6cc"}}, @peer_mgmt={0x75, 0x6, {0x1, 0x74ae, @val=0x5, @void, @void}}]}, @NL80211_ATTR_PROBE_RESP={0x47c, 0x91, "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"}, @NL80211_ATTR_IE_ASSOC_RESP={0x4b, 0x80, [@ssid={0x0, 0xb, @random="0be096975ae552de71a3f7"}, @dsss={0x3, 0x1, 0xfa}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x1, 0xa5, @device_a, 0xfffffeff, @value=@broadcast, 0xb7f, 0xfffffff9, @device_b, 0x1d3}}, @channel_switch={0x25, 0x3, {0x1, 0xac, 0x40}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_PROBE_RESP={0x53d, 0x91, "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"}]}, 0x12cc}, 0x1, 0x0, 0x0, 0x90}, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001600), r1) (rerun: 64) sendmsg$NL80211_CMD_START_P2P_DEVICE(r4, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x20, r5, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x2a}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) r6 = accept4(r1, 0x0, &(0x7f0000001700), 0x80800) recvmsg$can_raw(r6, &(0x7f00000019c0)={&(0x7f0000001740)=@tipc=@name, 0x80, &(0x7f00000018c0)=[{&(0x7f00000017c0)=""/193, 0xc1}], 0x1, &(0x7f0000001900)=""/178, 0xb2}, 0x2) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000001a00), &(0x7f0000001a40)=0x4) r7 = socket$alg(0x26, 0x5, 0x0) (async) pipe(&(0x7f0000001a80)={0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r8, 0x894b, &(0x7f0000001ac0)) (async) r9 = socket$inet6(0xa, 0x4, 0x5) (async) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000001c40)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b40)={0xa8, r5, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x26}}}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x80}, {0x6, 0x5}, {0x2, 0x4}, {0x7f, 0x9}], "b9e2f5d8072d6315"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0xd1, 0x2}, {0x5}, {0x4, 0x5}, {0x5}, {0x2, 0x7}, {0x2}, {0x9, 0x2}, {0x80}, {0x1, 0x7}, {0xf}, {0x5, 0x3}, {0x7f, 0x5}, {0xfd, 0x6}, {0xa, 0x1}, {0x4}], "179b694496d56c9a"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x2, 0x8}, {0xa, 0x6}, {0x1, 0x2}, {0x5, 0x5}, {0x1, 0x3}, {0x2d, 0x7}, {0x9, 0x5}, {0xec}, {0x8b, 0x6}, {0x9, 0x7}, {0xf7, 0x1}, {0x3}, {0x5, 0x7}, {0xfb, 0x3}, {0x9, 0x5}, {0x1}, {0x5, 0x4}, {0x7, 0x7}, {0x3, 0x6}, {0xd, 0x1}, {0x2, 0x7}], "c7803b47ee9fe192"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x7a}], "c88b2f7f10ab4911"}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40085}, 0x8000) splice(r9, &(0x7f0000001c80)=0x10001, r8, &(0x7f0000001cc0)=0x9, 0x7, 0x9) (async) r10 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r10, &(0x7f0000001d00)={0x2, 0x4e20, @empty}, 0x10) (async) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f0000001d40)={0x0, @in6={{0xa, 0x4e22, 0x6, @empty, 0x7fffffff}}, 0xb9f9361, 0x4, 0x4, 0x10000, 0x6616}, &(0x7f0000001e00)=0x98) (rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000001f00)={r12, 0x94, &(0x7f0000001e40)=[@in6={0xa, 0x4e22, 0x2, @mcast1, 0x6}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e21, 0xfffffffb, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, @in={0x2, 0x4e20, @private=0xa010100}, @in6={0xa, 0x4e22, 0x4, @mcast2, 0x2}]}, &(0x7f0000001f40)=0x10) (async, rerun: 32) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f00000025c0)=@broute={'broute\x00', 0x20, 0x3, 0x5e2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000001fc0], 0x0, &(0x7f0000001f80), &(0x7f0000001fc0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x11, 0x1, 0x88e5, 'bond_slave_0\x00', 'batadv_slave_1\x00', 'veth0_to_team\x00', 'wlan1\x00', @local, [0xff, 0x0, 0x0, 0x0, 0xff], @empty, [0x0, 0xff, 0xff, 0x0, 0xff], 0x9e, 0xee, 0x126, [@cpu={{'cpu\x00', 0x0, 0x8}, {{0x80000000, 0x6}}}], [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x2, 'syz0\x00', {0x1}}}}], @common=@dnat={'dnat\x00', 0x10, {{@random="8146ad2f2b0a", 0xfffffffffffffffd}}}}, {0x9, 0x24, 0x88fb, 'veth0_to_bond\x00', 'veth1\x00', 'bond0\x00', 'ip6tnl0\x00', @local, [0x0, 0x0, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, [0xff, 0xff, 0xff], 0xa6, 0xa6, 0x1d6, [@realm={{'realm\x00', 0x0, 0x10}, {{0x1, 0xd}}}], [], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x7fffffff, 'system_u:object_r:traceroute_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{0x11, 0x4e, 0x15, 'veth0_to_batadv\x00', 'wg2\x00', 'vlan0\x00', 'geneve0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], @multicast, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], 0xae, 0x20e, 0x256, [@connbytes={{'connbytes\x00', 0x0, 0x18}, {{[{0x6}, {0x81}], 0x2, 0x1}}}], [@common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0xfffffffc, 'system_u:object_r:mouse_device_t:s0\x00'}}}], @common=@ERROR={'ERROR\x00', 0x20, {"4826aa20e363a11285da8da74d55111b277a1b3b0577f32c9ce187c5e2d7"}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff}]}, 0x65a) (async) recvmmsg(r7, &(0x7f00000028c0)=[{{&(0x7f0000002640)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000027c0)=[{&(0x7f00000026c0)=""/85, 0x55}, {&(0x7f0000002740)=""/112, 0x70}], 0x2, &(0x7f0000002800)=""/169, 0xa9}, 0x6}], 0x1, 0x20, &(0x7f0000002900)) (async) r13 = accept(r8, &(0x7f0000002940)=@un=@abs, &(0x7f00000029c0)=0x80) ioctl$sock_SIOCGPGRP(r11, 0x8904, &(0x7f0000002a40)=0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002a80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r13, &(0x7f0000002b40)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002b00)={&(0x7f0000002ac0)={0x34, r3, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r0}, @NL80211_ATTR_PID={0x8, 0x52, r14}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r15}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x63}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040091}, 0x8840) 26.549155ms ago: executing program 7 (id=1968): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x1e0, 0x8, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0xf0, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x44, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x8e81d47ef2e294f7}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_SREG={0x8}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, {0x28, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0xffffffffffffff6e, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x3}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_PROTO_MIN={0x8}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0xd0, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x38, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}, {0x1c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x34, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x228}}, 0x20050800) socketpair(0x27, 0x3, 0x7f, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f00000001c0), &(0x7f0000000180)=0xfffffeed) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) 0s ago: executing program 7 (id=1969): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1a, 0x20000000, 0x4, 0x1c, 0xa, {0x3, 0x2, 0x0, 0xf, 0x1}, {0x4, 0x1, 0x8c0, 0x5, 0x5a, 0x3}, 0x2, 0x49e3, 0x6}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (fail_nth: 10) kernel console output (not intermixed with test programs): 44.054701][T11064] ? __pfx__printk+0x10/0x10 [ 244.054722][T11064] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 244.054746][T11064] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 244.054771][T11064] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 244.054797][T11064] warn_alloc+0x214/0x310 [ 244.054830][T11064] ? __pfx___schedule+0x10/0x10 [ 244.054856][T11064] ? __pfx_warn_alloc+0x10/0x10 [ 244.054886][T11064] ? kasan_save_track+0x4f/0x80 [ 244.054911][T11064] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 244.054938][T11064] ? xskq_create+0x56/0x170 [ 244.054961][T11064] ? __x64_sys_setsockopt+0x18b/0x220 [ 244.054990][T11064] ? do_syscall_64+0xf6/0x210 [ 244.055012][T11064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.055046][T11064] __vmalloc_node_range_noprof+0x125/0x12c0 [ 244.055114][T11064] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 244.055150][T11064] ? __kasan_kmalloc+0x93/0xb0 [ 244.055183][T11064] vmalloc_user_noprof+0x74/0x80 [ 244.055214][T11064] ? xskq_create+0xbf/0x170 [ 244.055235][T11064] xskq_create+0xbf/0x170 [ 244.055263][T11064] xsk_init_queue+0xb0/0x110 [ 244.055289][T11064] xsk_setsockopt+0x43f/0x710 [ 244.055314][T11064] ? __pfx_xsk_setsockopt+0x10/0x10 [ 244.055349][T11064] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 244.055374][T11064] ? __pfx_xsk_setsockopt+0x10/0x10 [ 244.055396][T11064] do_sock_setsockopt+0x257/0x3e0 [ 244.055430][T11064] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 244.055457][T11064] ? __fget_files+0x2a/0x420 [ 244.055502][T11064] ? __fget_files+0x3a0/0x420 [ 244.055529][T11064] ? __fget_files+0x2a/0x420 [ 244.055569][T11064] __x64_sys_setsockopt+0x18b/0x220 [ 244.055606][T11064] do_syscall_64+0xf6/0x210 [ 244.055632][T11064] ? clear_bhb_loop+0x60/0xb0 [ 244.055659][T11064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.055684][T11064] RIP: 0033:0x7ff72cb8e969 [ 244.055702][T11064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.055719][T11064] RSP: 002b:00007ff72d99f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 244.055741][T11064] RAX: ffffffffffffffda RBX: 00007ff72cdb5fa0 RCX: 00007ff72cb8e969 [ 244.055757][T11064] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 244.055769][T11064] RBP: 00007ff72cc10ab1 R08: 0000000000000004 R09: 0000000000000000 [ 244.055782][T11064] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.055795][T11064] R13: 0000000000000000 R14: 00007ff72cdb5fa0 R15: 00007ffcd94fb0f8 [ 244.055830][T11064] [ 244.116692][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 244.164254][T11064] Mem-Info: [ 244.365435][T11064] active_anon:6384 inactive_anon:0 isolated_anon:0 [ 244.365435][T11064] active_file:1582 inactive_file:39895 isolated_file:0 [ 244.365435][T11064] unevictable:768 dirty:143 writeback:0 [ 244.365435][T11064] slab_reclaimable:10971 slab_unreclaimable:112402 [ 244.365435][T11064] mapped:39853 shmem:1405 pagetables:1018 [ 244.365435][T11064] sec_pagetables:0 bounce:0 [ 244.365435][T11064] kernel_misc_reclaimable:0 [ 244.365435][T11064] free:1305566 free_pcp:534 free_cma:0 [ 244.458424][T11064] Node 0 active_anon:25336kB inactive_anon:0kB active_file:6328kB inactive_file:159376kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:159412kB dirty:572kB writeback:0kB shmem:3884kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12968kB pagetables:3972kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 244.522397][T11064] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 244.574818][T11064] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 244.640760][T11081] __nla_validate_parse: 3 callbacks suppressed [ 244.640783][T11081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1270'. [ 244.661004][T11064] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 244.678529][T11064] Node 0 DMA32 free:1298316kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:25628kB inactive_anon:0kB active_file:6328kB inactive_file:159284kB unevictable:1536kB writepending:572kB present:3129332kB managed:2563988kB mlocked:0kB bounce:0kB free_pcp:2388kB local_pcp:1152kB free_cma:0kB [ 244.741876][T11064] lowmem_reserve[]: 0 0 0 0 0 [ 244.747661][T11064] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 244.778672][T11064] lowmem_reserve[]: 0 0 0 0 0 [ 244.783484][T11064] Node 1 Normal free:3908412kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 244.818935][T11064] lowmem_reserve[]: 0 0 0 0 0 [ 244.823748][T11064] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 244.865240][T11064] Node 0 DMA32: 3*4kB (UME) 66*8kB (UME) 176*16kB (UME) 283*32kB (UME) 92*64kB (UME) 38*128kB (UME) 20*256kB (UME) 7*512kB (UM) 5*1024kB (UM) 6*2048kB (UM) 305*4096kB (UM) = 1298556kB [ 244.897579][T11064] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 244.913483][T11064] Node 1 Normal: 239*4kB (UM) 64*8kB (UME) 50*16kB (UME) 195*32kB (UME) 108*64kB (UME) 28*128kB (UME) 21*256kB (UME) 8*512kB (UM) 5*1024kB (UME) 2*2048kB (UE) 945*4096kB (M) = 3908412kB [ 244.935479][T11064] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 244.946238][T11064] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 244.955579][T11064] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 244.968371][T11064] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 244.978808][T11064] 42854 total pagecache pages [ 244.985507][T11064] 0 pages in swap cache [ 245.001418][T11064] Free swap = 124996kB [ 245.005628][T11064] Total swap = 124996kB [ 245.011830][T11086] tap0: tun_chr_ioctl cmd 1074025677 [ 245.018073][T11086] tap0: linktype set to 778 [ 245.029112][T11064] 2097051 pages RAM [ 245.067188][T11064] 0 pages HighMem/MovableOnly [ 245.071941][T11064] 424396 pages reserved [ 245.084920][T11064] 0 pages cma reserved [ 245.325077][T11097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1276'. [ 245.399321][T11101] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1278'. [ 245.435819][T11101] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1278'. [ 245.891296][T11119] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 245.898618][T11119] IPv6: NLM_F_CREATE should be set when creating new route [ 245.905938][T11119] IPv6: NLM_F_CREATE should be set when creating new route [ 245.913184][T11119] IPv6: NLM_F_CREATE should be set when creating new route [ 245.956814][T11119] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 246.301391][T11132] netlink: 'syz.6.1287': attribute type 5 has an invalid length. [ 246.329466][T11132] netlink: 'syz.6.1287': attribute type 5 has an invalid length. [ 246.420961][T11136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1288'. [ 246.431016][T11136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1288'. [ 246.440104][T11136] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1288'. [ 246.685544][T11146] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1290'. [ 246.906929][T11151] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1291'. [ 246.932494][T11154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1292'. [ 247.552585][T11174] lo: entered allmulticast mode [ 247.562627][T11175] lo: left allmulticast mode [ 247.788358][T11182] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607) [ 247.826122][T11182] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 247.910084][T11189] sch_tbf: peakrate 2 is lower than or equals to rate 6 ! [ 248.167353][T11199] netlink: 'syz.0.1304': attribute type 3 has an invalid length. [ 250.009414][T11276] __nla_validate_parse: 8 callbacks suppressed [ 250.009433][T11276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1330'. [ 250.025403][T11276] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1330'. [ 250.075989][T11264] netlink: 'syz.0.1325': attribute type 1 has an invalid length. [ 250.110749][T11264] netlink: 'syz.0.1325': attribute type 2 has an invalid length. [ 250.434244][T11285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1332'. [ 250.620875][ T5839] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 250.631071][ T5839] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 250.639737][ T5839] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 250.659963][ T5839] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 250.672377][ T5839] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 250.724967][T11294] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1334'. [ 250.962195][T11300] netlink: 'syz.6.1335': attribute type 10 has an invalid length. [ 250.993847][T11300] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1335'. [ 251.063162][T11300] bridge0: port 3(dummy0) entered blocking state [ 251.067306][T11305] x_tables: duplicate underflow at hook 1 [ 251.078073][T11300] bridge0: port 3(dummy0) entered disabled state [ 251.085006][T11300] dummy0: entered allmulticast mode [ 251.112245][T11300] dummy0: entered promiscuous mode [ 251.122438][T11300] bridge0: port 3(dummy0) entered blocking state [ 251.129027][T11300] bridge0: port 3(dummy0) entered forwarding state [ 251.566919][T11288] chnl_net:caif_netlink_parms(): no params data found [ 251.820261][T11328] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1341'. [ 252.227508][T11288] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.235040][T11288] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.245668][T11288] bridge_slave_0: entered allmulticast mode [ 252.254719][T11288] bridge_slave_0: entered promiscuous mode [ 252.277106][T11288] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.284805][T11288] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.293318][T11288] bridge_slave_1: entered allmulticast mode [ 252.314572][T11288] bridge_slave_1: entered promiscuous mode [ 252.414878][T11288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.520699][T11288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.671924][T11288] team0: Port device team_slave_0 added [ 252.701475][T11288] team0: Port device team_slave_1 added [ 252.726022][ T5833] Bluetooth: hci7: command tx timeout [ 252.855193][T11288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.871300][T11288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.918414][T11288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.934545][T11288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.942260][T11288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.980172][T11288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.000167][T11383] IPv6: Can't replace route, no match found [ 253.160537][T11386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1356'. [ 253.170284][T11386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1356'. [ 253.180393][T11386] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1356'. [ 253.193796][T11386] nbd: socks must be embedded in a SOCK_ITEM attr [ 253.581844][T11403] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1361'. [ 253.707447][T11411] Cannot find add_set index 4 as target [ 253.824018][T11288] hsr_slave_0: entered promiscuous mode [ 253.848456][T11288] hsr_slave_1: entered promiscuous mode [ 253.868456][T11288] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.887133][T11288] Cannot create hsr debugfs directory [ 254.057143][T11430] ipvlan2: entered promiscuous mode [ 254.062522][T11430] ipvlan2: entered allmulticast mode [ 254.068113][T11430] macvlan0: entered allmulticast mode [ 254.069988][T11435] netlink: 'syz.3.1369': attribute type 1 has an invalid length. [ 254.073688][T11430] veth1_vlan: entered allmulticast mode [ 254.218487][T11435] bond6: entered promiscuous mode [ 254.224725][T11435] 8021q: adding VLAN 0 to HW filter on device bond6 [ 254.245435][T11437] batadv2: entered promiscuous mode [ 254.253114][T11437] batadv2: entered allmulticast mode [ 254.261506][T11437] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 254.271426][T11437] bond6: (slave batadv2): making interface the new active one [ 254.281120][T11437] bond6: (slave batadv2): Enslaving as an active interface with an up link [ 254.511879][T11446] veth0_to_bond: entered promiscuous mode [ 254.807093][ T5833] Bluetooth: hci7: command tx timeout [ 254.853898][T11455] macsec0: left promiscuous mode [ 254.871633][T11458] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 254.879783][T11458] macsec0: left allmulticast mode [ 254.884870][T11458] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 254.998734][T11458] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 255.138085][T11474] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 255.232955][T11474] vxcan3: entered allmulticast mode [ 255.340067][T11477] __nla_validate_parse: 6 callbacks suppressed [ 255.340088][T11477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1378'. [ 255.381327][T11445] veth0_to_bond: left promiscuous mode [ 255.593749][T11487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1380'. [ 255.627129][T11488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1379'. [ 255.719298][ T5844] hid-generic 0005:0458:0A0B.0001: item fetching failed at offset 1/28 [ 255.809838][ T5844] hid-generic 0005:0458:0A0B.0001: probe with driver hid-generic failed with error -22 [ 256.145318][T11288] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 256.260060][T11497] tun0: tun_chr_ioctl cmd 1074812117 [ 256.265501][T11288] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 256.298688][T11288] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 256.323192][T11288] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 256.687313][T11288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.749019][T11508] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1385'. [ 256.749835][T11288] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.795637][ T3414] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.803028][ T3414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.854824][ T7830] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.862094][ T7830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.892162][ T5833] Bluetooth: hci7: command tx timeout [ 257.122941][ T30] audit: type=1107 audit(1747467364.248:8): pid=11519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1' [ 257.310328][T11528] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1391'. [ 257.432217][T11534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1391'. [ 257.749982][T11542] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1394'. [ 257.881278][T11542] geneve2: entered promiscuous mode [ 257.886851][T11542] geneve2: entered allmulticast mode [ 257.969189][T11288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.121662][T11553] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.1396'. [ 258.261797][T11555] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1399'. [ 258.274240][T11549] ipt_REJECT: TCP_RESET invalid for non-tcp [ 258.325396][T11563] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1399'. [ 258.733742][T11572] lo: entered allmulticast mode [ 258.739441][T11572] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 258.968883][ T5833] Bluetooth: hci7: command tx timeout [ 259.256380][T11598] gretap0: entered promiscuous mode [ 259.264540][T11598] gretap0: left promiscuous mode [ 259.575363][T11288] veth0_vlan: entered promiscuous mode [ 259.610941][T11288] veth1_vlan: entered promiscuous mode [ 259.643954][T11614] netlink: 'syz.3.1415': attribute type 12 has an invalid length. [ 259.692020][T11614] lo speed is unknown, defaulting to 1000 [ 259.708544][T11614] lo speed is unknown, defaulting to 1000 [ 259.728812][T11614] lo speed is unknown, defaulting to 1000 [ 259.807435][T11288] veth0_macvtap: entered promiscuous mode [ 259.825151][T11614] infiniband s›z0: RDMA CMA: cma_listen_on_dev, error -98 [ 259.833679][T11288] veth1_macvtap: entered promiscuous mode [ 259.912640][T11288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.938217][T11614] lo speed is unknown, defaulting to 1000 [ 259.950595][T11288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.971278][T11614] lo speed is unknown, defaulting to 1000 [ 259.987315][T11288] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.998307][T11288] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.013345][T11288] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.028668][T11288] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.051541][T11614] lo speed is unknown, defaulting to 1000 [ 260.069487][T11614] lo speed is unknown, defaulting to 1000 [ 260.105023][T11614] lo speed is unknown, defaulting to 1000 [ 260.139793][T11614] lo speed is unknown, defaulting to 1000 [ 260.153224][T11614] lo speed is unknown, defaulting to 1000 [ 260.192685][T11614] lo speed is unknown, defaulting to 1000 [ 260.272202][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.298275][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.452278][ T7842] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.477638][ T7842] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.508020][T11619] __nla_validate_parse: 6 callbacks suppressed [ 260.508039][T11619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1418'. [ 260.524290][T11622] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1419'. [ 260.649879][T11619] hsr_slave_0: left promiscuous mode [ 260.667079][T11619] hsr_slave_1: left promiscuous mode [ 260.853780][T11626] lo speed is unknown, defaulting to 1000 [ 260.867358][ T5839] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 260.880166][ T5839] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 260.891100][ T5839] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 260.900201][ T5839] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 260.911541][ T5839] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 261.111403][T11629] lo speed is unknown, defaulting to 1000 [ 261.909482][T11664] dvmrp8: entered allmulticast mode [ 261.995974][T11652] dvmrp8: left allmulticast mode [ 262.207815][T11669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1428'. [ 262.299557][T11668] batadv_slave_0: entered promiscuous mode [ 262.448145][T11665] batadv_slave_0: left promiscuous mode [ 262.537040][T11678] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002 [ 262.562920][T11629] chnl_net:caif_netlink_parms(): no params data found [ 262.619658][T11680] macvtap1: entered allmulticast mode [ 262.625109][T11680] veth0_macvtap: entered allmulticast mode [ 262.649865][T11681] IPv6: syztnl0: Disabled Multicast RS [ 262.870921][T11697] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1436'. [ 262.966794][ T5833] Bluetooth: hci6: command tx timeout [ 263.053740][T11629] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.065917][T11629] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.083726][T11629] bridge_slave_0: entered allmulticast mode [ 263.107763][T11629] bridge_slave_0: entered promiscuous mode [ 263.128301][T11703] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1438'. [ 263.141111][T11629] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.156187][T11629] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.184931][T11629] bridge_slave_1: entered allmulticast mode [ 263.202128][T11629] bridge_slave_1: entered promiscuous mode [ 263.359536][T11629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.423958][T11713] sch_fq: defrate 117 ignored. [ 263.527464][T11629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.621804][T11709] syzkaller1: entered promiscuous mode [ 263.633954][T11709] syzkaller1: entered allmulticast mode [ 263.764440][T11629] team0: Port device team_slave_0 added [ 263.907330][T11629] team0: Port device team_slave_1 added [ 264.113930][T11629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.129301][T11629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.167307][T11739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1446'. [ 264.202213][T11629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.234899][T11728] lo speed is unknown, defaulting to 1000 [ 264.338936][T11629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.386391][T11629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.455846][T11629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.894880][T11629] hsr_slave_0: entered promiscuous mode [ 264.928800][T11629] hsr_slave_1: entered promiscuous mode [ 264.935275][T11629] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.967455][T11629] Cannot create hsr debugfs directory [ 265.047323][ T5833] Bluetooth: hci6: command tx timeout [ 265.157896][T11762] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1452'. [ 265.721059][T11629] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.909839][T11629] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.073056][T11629] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.291877][T11629] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.422834][T11790] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1459'. [ 266.755565][T11629] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 266.809472][T11799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1464'. [ 266.814579][T11629] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 266.826662][T11799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1464'. [ 266.849379][T11629] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 266.856544][T11800] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 266.901610][T11629] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 267.031775][T11806] Bluetooth: MGMT ver 1.23 [ 267.106146][T11810] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1467'. [ 267.127450][ T5833] Bluetooth: hci6: command tx timeout [ 267.198252][T11629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.245639][T11629] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.320161][ T7834] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.327407][ T7834] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.389955][ T7834] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.397210][ T7834] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.482147][T11815] lo speed is unknown, defaulting to 1000 [ 267.516619][T11821] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1470'. [ 267.952558][T11829] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1471'. [ 268.296521][T11835] netlink: 'syz.7.1471': attribute type 7 has an invalid length. [ 268.304717][T11835] netlink: 'syz.7.1471': attribute type 7 has an invalid length. [ 268.327977][T11835] netlink: 'syz.7.1471': attribute type 5 has an invalid length. [ 268.371009][T11837] pimreg: entered allmulticast mode [ 268.439928][T11838] 8021q: VLANs not supported on pimreg [ 268.477469][T11845] netlink: 'syz.3.1474': attribute type 1 has an invalid length. [ 268.497535][T11845] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1474'. [ 268.500629][T11629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.672238][T11840] lo speed is unknown, defaulting to 1000 [ 269.125411][T11868] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 269.176038][T11868] netlink: 84 bytes leftover after parsing attributes in process `syz.7.1481'. [ 269.205823][ T5833] Bluetooth: hci6: command tx timeout [ 269.443032][T11629] veth0_vlan: entered promiscuous mode [ 269.496701][T11629] veth1_vlan: entered promiscuous mode [ 269.611016][T11629] veth0_macvtap: entered promiscuous mode [ 269.686947][T11884] 8021q: adding VLAN 0 to HW filter on device bond7 [ 269.697861][T11629] veth1_macvtap: entered promiscuous mode [ 269.904501][T11889] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1485'. [ 269.987525][T11629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.070222][T11629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.103147][T11629] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.135353][T11629] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.158991][T11629] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.174779][T11629] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.578364][ T7844] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.598987][ T7844] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.610175][T11913] trusted_key: syz.1.1490 sent an empty control message without MSG_MORE. [ 270.655554][ T7832] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.664873][ T7832] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.928406][T11922] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1494'. [ 271.000560][T11926] netlink: 'syz.0.1493': attribute type 10 has an invalid length. [ 271.024174][T11923] bond0: (slave batadv0): Releasing backup interface [ 271.043904][T11923] bond0: (slave batadv0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:2a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 271.191374][T11923] bond3: (slave ip6gre2): Releasing backup interface [ 271.200084][ T7603] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 271.217568][T11923] ip6gre2: left promiscuous mode [ 271.230640][T11923] bond0: (slave bond4): Releasing backup interface [ 271.354589][T11926] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 271.630247][ T7832] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.641691][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 271.860463][ T7832] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.924599][T11936] macvlan2: entered promiscuous mode [ 271.939957][T11936] macvlan2: entered allmulticast mode [ 272.214159][ T7832] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.296950][T11958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1505'. [ 272.365790][T11958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1505'. [ 272.381282][T11960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1506'. [ 272.394222][T11962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1505'. [ 272.488188][T11966] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1506'. [ 272.618703][ T5839] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 272.639102][ T5839] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 272.647500][ T7832] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.664691][ T5839] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 272.679502][ T5839] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 272.690678][ T5839] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 272.833425][T11979] lo speed is unknown, defaulting to 1000 [ 273.181385][T11978] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 273.376977][T12006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 273.496995][ T7832] bridge_slave_1: left allmulticast mode [ 273.514489][ T7832] bridge_slave_1: left promiscuous mode [ 273.530335][ T7832] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.574441][ T7832] bridge_slave_0: left allmulticast mode [ 273.597825][ T7832] bridge_slave_0: left promiscuous mode [ 273.615298][ T7832] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.620528][T12020] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1520'. [ 273.647020][T12020] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1520'. [ 273.816493][T12030] xt_hashlimit: size too large, truncated to 1048576 [ 274.224511][T12038] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1523'. [ 274.643928][T12031] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1518'. [ 274.730567][ T5833] Bluetooth: hci6: command tx timeout [ 274.883897][ T7832] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.904234][ T7832] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.915167][ T7832] bond0 (unregistering): Released all slaves [ 274.932102][T12025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1521'. [ 275.447172][T12062] ªªªªªª: renamed from lo [ 275.531870][T12053] lo speed is unknown, defaulting to 1000 [ 275.777665][T12078] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 275.871774][T12078] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 275.895349][T12078] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 276.058432][ T7832] hsr_slave_0: left promiscuous mode [ 276.243007][ T7832] hsr_slave_1: left promiscuous mode [ 276.269675][ T7832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.296387][ T7832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.321121][ T7832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.337269][ T7832] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.411651][ T7832] veth1_macvtap: left promiscuous mode [ 276.433996][ T7832] veth0_macvtap: left promiscuous mode [ 276.445043][ T7832] veth1_vlan: left promiscuous mode [ 276.454874][ T7832] veth0_vlan: left promiscuous mode [ 276.816889][ T5839] Bluetooth: hci6: command tx timeout [ 277.323939][ T7832] team0 (unregistering): Port device team_slave_1 removed [ 277.381906][ T7832] team0 (unregistering): Port device team_slave_0 removed [ 277.863521][T11979] chnl_net:caif_netlink_parms(): no params data found [ 277.896884][T12088] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 278.108431][T12099] __nla_validate_parse: 4 callbacks suppressed [ 278.108452][T12099] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1537'. [ 278.165921][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 278.222714][T12096] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 278.272616][T12100] pim6reg: entered allmulticast mode [ 278.297214][T12103] pim6reg: left allmulticast mode [ 278.394263][T12109] FAULT_INJECTION: forcing a failure. [ 278.394263][T12109] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.421204][T12109] CPU: 1 UID: 0 PID: 12109 Comm: syz.7.1540 Not tainted 6.15.0-rc6-syzkaller-01183-g894fbb55e60c #0 PREEMPT(full) [ 278.421237][T12109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 278.421251][T12109] Call Trace: [ 278.421259][T12109] [ 278.421269][T12109] dump_stack_lvl+0x189/0x250 [ 278.421304][T12109] ? __lock_acquire+0xaac/0xd20 [ 278.421339][T12109] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.421370][T12109] ? __pfx__printk+0x10/0x10 [ 278.421392][T12109] ? __might_fault+0xb0/0x130 [ 278.421434][T12109] should_fail_ex+0x414/0x560 [ 278.421463][T12109] _copy_from_user+0x2d/0xb0 [ 278.421496][T12109] ___sys_sendmsg+0x158/0x2a0 [ 278.421532][T12109] ? __pfx____sys_sendmsg+0x10/0x10 [ 278.421606][T12109] ? __fget_files+0x2a/0x420 [ 278.421634][T12109] ? __fget_files+0x3a0/0x420 [ 278.421676][T12109] __x64_sys_sendmsg+0x19b/0x260 [ 278.421711][T12109] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 278.421770][T12109] ? do_syscall_64+0xba/0x210 [ 278.421800][T12109] do_syscall_64+0xf6/0x210 [ 278.421826][T12109] ? clear_bhb_loop+0x60/0xb0 [ 278.421853][T12109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.421874][T12109] RIP: 0033:0x7f15fd78e969 [ 278.421893][T12109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.421912][T12109] RSP: 002b:00007f15fe577038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.421934][T12109] RAX: ffffffffffffffda RBX: 00007f15fd9b5fa0 RCX: 00007f15fd78e969 [ 278.421950][T12109] RDX: 0000000020000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 278.421964][T12109] RBP: 00007f15fe577090 R08: 0000000000000000 R09: 0000000000000000 [ 278.421977][T12109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.421989][T12109] R13: 0000000000000000 R14: 00007f15fd9b5fa0 R15: 00007ffec01683a8 [ 278.422024][T12109] [ 278.687219][T12113] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1541'. [ 278.714351][T12115] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0 [ 278.756049][T12110] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) ! [ 278.886570][ T5833] Bluetooth: hci6: command tx timeout [ 278.921625][T12118] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.932051][T12118] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.941521][T12118] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.950484][T12118] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.968018][T12118] team0: Port device vxlan0 added [ 278.979526][T11979] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.995863][T11979] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.003205][T11979] bridge_slave_0: entered allmulticast mode [ 279.027841][T11979] bridge_slave_0: entered promiscuous mode [ 279.048381][T11979] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.055550][T11979] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.069891][T12110] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1541'. [ 279.079275][T11979] bridge_slave_1: entered allmulticast mode [ 279.114153][T11979] bridge_slave_1: entered promiscuous mode [ 279.214834][T11979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.241501][T11979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.327455][T12127] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1545'. [ 279.395402][T12129] netlink: 288 bytes leftover after parsing attributes in process `syz.0.1545'. [ 279.421887][T11979] team0: Port device team_slave_0 added [ 279.451088][T11979] team0: Port device team_slave_1 added [ 279.620899][T12133] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1544'. [ 279.656955][T11979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.669080][T11979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.702495][T12136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1546'. [ 279.717972][T11979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.753114][T11979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.768506][T11979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.816302][T12141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.837134][T12141] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1547'. [ 279.849124][T11979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.869101][ T7832] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.888681][ T7832] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.997557][T12145] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1548'. [ 280.060172][T11979] hsr_slave_0: entered promiscuous mode [ 280.076324][T11979] hsr_slave_1: entered promiscuous mode [ 280.094438][T11979] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 280.102770][T11979] Cannot create hsr debugfs directory [ 280.291205][T12150] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1549'. [ 280.673405][T12160] FAULT_INJECTION: forcing a failure. [ 280.673405][T12160] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 280.697812][T12154] syz.7.1550 uses old SIOCAX25GETINFO [ 280.711756][T12160] CPU: 0 UID: 0 PID: 12160 Comm: syz.3.1552 Not tainted 6.15.0-rc6-syzkaller-01183-g894fbb55e60c #0 PREEMPT(full) [ 280.711790][T12160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 280.711804][T12160] Call Trace: [ 280.711812][T12160] [ 280.711822][T12160] dump_stack_lvl+0x189/0x250 [ 280.711863][T12160] ? __pfx_dump_stack_lvl+0x10/0x10 [ 280.711895][T12160] ? __pfx__printk+0x10/0x10 [ 280.711933][T12160] should_fail_ex+0x414/0x560 [ 280.711964][T12160] _copy_from_user+0x2d/0xb0 [ 280.711997][T12160] __copy_msghdr+0x3c5/0x5b0 [ 280.712032][T12160] ___sys_sendmsg+0x1a5/0x2a0 [ 280.712068][T12160] ? __pfx____sys_sendmsg+0x10/0x10 [ 280.712139][T12160] ? __fget_files+0x2a/0x420 [ 280.712168][T12160] ? __fget_files+0x3a0/0x420 [ 280.712209][T12160] __x64_sys_sendmsg+0x19b/0x260 [ 280.712275][T12160] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 280.712328][T12160] ? do_syscall_64+0xba/0x210 [ 280.712358][T12160] do_syscall_64+0xf6/0x210 [ 280.712384][T12160] ? clear_bhb_loop+0x60/0xb0 [ 280.712411][T12160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.712432][T12160] RIP: 0033:0x7fd09458e969 [ 280.712450][T12160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.712469][T12160] RSP: 002b:00007fd0953ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 280.712491][T12160] RAX: ffffffffffffffda RBX: 00007fd0947b5fa0 RCX: 00007fd09458e969 [ 280.712507][T12160] RDX: 0000000020000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 280.712522][T12160] RBP: 00007fd0953ef090 R08: 0000000000000000 R09: 0000000000000000 [ 280.712535][T12160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.712547][T12160] R13: 0000000000000000 R14: 00007fd0947b5fa0 R15: 00007ffde73afb28 [ 280.712581][T12160] [ 280.966666][ T5833] Bluetooth: hci6: command tx timeout [ 281.392991][T11979] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 281.426993][T11979] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 281.504620][T11979] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 281.561162][T12186] netlink: 'syz.7.1561': attribute type 4 has an invalid length. [ 281.567960][T11979] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 281.613463][T12191] netlink: 'syz.7.1561': attribute type 4 has an invalid length. [ 281.621561][T12177] lo speed is unknown, defaulting to 1000 [ 282.120838][T12202] FAULT_INJECTION: forcing a failure. [ 282.120838][T12202] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.200281][T11979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.224576][T11979] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.242431][T12202] CPU: 0 UID: 0 PID: 12202 Comm: syz.0.1565 Not tainted 6.15.0-rc6-syzkaller-01183-g894fbb55e60c #0 PREEMPT(full) [ 282.242464][T12202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 282.242477][T12202] Call Trace: [ 282.242485][T12202] [ 282.242494][T12202] dump_stack_lvl+0x189/0x250 [ 282.242529][T12202] ? __lock_acquire+0xaac/0xd20 [ 282.242562][T12202] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.242593][T12202] ? __pfx__printk+0x10/0x10 [ 282.242615][T12202] ? __might_fault+0xb0/0x130 [ 282.242655][T12202] should_fail_ex+0x414/0x560 [ 282.242684][T12202] _copy_from_iter+0x3f5/0x15a0 [ 282.242725][T12202] ? __pfx__copy_from_iter+0x10/0x10 [ 282.242757][T12202] ? dev_get_by_index+0x22/0x2e0 [ 282.242779][T12202] ? dev_get_by_index+0x22/0x2e0 [ 282.242807][T12202] packet_sendmsg+0x3296/0x5330 [ 282.242835][T12202] ? __lock_acquire+0xaac/0xd20 [ 282.242890][T12202] ? __pfx___might_resched+0x10/0x10 [ 282.242929][T12202] ? __pfx_packet_sendmsg+0x10/0x10 [ 282.242945][T12202] ? aa_sk_perm+0x81e/0x950 [ 282.242975][T12202] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 282.243010][T12202] ? aa_sock_msg_perm+0x94/0x160 [ 282.243034][T12202] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 282.243058][T12202] ? __pfx_packet_sendmsg+0x10/0x10 [ 282.243077][T12202] __sock_sendmsg+0x21c/0x270 [ 282.243102][T12202] ____sys_sendmsg+0x505/0x830 [ 282.243138][T12202] ? __pfx_____sys_sendmsg+0x10/0x10 [ 282.243189][T12202] ? import_iovec+0x74/0xa0 [ 282.243222][T12202] ___sys_sendmsg+0x21f/0x2a0 [ 282.243254][T12202] ? __pfx____sys_sendmsg+0x10/0x10 [ 282.243322][T12202] ? __fget_files+0x2a/0x420 [ 282.243349][T12202] ? __fget_files+0x3a0/0x420 [ 282.243387][T12202] __x64_sys_sendmsg+0x19b/0x260 [ 282.243419][T12202] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 282.243468][T12202] ? do_syscall_64+0xba/0x210 [ 282.243496][T12202] do_syscall_64+0xf6/0x210 [ 282.243519][T12202] ? clear_bhb_loop+0x60/0xb0 [ 282.243544][T12202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.243563][T12202] RIP: 0033:0x7f48e618e969 [ 282.243582][T12202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.243599][T12202] RSP: 002b:00007f48e70ce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.243620][T12202] RAX: ffffffffffffffda RBX: 00007f48e63b5fa0 RCX: 00007f48e618e969 [ 282.243636][T12202] RDX: 0000000020000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 282.243649][T12202] RBP: 00007f48e70ce090 R08: 0000000000000000 R09: 0000000000000000 [ 282.243661][T12202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.243672][T12202] R13: 0000000000000000 R14: 00007f48e63b5fa0 R15: 00007ffd8cf0e6d8 [ 282.243703][T12202] [ 282.266430][ T7832] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.523141][ T7832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.628476][ T7830] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.635819][ T7830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.864413][T12218] tipc: Started in network mode [ 282.877185][T12218] tipc: Node identity , cluster identity 4711 [ 283.360903][T12239] __nla_validate_parse: 2 callbacks suppressed [ 283.360925][T12239] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1576'. [ 283.422115][T12239] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1576'. [ 283.492574][T12244] netlink: 'syz.0.1575': attribute type 4 has an invalid length. [ 283.528057][T12248] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1575'. [ 283.573513][T12242] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1576'. [ 283.735239][T11979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.776243][T12256] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1577'. [ 283.881065][T12256] bond8 (unregistering): Released all slaves [ 284.345370][T12271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1583'. [ 284.850306][T11979] veth0_vlan: entered promiscuous mode [ 284.902897][T11979] veth1_vlan: entered promiscuous mode [ 285.023766][T11979] veth0_macvtap: entered promiscuous mode [ 285.075241][T11979] veth1_macvtap: entered promiscuous mode [ 285.146449][T12298] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1588'. [ 285.183232][T11979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.268166][T11979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.301529][T11979] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.355740][T11979] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.395095][T11979] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.425920][T11979] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.954583][T12316] team0 (unregistering): Port device team_slave_0 removed [ 285.983562][T12316] team0 (unregistering): Port device team_slave_1 removed [ 286.007182][T12316] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.016648][T12316] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.025540][T12316] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.034481][T12316] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.055439][T12316] team0 (unregistering): Port device vxlan0 removed [ 286.241135][ T7844] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.256134][ T7844] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.318853][ T7834] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.328267][ T7834] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.485470][T12336] netlink: 1708 bytes leftover after parsing attributes in process `syz.3.1596'. [ 286.781336][ T7844] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.934124][ T7844] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.027050][ T7844] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.207366][ T7844] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.295472][T12356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1601'. [ 287.336118][T12356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1601'. [ 287.877025][ T7844] bridge_slave_1: left allmulticast mode [ 287.882744][ T7844] bridge_slave_1: left promiscuous mode [ 287.895933][ T7844] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.918281][ T7844] bridge_slave_0: left allmulticast mode [ 287.923983][ T7844] bridge_slave_0: left promiscuous mode [ 287.958210][ T7844] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.988360][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 287.997915][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 288.009711][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 288.033261][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 288.052204][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 288.604939][T12397] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1614'. [ 288.777125][T12390] netlink: 'syz.0.1612': attribute type 10 has an invalid length. [ 288.785236][T12390] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1612'. [ 288.890269][ T5839] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 288.908589][ T5839] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 288.927855][ T5839] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 288.948127][ T5839] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 288.975435][ T5839] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 289.068377][ T7844] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.080206][ T7844] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.092263][ T7844] bond0 (unregistering): Released all slaves [ 289.162780][T12390] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.183217][T12390] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.195879][T12390] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.204827][T12390] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.230609][T12390] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 289.366431][T12407] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 289.407530][T12407] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5) [ 289.495583][T12411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1616'. [ 289.588933][T12372] lo speed is unknown, defaulting to 1000 [ 289.697648][T12413] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 289.736176][T12402] lo speed is unknown, defaulting to 1000 [ 289.811243][ T7844] hsr_slave_0: left promiscuous mode [ 289.825298][ T7844] hsr_slave_1: left promiscuous mode [ 289.836566][ T7844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.855546][ T7844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.868373][ T7844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.877859][ T7844] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.892909][T12425] xt_hashlimit: max too large, truncated to 1048576 [ 289.937589][T12425] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1618'. [ 289.938952][ T7844] veth1_macvtap: left promiscuous mode [ 289.956775][ T7844] veth0_macvtap: left promiscuous mode [ 289.962499][ T7844] veth1_vlan: left promiscuous mode [ 289.974131][ T7844] veth0_vlan: left promiscuous mode [ 290.085987][ T5839] Bluetooth: hci1: command tx timeout [ 290.917124][ T7844] team0 (unregistering): Port device team_slave_1 removed [ 290.966206][ T7844] team0 (unregistering): Port device team_slave_0 removed [ 291.045968][ T5839] Bluetooth: hci6: command tx timeout [ 291.442062][T12424] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 291.589119][T12430] netlink: 'syz.0.1620': attribute type 16 has an invalid length. [ 291.623750][T12430] netlink: 'syz.0.1620': attribute type 17 has an invalid length. [ 291.763702][T12440] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1624'. [ 291.916390][ T7627] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 292.156751][T12450] mac80211_hwsim hwsim32 wlan1: entered allmulticast mode [ 292.165867][ T5839] Bluetooth: hci1: command tx timeout [ 292.195432][T12450] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 292.267854][T12457] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1628'. [ 292.376183][ T7627] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 292.473919][T12372] chnl_net:caif_netlink_parms(): no params data found [ 292.522529][T12465] netlink: 'syz.7.1630': attribute type 42 has an invalid length. [ 292.613353][T12402] chnl_net:caif_netlink_parms(): no params data found [ 292.655081][T12467] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1631'. [ 292.672508][T12465] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 292.716238][T12467] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1631'. [ 292.728127][T12467] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1631'. [ 292.737259][T12467] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1631'. [ 292.849028][T12372] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.864352][T12372] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.877880][T12372] bridge_slave_0: entered allmulticast mode [ 292.887326][T12372] bridge_slave_0: entered promiscuous mode [ 292.904235][T12372] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.911869][T12372] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.919564][T12372] bridge_slave_1: entered allmulticast mode [ 292.927886][T12372] bridge_slave_1: entered promiscuous mode [ 292.972028][T12478] xt_TPROXY: Can be used only with -p tcp or -p udp [ 292.998198][T12480] x_tables: duplicate underflow at hook 1 [ 293.034754][T12372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.098349][T12402] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.114816][T12402] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.122614][T12402] bridge_slave_0: entered allmulticast mode [ 293.129145][ T5839] Bluetooth: hci6: command tx timeout [ 293.147867][T12402] bridge_slave_0: entered promiscuous mode [ 293.170312][T12372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.299940][T12402] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.326268][T12402] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.337258][T12402] bridge_slave_1: entered allmulticast mode [ 293.345217][T12402] bridge_slave_1: entered promiscuous mode [ 293.392407][T12484] syzkaller1: entered promiscuous mode [ 293.412735][T12484] syzkaller1: entered allmulticast mode [ 293.443173][T12372] team0: Port device team_slave_0 added [ 293.487916][T12372] team0: Port device team_slave_1 added [ 293.594456][T12402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.622708][T12402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.644965][T12372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.664092][T12372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.664834][T12499] __nla_validate_parse: 2 callbacks suppressed [ 293.664852][T12499] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1637'. [ 293.707989][T12372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.726533][T12504] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1637'. [ 293.827667][T12372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.845340][T12372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.878447][T12372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.965653][T12402] team0: Port device team_slave_0 added [ 294.101204][T12402] team0: Port device team_slave_1 added [ 294.129664][T12372] hsr_slave_0: entered promiscuous mode [ 294.143778][T12372] hsr_slave_1: entered promiscuous mode [ 294.155413][T12372] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 294.174245][T12372] Cannot create hsr debugfs directory [ 294.245881][ T5839] Bluetooth: hci1: command tx timeout [ 294.326315][T12524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1642'. [ 294.404943][T12402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.413088][T12402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.439854][T12402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.462332][T12524] ip_vti0: entered promiscuous mode [ 294.480916][T12524] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1642'. [ 294.503506][T12402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.520783][T12402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.576264][T12402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.942857][T12402] hsr_slave_0: entered promiscuous mode [ 294.957142][T12402] hsr_slave_1: entered promiscuous mode [ 294.986248][T12402] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 294.993905][T12402] Cannot create hsr debugfs directory [ 295.074022][T12530] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1647'. [ 295.206176][ T5839] Bluetooth: hci6: command tx timeout [ 295.307264][T12539] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1649'. [ 295.611015][T12547] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1651'. [ 295.848753][T12551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1652'. [ 295.866720][T12552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1652'. [ 295.920147][T12550] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1652'. [ 296.187041][T12372] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 296.201878][T12372] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 296.203810][T12561] netlink: 'syz.0.1656': attribute type 1 has an invalid length. [ 296.269921][T12372] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 296.295111][T12372] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 296.325866][ T5839] Bluetooth: hci1: command tx timeout [ 296.885514][T12402] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 296.927111][T12402] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 296.979048][T12402] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 297.012054][T12402] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 297.055608][T12585] openvswitch: netlink: Flow key attr not present in new flow. [ 297.078334][T12372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.227578][T12372] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.272047][ T7844] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.279299][ T7844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.285879][ T5839] Bluetooth: hci6: command tx timeout [ 297.304099][T12591] x_tables: ip_tables: osf match: only valid for protocol 6 [ 297.327169][T12594] No such timeout policy "syz1" [ 297.345706][ T7832] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.352971][ T7832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.464089][T12402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.552428][T12402] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.598300][ T7834] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.605580][ T7834] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.680797][ T7830] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.688046][ T7830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.107776][T12372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.438209][T12628] lo speed is unknown, defaulting to 1000 [ 298.791518][T12402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.928773][T12402] veth0_vlan: entered promiscuous mode [ 298.941855][T12402] veth1_vlan: entered promiscuous mode [ 299.164732][T12372] veth0_vlan: entered promiscuous mode [ 299.229192][T12402] veth0_macvtap: entered promiscuous mode [ 299.258316][T12372] veth1_vlan: entered promiscuous mode [ 299.277417][T12402] veth1_macvtap: entered promiscuous mode [ 299.375029][T12402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.451679][T12656] __nla_validate_parse: 6 callbacks suppressed [ 299.451702][T12656] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1678'. [ 299.511886][T12372] veth0_macvtap: entered promiscuous mode [ 299.574920][T12402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.591139][T12402] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.619252][T12402] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.629597][T12402] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.638572][T12402] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.699753][T12660] x_tables: duplicate underflow at hook 2 [ 299.723079][T12372] veth1_macvtap: entered promiscuous mode [ 299.902903][T12372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.942966][T12372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.987154][T12671] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1682'. [ 300.028437][T12372] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.062121][T12372] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.097454][T12372] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.116053][T12372] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.148300][ T7837] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.173786][ T7837] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.221065][T12679] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1684'. [ 300.398787][ T3414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.425901][ T3414] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.556771][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.572874][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.748327][T12686] syzkaller0: entered allmulticast mode [ 300.782014][T12694] syzkaller0 (unregistering): left allmulticast mode [ 300.918330][ T3414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.947145][ T3414] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.031918][ T7842] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.204807][ T7842] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.506561][ T7842] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.848708][ T7842] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.882278][T12717] netlink: 256 bytes leftover after parsing attributes in process `syz.7.1694'. [ 301.963926][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 301.977956][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 301.987322][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 302.007197][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 302.016859][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 302.181432][ T7842] bridge_slave_1: left allmulticast mode [ 302.191760][ T7842] bridge_slave_1: left promiscuous mode [ 302.199225][ T7842] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.210557][ T7842] bridge_slave_0: left allmulticast mode [ 302.216734][ T7842] bridge_slave_0: left promiscuous mode [ 302.222475][ T7842] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.656049][T12724] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1696'. [ 302.681651][ T7842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.732150][ T7842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.782347][ T7842] bond0 (unregistering): Released all slaves [ 302.862226][T12718] lo speed is unknown, defaulting to 1000 [ 303.267084][T12748] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1700'. [ 303.559867][ T5833] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 303.593097][ T5833] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 303.603253][ T5833] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 303.626512][ T5833] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 303.634295][ T5833] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 303.722166][T12764] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1704'. [ 304.089951][ T5839] Bluetooth: hci1: command tx timeout [ 304.194109][ T7842] hsr_slave_0: left promiscuous mode [ 304.236694][ T7842] hsr_slave_1: left promiscuous mode [ 304.243320][ T7842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.266067][ T7842] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.286877][ T7842] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.294390][ T7842] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.352485][ T7842] veth1_macvtap: left promiscuous mode [ 304.366007][ T7842] veth0_macvtap: left promiscuous mode [ 304.371794][ T7842] veth1_vlan: left promiscuous mode [ 304.386055][ T7842] veth0_vlan: left promiscuous mode [ 305.354513][ T7842] team0 (unregistering): Port device team_slave_1 removed [ 305.402083][ T7842] team0 (unregistering): Port device team_slave_0 removed [ 305.686175][ T5839] Bluetooth: hci6: command tx timeout [ 305.844740][T12765] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1703'. [ 305.897022][T12778] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 306.091747][T12785] netlink: 'syz.7.1709': attribute type 1 has an invalid length. [ 306.129606][T12759] lo speed is unknown, defaulting to 1000 [ 306.144882][T12787] bridge0: entered promiscuous mode [ 306.157110][T12785] netlink: 228 bytes leftover after parsing attributes in process `syz.7.1709'. [ 306.158508][T12787] macvlan3: entered promiscuous mode [ 306.183359][ T5839] Bluetooth: hci1: command tx timeout [ 306.217781][T12787] bridge0: port 3(macvlan3) entered blocking state [ 306.237013][T12787] bridge0: port 3(macvlan3) entered disabled state [ 306.243952][T12787] macvlan3: entered allmulticast mode [ 306.250877][T12787] bridge0: entered allmulticast mode [ 306.268779][T12787] macvlan3: left allmulticast mode [ 306.273961][T12787] bridge0: left allmulticast mode [ 306.319019][T12787] bridge0: left promiscuous mode [ 306.493136][ T7844] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.501400][T12718] chnl_net:caif_netlink_parms(): no params data found [ 306.510648][ T7844] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.845487][T12813] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1716'. [ 306.871896][T12718] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.896309][T12718] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.919312][T12718] bridge_slave_0: entered allmulticast mode [ 306.945196][T12718] bridge_slave_0: entered promiscuous mode [ 306.954209][T12718] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.962595][T12718] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.976062][T12718] bridge_slave_1: entered allmulticast mode [ 306.994043][T12718] bridge_slave_1: entered promiscuous mode [ 307.099510][ T7842] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.133264][T12823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1719'. [ 307.401513][ T7842] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.460598][T12834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1724'. [ 307.474640][T12718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.520770][T12830] lo speed is unknown, defaulting to 1000 [ 307.575960][T12838] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1725'. [ 307.634959][ T7842] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.768072][ T5839] Bluetooth: hci6: command tx timeout [ 307.920711][T12718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.140806][T12718] team0: Port device team_slave_0 added [ 308.246886][ T5839] Bluetooth: hci1: command tx timeout [ 308.298831][ T7842] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.330011][T12867] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1727'. [ 308.331333][T12868] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1727'. [ 308.362691][T12718] team0: Port device team_slave_1 added [ 308.554476][T12874] netlink: 884 bytes leftover after parsing attributes in process `syz.0.1731'. [ 308.582576][T12718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.615606][T12718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.658929][T12718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.678544][T12759] chnl_net:caif_netlink_parms(): no params data found [ 308.733845][T12718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.741629][T12718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.757474][T12874] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1731'. [ 308.788223][T12718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.185248][T12718] hsr_slave_0: entered promiscuous mode [ 309.207080][T12718] hsr_slave_1: entered promiscuous mode [ 309.217559][T12718] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 309.225183][T12718] Cannot create hsr debugfs directory [ 309.365071][ T7842] bridge_slave_1: left allmulticast mode [ 309.373158][ T7842] bridge_slave_1: left promiscuous mode [ 309.381625][ T7842] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.392936][ T7842] bridge_slave_0: left allmulticast mode [ 309.399039][ T7842] bridge_slave_0: left promiscuous mode [ 309.404867][ T7842] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.848516][ T5839] Bluetooth: hci6: command tx timeout [ 309.917007][ T7842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.929432][ T7842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.940496][ T7842] bond0 (unregistering): Released all slaves [ 309.967213][T12904] (unnamed net_device) (uninitialized): option mode: invalid value (16) [ 310.024220][T12907] tc_dump_action: action bad kind [ 310.292041][T12759] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.305900][T12759] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.316585][T12759] bridge_slave_0: entered allmulticast mode [ 310.324668][T12759] bridge_slave_0: entered promiscuous mode [ 310.335887][ T5839] Bluetooth: hci1: command tx timeout [ 310.458462][T12759] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.484437][T12759] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.492991][T12759] bridge_slave_1: entered allmulticast mode [ 310.512060][T12759] bridge_slave_1: entered promiscuous mode [ 310.839775][T12759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.879289][T12759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.924846][ T7842] hsr_slave_0: left promiscuous mode [ 310.952139][ T7842] hsr_slave_1: left promiscuous mode [ 310.970202][ T7842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.992612][ T7842] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.015544][ T7842] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.047655][ T7842] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.158255][ T7842] veth1_macvtap: left promiscuous mode [ 311.163872][ T7842] veth0_macvtap: left promiscuous mode [ 311.184699][ T7842] veth1_vlan: left promiscuous mode [ 311.201155][ T7842] veth0_vlan: left promiscuous mode [ 311.929410][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 311.935974][ T5833] Bluetooth: hci6: command tx timeout [ 312.143982][ T7842] team0 (unregistering): Port device team_slave_1 removed [ 312.232530][ T7842] team0 (unregistering): Port device team_slave_0 removed [ 312.871998][T12968] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 313.049209][T12759] team0: Port device team_slave_0 added [ 313.096243][T12759] team0: Port device team_slave_1 added [ 313.375158][T12759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.384647][T12759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.669449][T13007] __nla_validate_parse: 3 callbacks suppressed [ 313.669471][T13007] netlink: 156 bytes leftover after parsing attributes in process `syz.7.1759'. [ 313.874434][T12759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.922134][T12759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.943639][T12759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.006691][ T5833] Bluetooth: hci6: command 0x0405 tx timeout [ 314.015371][T12759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.088144][T13001] batadv_slave_0: entered promiscuous mode [ 314.132144][T13000] batadv_slave_0: left promiscuous mode [ 314.312265][T13016] bridge0: port 1(erspan0) entered blocking state [ 314.321943][T13016] bridge0: port 1(erspan0) entered disabled state [ 314.359804][T13016] erspan0: entered allmulticast mode [ 314.397414][T13016] erspan0: entered promiscuous mode [ 314.411305][T13024] erspan0: left allmulticast mode [ 314.417560][T13024] erspan0: left promiscuous mode [ 314.422860][T13024] bridge0: port 1(erspan0) entered disabled state [ 314.474779][T12759] hsr_slave_0: entered promiscuous mode [ 314.484693][T12759] hsr_slave_1: entered promiscuous mode [ 314.502318][T12759] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 314.516305][T12759] Cannot create hsr debugfs directory [ 314.892995][T13048] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1768'. [ 315.134052][T13054] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1771'. [ 315.201429][T13059] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1772'. [ 315.384948][T12718] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 315.412645][T12718] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 315.501375][T12718] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 315.528449][T13068] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1774'. [ 315.545161][T13068] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1774'. [ 315.604383][T12718] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 315.632366][T13073] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1776'. [ 315.662682][T13073] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 315.671867][T13073] macvtap1: entered allmulticast mode [ 315.683674][T13073] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 315.756918][T13071] xt_hashlimit: size too large, truncated to 1048576 [ 315.770168][T13076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1777'. [ 315.881710][T13078] IPVS: set_ctl: invalid protocol: 50 172.20.20.15:20000 [ 316.202378][T12718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.294298][T12718] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.316154][ T7848] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.323396][ T7848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.394367][ T7830] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.401611][ T7830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.486331][T13092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1780'. [ 316.506988][T12759] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 316.585755][T12759] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 316.612929][T12759] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 316.676077][T12759] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 316.688285][T13098] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1782'. [ 316.875507][T13103] netlink: 'syz.1.1785': attribute type 14 has an invalid length. [ 316.901562][T13103] netlink: 'syz.1.1785': attribute type 12 has an invalid length. [ 317.055632][T13105] lo speed is unknown, defaulting to 1000 [ 317.095454][T12759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.357916][T13114] lo speed is unknown, defaulting to 1000 [ 317.369182][T12718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.452261][T13120] netlink: 'syz.0.1787': attribute type 5 has an invalid length. [ 317.473143][T12759] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.567474][ T7842] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.574714][ T7842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.680039][ T7834] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.687284][ T7834] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.907317][T13124] pimreg: entered allmulticast mode [ 318.021038][T12718] veth0_vlan: entered promiscuous mode [ 318.050253][ T7610] IPVS: starting estimator thread 0... [ 318.084942][T13135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 318.094915][T12759] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 318.130053][T12718] veth1_vlan: entered promiscuous mode [ 318.159819][T13136] IPVS: using max 25 ests per chain, 60000 per kthread [ 318.315619][T12718] veth0_macvtap: entered promiscuous mode [ 318.365182][T12718] veth1_macvtap: entered promiscuous mode [ 318.384730][T13143] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 318.412186][T13143] wg2: entered promiscuous mode [ 318.455035][T12718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.483174][T12718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.501900][T12718] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.526676][T12718] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.535446][T12718] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.563053][T12718] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.682234][T12759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.811687][T13158] __nla_validate_parse: 4 callbacks suppressed [ 318.811707][T13158] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1796'. [ 318.847699][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.855590][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.975528][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.006275][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.486753][T13183] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1803'. [ 319.614801][ T9] hid-generic 0005:15C2:0A0E.0002: unknown main item tag 0x0 [ 319.650131][ T9] hid-generic 0005:15C2:0A0E.0002: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 319.691237][T13188] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 35287 - 0 [ 319.726069][T13188] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 35287 - 0 [ 319.773063][T13188] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 35287 - 0 [ 319.795807][T13188] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 35287 - 0 [ 319.866311][T13188] netdevsim netdevsim7 netdevsim0: set [1, 2] type 2 family 0 port 37123 - 0 [ 319.875248][T13188] netdevsim netdevsim7 netdevsim1: set [1, 2] type 2 family 0 port 37123 - 0 [ 319.900671][T13206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1807'. [ 319.905807][T13188] netdevsim netdevsim7 netdevsim2: set [1, 2] type 2 family 0 port 37123 - 0 [ 319.945873][T13188] netdevsim netdevsim7 netdevsim3: set [1, 2] type 2 family 0 port 37123 - 0 [ 319.954970][T13188] geneve3: entered promiscuous mode [ 319.985817][T13188] geneve3: entered allmulticast mode [ 320.064522][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.175448][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.241189][T12759] veth0_vlan: entered promiscuous mode [ 320.290933][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.354085][T12759] veth1_vlan: entered promiscuous mode [ 320.540848][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.585696][T13222] netlink: 'syz.1.1811': attribute type 29 has an invalid length. [ 320.593583][T13222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1811'. [ 320.681834][T12759] veth0_macvtap: entered promiscuous mode [ 320.728654][T12759] veth1_macvtap: entered promiscuous mode [ 320.872519][T13226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1813'. [ 320.882071][T12759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.906247][ T36] bridge_slave_1: left allmulticast mode [ 320.912973][ T36] bridge_slave_1: left promiscuous mode [ 320.936165][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.958420][ T36] bridge_slave_0: left allmulticast mode [ 320.964519][ T36] bridge_slave_0: left promiscuous mode [ 320.991472][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.008305][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 321.018502][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 321.026810][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 321.037342][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 321.046968][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 321.338463][T13238] netlink: 'syz.7.1815': attribute type 15 has an invalid length. [ 321.713966][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.730893][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.748817][ T36] bond0 (unregistering): Released all slaves [ 321.782432][T12759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.861378][T12759] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.880812][T12759] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.899884][T12759] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.908888][T12759] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.064029][T13253] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1819'. [ 322.102758][T13254] ip6t_srh: unknown srh match flags 5294 [ 322.142812][T13228] lo speed is unknown, defaulting to 1000 [ 322.412835][ T36] hsr_slave_0: left promiscuous mode [ 322.428418][ T36] hsr_slave_1: left promiscuous mode [ 322.444066][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.453738][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.466180][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.473823][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.522240][ T36] veth1_macvtap: left promiscuous mode [ 322.528658][ T36] veth0_macvtap: left promiscuous mode [ 322.534288][ T36] veth1_vlan: left promiscuous mode [ 322.539968][ T36] veth0_vlan: left promiscuous mode [ 322.751421][T13266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1824'. [ 322.926084][T13271] x_tables: duplicate underflow at hook 3 [ 323.133808][ T5839] Bluetooth: hci1: command tx timeout [ 323.348792][ T36] team0 (unregistering): Port device team_slave_1 removed [ 323.402681][ T36] team0 (unregistering): Port device team_slave_0 removed [ 323.940013][T13263] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 323.994221][ T7844] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.024464][ T7844] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.215886][ T7848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.246337][ T7848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.470548][T13296] SET target dimension over the limit! [ 324.704083][T13228] chnl_net:caif_netlink_parms(): no params data found [ 325.180725][ T36] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.206668][ T5839] Bluetooth: hci1: command tx timeout [ 325.239545][T13228] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.247725][T13228] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.255164][T13228] bridge_slave_0: entered allmulticast mode [ 325.264105][T13228] bridge_slave_0: entered promiscuous mode [ 325.320319][ T36] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.338502][T13228] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.349018][T13228] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.356698][T13228] bridge_slave_1: entered allmulticast mode [ 325.364218][T13228] bridge_slave_1: entered promiscuous mode [ 325.412198][ T36] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.457048][T13228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.470342][T13228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.511935][ T36] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.562247][T13228] team0: Port device team_slave_0 added [ 325.574468][T13228] team0: Port device team_slave_1 added [ 325.688397][T13228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.713047][T13228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.747218][T13316] netlink: 'syz.0.1835': attribute type 11 has an invalid length. [ 325.765804][T13316] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1835'. [ 325.791259][T13228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.833018][T13228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.850435][T13228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.861385][T13322] netlink: 272 bytes leftover after parsing attributes in process `syz.7.1837'. [ 325.908849][T13228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.059071][T13329] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1838'. [ 326.090196][T13327] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 326.242179][T13336] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1839'. [ 326.261567][T13228] hsr_slave_0: entered promiscuous mode [ 326.282336][T13228] hsr_slave_1: entered promiscuous mode [ 326.298074][T13228] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 326.314166][T13228] Cannot create hsr debugfs directory [ 326.320164][T13331] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1839'. [ 326.394171][ T5833] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 326.406638][ T5833] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 326.415052][ T5833] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 326.430582][ T5833] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 326.439765][ T5833] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 326.724711][ T36] bridge_slave_1: left allmulticast mode [ 326.732495][ T36] bridge_slave_1: left promiscuous mode [ 326.738551][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.758919][ T36] bridge_slave_0: left allmulticast mode [ 326.774478][ T36] bridge_slave_0: left promiscuous mode [ 326.780655][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.294475][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.303537][ T5833] Bluetooth: hci1: command tx timeout [ 327.336289][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.357721][ T36] bond0 (unregistering): Released all slaves [ 327.427215][T13341] lo speed is unknown, defaulting to 1000 [ 327.919243][T13385] netlink: 'syz.7.1850': attribute type 1 has an invalid length. [ 328.022355][ T36] hsr_slave_0: left promiscuous mode [ 328.033575][ T36] hsr_slave_1: left promiscuous mode [ 328.043364][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.051041][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.075283][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.095307][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.142869][ T36] veth1_macvtap: left promiscuous mode [ 328.154079][ T36] veth0_macvtap: left promiscuous mode [ 328.160706][ T36] veth1_vlan: left promiscuous mode [ 328.166412][ T36] veth0_vlan: left promiscuous mode [ 328.488849][ T5833] Bluetooth: hci6: command tx timeout [ 328.904884][ T36] team0 (unregistering): Port device team_slave_1 removed [ 328.955012][ T36] team0 (unregistering): Port device team_slave_0 removed [ 329.131120][T13408] netlink: 'syz.0.1857': attribute type 1 has an invalid length. [ 329.147073][T13408] netlink: 'syz.0.1857': attribute type 2 has an invalid length. [ 329.369965][ T5833] Bluetooth: hci1: command tx timeout [ 329.963243][T13341] chnl_net:caif_netlink_parms(): no params data found [ 330.566390][ T5833] Bluetooth: hci6: command tx timeout [ 330.651557][T13341] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.671604][T13341] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.691135][T13341] bridge_slave_0: entered allmulticast mode [ 330.711928][T13341] bridge_slave_0: entered promiscuous mode [ 330.734341][T13430] lo speed is unknown, defaulting to 1000 [ 330.745225][T13228] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 330.804994][T13341] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.836285][T13341] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.852615][T13341] bridge_slave_1: entered allmulticast mode [ 330.866298][T13341] bridge_slave_1: entered promiscuous mode [ 330.931082][T13228] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 330.951020][T13228] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 331.003393][T13459] syzkaller0: entered promiscuous mode [ 331.009828][T13459] syzkaller0: entered allmulticast mode [ 331.017172][T13228] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 331.031064][T13463] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1872'. [ 331.038976][T13341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.160009][T13341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.270833][T13341] team0: Port device team_slave_0 added [ 331.300643][T13341] team0: Port device team_slave_1 added [ 331.415215][T13471] tap0: tun_chr_ioctl cmd 1074025673 [ 331.421884][T13341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.430513][T13341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.459050][T13341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.475801][T13468] tap0: tun_chr_ioctl cmd 1074025677 [ 331.485920][T13468] tap0: linktype set to 6 [ 331.491571][T13341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.500524][T13341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.527412][T13341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.684078][T13341] hsr_slave_0: entered promiscuous mode [ 331.707504][T13341] hsr_slave_1: entered promiscuous mode [ 331.713954][T13341] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 331.735468][T13341] Cannot create hsr debugfs directory [ 331.987097][T13489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1881'. [ 332.008839][T13489] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1881'. [ 332.201144][T13489] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.370308][T13489] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.439957][T13482] lo speed is unknown, defaulting to 1000 [ 332.553809][T13487] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1880'. [ 332.612727][T13489] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.645807][ T5833] Bluetooth: hci6: command tx timeout [ 332.674719][T13505] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1884'. [ 332.705536][T13504] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1884'. [ 332.841953][T13489] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.189322][T13489] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.241361][T13489] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.288344][T13228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.312778][T13489] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.334518][T13489] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.390898][T13228] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.420969][ T7844] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.428205][ T7844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.467467][T13518] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1888'. [ 333.479908][ T7844] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.487160][ T7844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.904111][T13341] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 333.936923][T13536] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1891'. [ 333.961276][T13341] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 334.027990][T13540] netlink: 'syz.7.1891': attribute type 18 has an invalid length. [ 334.064808][T13536] ip6tnl1: entered promiscuous mode [ 334.097274][T13536] ip6tnl1: entered allmulticast mode [ 334.122972][T13341] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 334.141445][T13341] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 334.504526][T13228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.635124][T13341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.664561][T13228] veth0_vlan: entered promiscuous mode [ 334.722472][T13228] veth1_vlan: entered promiscuous mode [ 334.728339][ T5833] Bluetooth: hci6: command tx timeout [ 334.758508][T13341] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.763406][T13567] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1900'. [ 334.810071][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.817342][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.884491][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.891697][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.985902][T13567] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.011874][T13567] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 35287 - 0 [ 335.038653][T13567] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 37123 - 0 [ 335.078059][T13575] netlink: 'syz.0.1902': attribute type 4 has an invalid length. [ 335.132153][T13228] veth0_macvtap: entered promiscuous mode [ 335.196218][T13567] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.208064][T13567] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 35287 - 0 [ 335.230496][T13567] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 37123 - 0 [ 335.288227][T13228] veth1_macvtap: entered promiscuous mode [ 335.342959][T13586] netlink: 'syz.1.1905': attribute type 10 has an invalid length. [ 335.375167][T13567] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.386706][T13567] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 35287 - 0 [ 335.397906][T13567] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 37123 - 0 [ 335.547976][T13567] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.567103][T13590] atomic_op ffff8880458bc198 conn xmit_atomic 0000000000000000 [ 335.573795][T13567] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 35287 - 0 [ 335.600658][T13567] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 37123 - 0 [ 335.669197][T13228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.688539][T13228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.718505][T13228] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.736728][T13228] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.746017][T13594] xt_ipcomp: unknown flags F7 [ 335.759776][T13228] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.769934][T13228] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.969929][T13567] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 37123 - 0 [ 335.984199][T13567] netdevsim netdevsim7 eth0: set [1, 1] type 2 family 0 port 35287 - 0 [ 335.992837][T13567] netdevsim netdevsim7 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 336.051346][T13567] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 37123 - 0 [ 336.060015][T13567] netdevsim netdevsim7 eth1: set [1, 1] type 2 family 0 port 35287 - 0 [ 336.069578][T13567] netdevsim netdevsim7 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 336.081577][ T7842] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.100958][ T7842] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.148626][T13341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.173592][T13567] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 37123 - 0 [ 336.183099][T13567] netdevsim netdevsim7 eth2: set [1, 1] type 2 family 0 port 35287 - 0 [ 336.212597][T13567] netdevsim netdevsim7 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 336.244793][ T7837] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.265574][ T7837] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.270200][T13567] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 37123 - 0 [ 336.295145][T13567] netdevsim netdevsim7 eth3: set [1, 1] type 2 family 0 port 35287 - 0 [ 336.316864][T13567] netdevsim netdevsim7 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 336.559801][T13609] FAULT_INJECTION: forcing a failure. [ 336.559801][T13609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 336.610695][T13609] CPU: 1 UID: 0 PID: 13609 Comm: syz.1.1912 Not tainted 6.15.0-rc6-syzkaller-01183-g894fbb55e60c #0 PREEMPT(full) [ 336.610727][T13609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 336.610751][T13609] Call Trace: [ 336.610763][T13609] [ 336.610773][T13609] dump_stack_lvl+0x189/0x250 [ 336.610808][T13609] ? __lock_acquire+0xaac/0xd20 [ 336.610842][T13609] ? __pfx_dump_stack_lvl+0x10/0x10 [ 336.610873][T13609] ? __pfx__printk+0x10/0x10 [ 336.610905][T13609] ? __might_fault+0xb0/0x130 [ 336.610942][T13609] should_fail_ex+0x414/0x560 [ 336.610971][T13609] _copy_from_iter+0x1db/0x15a0 [ 336.611004][T13609] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 336.611027][T13609] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 336.611054][T13609] ? __pfx__copy_from_iter+0x10/0x10 [ 336.611081][T13609] ? __build_skb_around+0x257/0x3e0 [ 336.611111][T13609] ? netlink_sendmsg+0x642/0xb30 [ 336.611154][T13609] ? skb_put+0x11b/0x210 [ 336.611186][T13609] netlink_sendmsg+0x6b2/0xb30 [ 336.611226][T13609] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.611259][T13609] ? aa_sock_msg_perm+0x94/0x160 [ 336.611286][T13609] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 336.611348][T13609] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.611379][T13609] __sock_sendmsg+0x21c/0x270 [ 336.611406][T13609] ____sys_sendmsg+0x505/0x830 [ 336.611448][T13609] ? __pfx_____sys_sendmsg+0x10/0x10 [ 336.611489][T13609] ? import_iovec+0x74/0xa0 [ 336.611522][T13609] ___sys_sendmsg+0x21f/0x2a0 [ 336.611575][T13609] ? __pfx____sys_sendmsg+0x10/0x10 [ 336.611648][T13609] ? __fget_files+0x2a/0x420 [ 336.611677][T13609] ? __fget_files+0x3a0/0x420 [ 336.611719][T13609] __x64_sys_sendmsg+0x19b/0x260 [ 336.611754][T13609] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 336.611806][T13609] ? do_syscall_64+0xba/0x210 [ 336.611837][T13609] do_syscall_64+0xf6/0x210 [ 336.611863][T13609] ? clear_bhb_loop+0x60/0xb0 [ 336.611890][T13609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.611910][T13609] RIP: 0033:0x7fc2bb18e969 [ 336.611928][T13609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.611947][T13609] RSP: 002b:00007fc2bbfca038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.611969][T13609] RAX: ffffffffffffffda RBX: 00007fc2bb3b5fa0 RCX: 00007fc2bb18e969 [ 336.611985][T13609] RDX: 0000000020000000 RSI: 0000200000006040 RDI: 0000000000000004 [ 336.611999][T13609] RBP: 00007fc2bbfca090 R08: 0000000000000000 R09: 0000000000000000 [ 336.612012][T13609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.612025][T13609] R13: 0000000000000000 R14: 00007fc2bb3b5fa0 R15: 00007ffd4754b7f8 [ 336.612060][T13609] [ 337.124332][T13341] veth0_vlan: entered promiscuous mode [ 337.271980][ T7842] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.323360][T13341] veth1_vlan: entered promiscuous mode [ 337.398900][ T7842] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.485547][T13341] veth0_macvtap: entered promiscuous mode [ 337.520983][ T7842] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.557713][T13341] veth1_macvtap: entered promiscuous mode [ 337.583918][ T7842] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.616741][T13341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.640924][T13341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.654225][T13341] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.673267][T13341] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.683089][T13341] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.692357][T13341] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.814049][ T7842] bridge_slave_1: left allmulticast mode [ 337.820209][ T7842] bridge_slave_1: left promiscuous mode [ 337.826422][ T7842] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.838419][ T7842] bridge_slave_0: left allmulticast mode [ 337.844078][ T7842] bridge_slave_0: left promiscuous mode [ 337.850572][ T7842] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.503720][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 338.513971][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 338.535155][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 338.555787][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 338.572763][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 338.690903][ T7842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.704159][ T7842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.715008][ T7842] bond0 (unregistering): Released all slaves [ 338.748731][T13632] : entered promiscuous mode [ 338.776801][ T7830] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.808254][ T7830] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.004109][T13653] netlink: 'syz.7.1926': attribute type 10 has an invalid length. [ 339.110885][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.133257][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.339251][T13663] FAULT_INJECTION: forcing a failure. [ 339.339251][T13663] name failslab, interval 1, probability 0, space 0, times 0 [ 339.367237][T13663] CPU: 1 UID: 0 PID: 13663 Comm: syz.7.1928 Not tainted 6.15.0-rc6-syzkaller-01183-g894fbb55e60c #0 PREEMPT(full) [ 339.367267][T13663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 339.367280][T13663] Call Trace: [ 339.367289][T13663] [ 339.367299][T13663] dump_stack_lvl+0x189/0x250 [ 339.367340][T13663] ? __pfx_dump_stack_lvl+0x10/0x10 [ 339.367373][T13663] ? __pfx__printk+0x10/0x10 [ 339.367403][T13663] ? ref_tracker_alloc+0x318/0x460 [ 339.367432][T13663] should_fail_ex+0x414/0x560 [ 339.367461][T13663] should_failslab+0xa8/0x100 [ 339.367493][T13663] kmem_cache_alloc_noprof+0x73/0x3c0 [ 339.367521][T13663] ? skb_clone+0x212/0x3a0 [ 339.367546][T13663] skb_clone+0x212/0x3a0 [ 339.367570][T13663] __netlink_deliver_tap+0x404/0x850 [ 339.367617][T13663] ? netlink_deliver_tap+0x2e/0x1b0 [ 339.367649][T13663] netlink_deliver_tap+0x19c/0x1b0 [ 339.367680][T13663] netlink_unicast+0x72f/0x8d0 [ 339.367721][T13663] netlink_sendmsg+0x805/0xb30 [ 339.367763][T13663] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.367797][T13663] ? aa_sock_msg_perm+0x94/0x160 [ 339.367825][T13663] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 339.367851][T13663] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.367882][T13663] __sock_sendmsg+0x21c/0x270 [ 339.367910][T13663] ____sys_sendmsg+0x505/0x830 [ 339.367948][T13663] ? __pfx_____sys_sendmsg+0x10/0x10 [ 339.367991][T13663] ? import_iovec+0x74/0xa0 [ 339.368026][T13663] ___sys_sendmsg+0x21f/0x2a0 [ 339.368060][T13663] ? __pfx____sys_sendmsg+0x10/0x10 [ 339.368144][T13663] ? __fget_files+0x2a/0x420 [ 339.368173][T13663] ? __fget_files+0x3a0/0x420 [ 339.368215][T13663] __x64_sys_sendmsg+0x19b/0x260 [ 339.368251][T13663] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 339.368303][T13663] ? do_syscall_64+0xba/0x210 [ 339.368333][T13663] do_syscall_64+0xf6/0x210 [ 339.368360][T13663] ? clear_bhb_loop+0x60/0xb0 [ 339.368386][T13663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.368406][T13663] RIP: 0033:0x7f15fd78e969 [ 339.368426][T13663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.368444][T13663] RSP: 002b:00007f15fe577038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.368467][T13663] RAX: ffffffffffffffda RBX: 00007f15fd9b5fa0 RCX: 00007f15fd78e969 [ 339.368483][T13663] RDX: 0000000020000000 RSI: 0000200000006040 RDI: 0000000000000004 [ 339.368497][T13663] RBP: 00007f15fe577090 R08: 0000000000000000 R09: 0000000000000000 [ 339.368510][T13663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.368522][T13663] R13: 0000000000000000 R14: 00007f15fd9b5fa0 R15: 00007ffec01683a8 [ 339.368556][T13663] [ 339.641677][ T5838] Bluetooth: hci5: command 0x0405 tx timeout [ 339.763024][ T7842] hsr_slave_0: left promiscuous mode [ 339.797735][ T7842] hsr_slave_1: left promiscuous mode [ 339.816653][ T7842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.844551][ T7842] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.873000][ T7842] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.893203][ T7842] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.966167][ T7842] veth1_macvtap: left promiscuous mode [ 340.001329][ T7842] veth0_macvtap: left promiscuous mode [ 340.016127][ T7842] veth1_vlan: left promiscuous mode [ 340.021815][ T7842] veth0_vlan: left promiscuous mode [ 340.658283][ T5833] Bluetooth: hci1: command tx timeout [ 340.900181][ T7842] team0 (unregistering): Port device team_slave_1 removed [ 340.948446][ T7842] team0 (unregistering): Port device team_slave_0 removed [ 341.088582][ T5838] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 341.099167][ T5838] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 341.114142][ T5838] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 341.133481][ T5838] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 341.141411][ T5838] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 341.767814][T13685] netlink: 'syz.1.1931': attribute type 2 has an invalid length. [ 341.779069][T13685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1931'. [ 341.926488][T13692] netlink: 84 bytes leftover after parsing attributes in process `syz.7.1932'. [ 342.146299][T13647] chnl_net:caif_netlink_parms(): no params data found [ 342.453534][T13714] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1939'. [ 342.502812][T13712] FAULT_INJECTION: forcing a failure. [ 342.502812][T13712] name failslab, interval 1, probability 0, space 0, times 0 [ 342.519605][T13712] CPU: 1 UID: 0 PID: 13712 Comm: syz.7.1940 Not tainted 6.15.0-rc6-syzkaller-01183-g894fbb55e60c #0 PREEMPT(full) [ 342.519637][T13712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 342.519650][T13712] Call Trace: [ 342.519659][T13712] [ 342.519668][T13712] dump_stack_lvl+0x189/0x250 [ 342.519716][T13712] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.519748][T13712] ? __pfx__printk+0x10/0x10 [ 342.519774][T13712] ? __pfx___might_resched+0x10/0x10 [ 342.519796][T13712] ? fs_reclaim_acquire+0x7d/0x100 [ 342.519836][T13712] should_fail_ex+0x414/0x560 [ 342.519866][T13712] should_failslab+0xa8/0x100 [ 342.519898][T13712] __kmalloc_cache_noprof+0x70/0x3d0 [ 342.519927][T13712] ? tcf_chain_create+0xb0/0x310 [ 342.519964][T13712] tcf_chain_create+0xb0/0x310 [ 342.520010][T13712] __tcf_chain_get+0x111/0x3c0 [ 342.520049][T13712] tc_new_tfilter+0x753/0x15b0 [ 342.520068][T13712] ? nlmon_xmit+0xb0/0x100 [ 342.520111][T13712] ? __local_bh_enable_ip+0x12d/0x1c0 [ 342.520137][T13712] ? __local_bh_enable_ip+0x12d/0x1c0 [ 342.520165][T13712] ? __pfx_tc_new_tfilter+0x10/0x10 [ 342.520224][T13712] ? __pfx_tc_new_tfilter+0x10/0x10 [ 342.520243][T13712] rtnetlink_rcv_msg+0x7cf/0xb70 [ 342.520274][T13712] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 342.520300][T13712] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 342.520331][T13712] ? ref_tracker_free+0x63a/0x7d0 [ 342.520353][T13712] ? __copy_skb_header+0xa7/0x550 [ 342.520398][T13712] netlink_rcv_skb+0x219/0x490 [ 342.520429][T13712] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 342.520458][T13712] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 342.520512][T13712] ? netlink_deliver_tap+0x2e/0x1b0 [ 342.520541][T13712] ? netlink_deliver_tap+0x2e/0x1b0 [ 342.520578][T13712] netlink_unicast+0x75b/0x8d0 [ 342.520619][T13712] netlink_sendmsg+0x805/0xb30 [ 342.520662][T13712] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.520697][T13712] ? aa_sock_msg_perm+0x94/0x160 [ 342.520725][T13712] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 342.520750][T13712] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.520783][T13712] __sock_sendmsg+0x21c/0x270 [ 342.520811][T13712] ____sys_sendmsg+0x505/0x830 [ 342.520850][T13712] ? __pfx_____sys_sendmsg+0x10/0x10 [ 342.520893][T13712] ? import_iovec+0x74/0xa0 [ 342.520928][T13712] ___sys_sendmsg+0x21f/0x2a0 [ 342.520962][T13712] ? __pfx____sys_sendmsg+0x10/0x10 [ 342.521045][T13712] ? __fget_files+0x2a/0x420 [ 342.521076][T13712] ? __fget_files+0x3a0/0x420 [ 342.521118][T13712] __x64_sys_sendmsg+0x19b/0x260 [ 342.521153][T13712] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 342.521204][T13712] ? do_syscall_64+0xba/0x210 [ 342.521235][T13712] do_syscall_64+0xf6/0x210 [ 342.521262][T13712] ? clear_bhb_loop+0x60/0xb0 [ 342.521289][T13712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.521309][T13712] RIP: 0033:0x7f15fd78e969 [ 342.521329][T13712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.521347][T13712] RSP: 002b:00007f15fe577038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 342.521380][T13712] RAX: ffffffffffffffda RBX: 00007f15fd9b5fa0 RCX: 00007f15fd78e969 [ 342.521395][T13712] RDX: 0000000020000000 RSI: 0000200000006040 RDI: 0000000000000004 [ 342.521408][T13712] RBP: 00007f15fe577090 R08: 0000000000000000 R09: 0000000000000000 [ 342.521420][T13712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.521432][T13712] R13: 0000000000000000 R14: 00007f15fd9b5fa0 R15: 00007ffec01683a8 [ 342.521466][T13712] [ 342.910432][ T5838] Bluetooth: hci1: command tx timeout [ 343.012612][T13647] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.020121][T13647] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.027788][T13647] bridge_slave_0: entered allmulticast mode [ 343.037562][T13647] bridge_slave_0: entered promiscuous mode [ 343.046271][T13647] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.053449][T13647] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.060762][T13647] bridge_slave_1: entered allmulticast mode [ 343.069013][T13647] bridge_slave_1: entered promiscuous mode [ 343.092408][T13682] chnl_net:caif_netlink_parms(): no params data found [ 343.205977][ T5838] Bluetooth: hci6: command tx timeout [ 343.259334][T13647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.455245][ T7830] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.478883][T13647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.493391][T13738] geneve4: entered promiscuous mode [ 343.504491][T13740] netlink: 184 bytes leftover after parsing attributes in process `syz.7.1946'. [ 343.629992][T13750] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1948'. [ 343.668925][T13750] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1948'. [ 343.693781][T13750] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1948'. [ 343.804252][ T7830] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.879860][T13647] team0: Port device team_slave_0 added [ 343.939250][ T7830] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.976200][T13682] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.983489][T13682] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.997010][T13682] bridge_slave_0: entered allmulticast mode [ 344.005458][T13682] bridge_slave_0: entered promiscuous mode [ 344.022441][T13647] team0: Port device team_slave_1 added [ 344.054234][T13682] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.076835][T13682] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.084181][T13682] bridge_slave_1: entered allmulticast mode [ 344.110840][T13682] bridge_slave_1: entered promiscuous mode [ 344.147102][T13756] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1949'. [ 344.881235][T13770] pim6reg1: entered promiscuous mode [ 344.891841][T13770] pim6reg1: entered allmulticast mode [ 344.953642][T13682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.966349][ T5838] Bluetooth: hci1: command tx timeout [ 345.015153][ T7830] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.038393][T13647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.045401][T13647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.072842][T13647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.147451][T13682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.170389][T13647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.181044][T13647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.209258][T13647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.289108][ T5838] Bluetooth: hci6: command tx timeout [ 345.399332][T13785] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1956'. [ 345.409209][T13786] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1954'. [ 345.414652][T13682] team0: Port device team_slave_0 added [ 345.425271][T13785] netlink: 'syz.1.1956': attribute type 13 has an invalid length. [ 345.427539][T13786] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 345.437774][T13682] team0: Port device team_slave_1 added [ 346.475971][T13785] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.497060][T13785] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.505562][T13785] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.523778][T13785] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.753094][T13785] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 346.813517][T13785] syz_tun: left allmulticast mode [ 346.970428][T13793] netlink: 'syz.1.1958': attribute type 10 has an invalid length. [ 347.020551][T13647] hsr_slave_0: entered promiscuous mode [ 347.039312][T13647] hsr_slave_1: entered promiscuous mode [ 347.046251][ T5838] Bluetooth: hci1: command tx timeout [ 347.055300][T13647] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 347.074705][T13647] Cannot create hsr debugfs directory [ 347.189229][T13682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.206046][T13682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.262149][T13682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.277740][T13682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.285328][T13682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.312125][T13682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.366079][ T5838] Bluetooth: hci6: command tx timeout [ 347.579633][T13682] hsr_slave_0: entered promiscuous mode [ 347.596934][T13682] hsr_slave_1: entered promiscuous mode [ 347.603358][T13682] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 347.626425][T13682] Cannot create hsr debugfs directory [ 347.650295][ T7830] bridge_slave_1: left allmulticast mode [ 347.666396][ T7830] bridge_slave_1: left promiscuous mode [ 347.679024][ T7830] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.703617][ T7830] bridge_slave_0: left allmulticast mode [ 347.716044][ T7830] bridge_slave_0: left promiscuous mode [ 347.732094][ T7830] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.079152][T13816] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1965'. [ 348.578140][ T7830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.589965][ T7830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.602253][ T7830] bond0 (unregistering): Released all slaves [ 349.303068][ T7830] hsr_slave_0: left promiscuous mode [ 349.319608][ T7830] hsr_slave_1: left promiscuous mode [ 349.326334][ T7830] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.333799][ T7830] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.342052][ T7830] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.349734][ T7830] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.379308][ T7830] veth1_macvtap: left promiscuous mode [ 349.384882][ T7830] veth0_macvtap: left promiscuous mode [ 349.391116][ T7830] veth1_vlan: left promiscuous mode [ 349.396584][ T7830] veth0_vlan: left promiscuous mode [ 349.455826][ T5838] Bluetooth: hci6: command tx timeout [ 349.948947][ T7830] team0 (unregistering): Port device team_slave_1 removed [ 350.000698][ T7830] team0 (unregistering): Port device team_slave_0 removed [ 350.329196][ T31] INFO: task syz.2.935:9736 blocked for more than 143 seconds. [ 350.338078][ T31] Not tainted 6.15.0-rc6-syzkaller-01183-g894fbb55e60c #0 [ 350.346061][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 350.354780][ T31] task:syz.2.935 state:D stack:26088 pid:9736 tgid:9735 ppid:5841 task_flags:0x400040 flags:0x00000004 [ 350.366890][ T31] Call Trace: [ 350.370206][ T31] [ 350.373154][ T31] __schedule+0x16e2/0x4cd0 [ 350.377762][ T31] ? __lock_acquire+0xaac/0xd20 [ 350.382837][ T31] ? schedule+0x165/0x360 [ 350.387368][ T31] ? __pfx___schedule+0x10/0x10 [ 350.392276][ T31] ? schedule+0x91/0x360 [ 350.396757][ T31] schedule+0x165/0x360 [ 350.400941][ T31] schedule_preempt_disabled+0x13/0x30 [ 350.407400][ T31] __mutex_lock+0x724/0xe80 [ 350.411958][ T31] ? __mutex_lock+0x51b/0xe80 [ 350.416755][ T31] ? nfsd_nl_rpc_status_get_dumpit+0xd9/0x1280 [ 350.422952][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 350.428286][ T31] ? stack_trace_save+0x9c/0xe0 [ 350.433184][ T31] nfsd_nl_rpc_status_get_dumpit+0xd9/0x1280 [ 350.439282][ T31] ? kasan_save_track+0x4f/0x80 [ 350.444169][ T31] ? kasan_save_track+0x3e/0x80 [ 350.449230][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 350.454026][ T31] ? __kmalloc_node_track_caller_noprof+0x271/0x4e0 [ 350.460829][ T31] ? kmalloc_reserve+0x136/0x290 [ 350.465852][ T31] ? __alloc_skb+0x142/0x2d0 [ 350.470473][ T31] ? netlink_dump+0x245/0xe70 [ 350.475184][ T31] ? genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 350.481146][ T31] ? genl_rcv_msg+0x5da/0x790 [ 350.486205][ T31] ? netlink_rcv_skb+0x219/0x490 [ 350.491185][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 350.497801][ T31] ? __sock_sendmsg+0x21c/0x270 [ 350.502689][ T31] ? ____sys_sendmsg+0x505/0x830 [ 350.508578][ T31] ? ___sys_sendmsg+0x21f/0x2a0 [ 350.513477][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 350.518676][ T31] ? do_syscall_64+0xf6/0x210 [ 350.523362][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.529577][ T31] ? rcu_is_watching+0x15/0xb0 [ 350.534372][ T31] ? trace_kmalloc+0x1f/0xd0 [ 350.539034][ T31] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 350.545751][ T31] ? __build_skb_around+0x257/0x3e0 [ 350.550998][ T31] genl_dumpit+0x10b/0x1b0 [ 350.555447][ T31] netlink_dump+0x651/0xe70 [ 350.560027][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 350.565074][ T31] ? __asan_memset+0x22/0x50 [ 350.570076][ T31] ? genl_start+0x499/0x6c0 [ 350.574626][ T31] __netlink_dump_start+0x5cb/0x7e0 [ 350.579932][ T31] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 350.585760][ T31] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 350.592031][ T31] ? genl_get_cmd+0x496/0x910 [ 350.596800][ T31] ? __pfx_genl_start+0x10/0x10 [ 350.601658][ T31] ? __pfx_genl_dumpit+0x10/0x10 [ 350.607488][ T31] ? __pfx_genl_done+0x10/0x10 [ 350.612307][ T31] ? stack_depot_save_flags+0x40/0x910 [ 350.617924][ T31] genl_rcv_msg+0x5da/0x790 [ 350.622509][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 350.627630][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 350.634233][ T31] netlink_rcv_skb+0x219/0x490 [ 350.639114][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 350.644169][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 350.649655][ T31] ? down_read+0x1ad/0x2e0 [ 350.654223][ T31] genl_rcv+0x28/0x40 [ 350.658314][ T31] netlink_unicast+0x75b/0x8d0 [ 350.663153][ T31] netlink_sendmsg+0x805/0xb30 [ 350.668075][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 350.673559][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 350.678704][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 350.684012][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 350.689390][ T31] __sock_sendmsg+0x21c/0x270 [ 350.694112][ T31] ____sys_sendmsg+0x505/0x830 [ 350.699287][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 350.704628][ T31] ? import_iovec+0x74/0xa0 [ 350.710110][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 350.714846][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 350.720259][ T31] ? __fget_files+0x2a/0x420 [ 350.724888][ T31] ? __fget_files+0x3a0/0x420 [ 350.729846][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 350.734830][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 350.740437][ T31] ? do_syscall_64+0xba/0x210 [ 350.745161][ T31] do_syscall_64+0xf6/0x210 [ 350.749777][ T31] ? clear_bhb_loop+0x60/0xb0 [ 350.754496][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.760478][ T31] RIP: 0033:0x7fa07f98e969 [ 350.764927][ T31] RSP: 002b:00007fa0808ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 350.773471][ T31] RAX: ffffffffffffffda RBX: 00007fa07fbb5fa0 RCX: 00007fa07f98e969 [ 350.781520][ T31] RDX: 0000000004000810 RSI: 0000200000000180 RDI: 0000000000000005 [ 350.789812][ T31] RBP: 00007fa07fa10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 350.797875][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.806123][ T31] R13: 0000000000000000 R14: 00007fa07fbb5fa0 R15: 00007ffd759568f8 [ 350.814808][ T31] [ 350.818409][ T31] [ 350.818409][ T31] Showing all locks held in the system: [ 350.827476][ T31] 1 lock held by khungtaskd/31: [ 350.832447][ T31] #0: ffffffff8df3dce0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 350.842599][ T31] 2 locks held by getty/5588: [ 350.847461][ T31] #0: ffff8880320880a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 350.857415][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 350.867735][ T31] 5 locks held by kworker/u8:9/7830: [ 350.873058][ T31] #0: ffff88801aefe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 350.884085][ T31] #1: ffffc90004de7c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 350.894799][ T31] #2: ffffffff8f2eb0d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x8a0 [ 350.904422][ T31] #3: ffffffff8f2f7c88 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xdc/0x890 [ 350.915593][ T31] #4: ffffffff8df437b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f4/0x730 [ 350.926801][ T31] 3 locks held by kworker/u8:14/7842: [ 350.932210][ T31] #0: ffff88801a089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 350.944575][ T31] #1: ffffc9000b737c60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 350.955752][ T31] #2: ffffffff8f2f7c88 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 350.965830][ T31] 2 locks held by syz.4.648/8596: [ 350.970947][ T31] #0: ffffffff8f35dc30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 350.979241][ T31] #1: ffffffff8e2139e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 350.989557][ T31] 3 locks held by syz.2.935/9736: [ 350.994628][ T31] #0: ffffffff8f35dc30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 351.002952][ T31] #1: ffff88805a58d6d0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 351.013619][ T31] #2: ffffffff8e2139e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xd9/0x1280 [ 351.025055][ T31] 2 locks held by syz.5.1197/10802: [ 351.030345][ T31] #0: ffffffff8f35dc30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 351.038643][ T31] #1: ffffffff8e2139e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 351.049014][ T31] 7 locks held by syz-executor/13647: [ 351.054423][ T31] #0: ffff88802f24a420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 351.063466][ T31] #1: ffff88807f2d3488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 351.073360][ T31] #2: ffff888144ba72d8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 351.083546][ T31] #3: ffffffff8eb977e8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 351.093935][ T31] #4: ffff8880463520e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0 [ 351.104599][ T31] #5: ffff888046354250 (&devlink->lock_key#15){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 351.114787][ T31] #6: ffffffff8f2f7c88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 351.125073][ T31] 2 locks held by syz-executor/13682: [ 351.130589][ T31] #0: ffffffff8f7fafd0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 351.140275][ T31] #1: ffffffff8f2f7c88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 351.149482][ T31] 2 locks held by syz.0.1947/13745: [ 351.154708][ T31] #0: ffffffff8f35dc30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 351.162998][ T31] #1: ffffffff8e2139e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 351.173289][ T31] 2 locks held by syz.1.1963/13812: [ 351.178583][ T31] #0: ffffffff8f35dc30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 351.186889][ T31] #1: ffffffff8e2139e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 351.197211][ T31] 1 lock held by syz.7.1969/13842: [ 351.202348][ T31] #0: ffffffff8f2f7c88 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x37a/0x1d90 [ 351.217838][ T31] 1 lock held by syz.7.1969/13843: [ 351.223825][ T31] #0: ffffffff8f2f7c88 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 351.233515][ T31] 1 lock held by syz.7.1969/13844: [ 351.238848][ T31] #0: ffffffff8f2f7c88 (rtnl_mutex){+.+.}-{4:4}, at: tc_new_tfilter+0x4b5/0x15b0 [ 351.248258][ T31] [ 351.250623][ T31] ============================================= [ 351.250623][ T31] [ 351.259177][ T31] NMI backtrace for cpu 0 [ 351.259194][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-01183-g894fbb55e60c #0 PREEMPT(full) [ 351.259219][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 351.259232][ T31] Call Trace: [ 351.259240][ T31] [ 351.259249][ T31] dump_stack_lvl+0x189/0x250 [ 351.259283][ T31] ? __wake_up_klogd+0xd9/0x110 [ 351.259312][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 351.259343][ T31] ? __pfx__printk+0x10/0x10 [ 351.259388][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 351.259425][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 351.259454][ T31] ? _printk+0xcf/0x120 [ 351.259481][ T31] ? __pfx__printk+0x10/0x10 [ 351.259505][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 351.259530][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 351.259567][ T31] watchdog+0xfee/0x1030 [ 351.259597][ T31] ? watchdog+0x1de/0x1030 [ 351.259635][ T31] kthread+0x711/0x8a0 [ 351.259665][ T31] ? __pfx_watchdog+0x10/0x10 [ 351.259692][ T31] ? __pfx_kthread+0x10/0x10 [ 351.259720][ T31] ? __pfx_kthread+0x10/0x10 [ 351.259745][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 351.259766][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.259789][ T31] ? __pfx_kthread+0x10/0x10 [ 351.259815][ T31] ret_from_fork+0x4b/0x80 [ 351.259836][ T31] ? __pfx_kthread+0x10/0x10 [ 351.259862][ T31] ret_from_fork_asm+0x1a/0x30 [ 351.259900][ T31] [ 351.259908][ T31] Sending NMI from CPU 0 to CPUs 1: [ 351.409233][ C1] NMI backtrace for cpu 1 [ 351.409250][ C1] CPU: 1 UID: 0 PID: 7844 Comm: kworker/u8:15 Not tainted 6.15.0-rc6-syzkaller-01183-g894fbb55e60c #0 PREEMPT(full) [ 351.409273][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 351.409284][ C1] Workqueue: bat_events batadv_nc_worker [ 351.409307][ C1] RIP: 0010:__kasan_check_byte+0x6/0x40 [ 351.409333][ C1] Code: 89 c7 e9 dd fe ff ff 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 41 56 <53> 48 89 f3 49 89 fe e8 1e 12 00 00 84 c0 75 16 be 01 00 00 00 4c [ 351.409350][ C1] RSP: 0018:ffffc9000b497960 EFLAGS: 00000202 [ 351.409365][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 65ea784fb7447d00 [ 351.409377][ C1] RDX: 0000000000000000 RSI: ffffffff8b5aa986 RDI: ffff88804e8bc818 [ 351.409389][ C1] RBP: ffffffff8b267177 R08: 0000000000000001 R09: 0000000000000000 [ 351.409400][ C1] R10: dffffc0000000000 R11: fffffbfff1efeeaf R12: 0000000000000000 [ 351.409413][ C1] R13: ffff88804e8bc818 R14: 0000000000000000 R15: 0000000000000001 [ 351.409424][ C1] FS: 0000000000000000(0000) GS:ffff8881261b6000(0000) knlGS:0000000000000000 [ 351.409438][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 351.409450][ C1] CR2: 000055557dbd65c8 CR3: 0000000031972000 CR4: 00000000003526f0 [ 351.409465][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 351.409476][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 351.409487][ C1] Call Trace: [ 351.409493][ C1] [ 351.409502][ C1] lock_acquire+0x8d/0x360 [ 351.409529][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 351.409550][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 351.409571][ C1] ? batadv_nc_purge_paths+0xe7/0x3b0 [ 351.409589][ C1] _raw_spin_lock_bh+0x36/0x50 [ 351.409605][ C1] ? batadv_nc_purge_paths+0xe7/0x3b0 [ 351.409622][ C1] ? __pfx_batadv_nc_to_purge_nc_path_coding+0x10/0x10 [ 351.409642][ C1] batadv_nc_purge_paths+0xe7/0x3b0 [ 351.409668][ C1] batadv_nc_worker+0x328/0x610 [ 351.409686][ C1] ? process_scheduled_works+0x9ec/0x17a0 [ 351.409705][ C1] process_scheduled_works+0xade/0x17a0 [ 351.409739][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 351.409766][ C1] worker_thread+0x8a0/0xda0 [ 351.409800][ C1] kthread+0x711/0x8a0 [ 351.409823][ C1] ? __pfx_worker_thread+0x10/0x10 [ 351.409841][ C1] ? __pfx_kthread+0x10/0x10 [ 351.409863][ C1] ? __pfx_kthread+0x10/0x10 [ 351.409884][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 351.409900][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.409919][ C1] ? __pfx_kthread+0x10/0x10 [ 351.409940][ C1] ret_from_fork+0x4b/0x80 [ 351.409959][ C1] ? __pfx_kthread+0x10/0x10 [ 351.409980][ C1] ret_from_fork_asm+0x1a/0x30 [ 351.410007][ C1] [ 351.410353][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 351.685878][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-01183-g894fbb55e60c #0 PREEMPT(full) [ 351.697689][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 351.707750][ T31] Call Trace: [ 351.711037][ T31] [ 351.713997][ T31] dump_stack_lvl+0x99/0x250 [ 351.718616][ T31] ? __asan_memcpy+0x40/0x70 [ 351.723222][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 351.728439][ T31] ? __pfx__printk+0x10/0x10 [ 351.733057][ T31] panic+0x2db/0x790 [ 351.736990][ T31] ? __pfx_panic+0x10/0x10 [ 351.741419][ T31] ? tick_nohz_tick_stopped+0x86/0xb0 [ 351.746805][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 351.752195][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 351.758370][ T31] watchdog+0x102d/0x1030 [ 351.762724][ T31] ? watchdog+0x1de/0x1030 [ 351.767161][ T31] kthread+0x711/0x8a0 [ 351.771248][ T31] ? __pfx_watchdog+0x10/0x10 [ 351.775943][ T31] ? __pfx_kthread+0x10/0x10 [ 351.780544][ T31] ? __pfx_kthread+0x10/0x10 [ 351.785149][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 351.790357][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.795566][ T31] ? __pfx_kthread+0x10/0x10 [ 351.800170][ T31] ret_from_fork+0x4b/0x80 [ 351.804593][ T31] ? __pfx_kthread+0x10/0x10 [ 351.809196][ T31] ret_from_fork_asm+0x1a/0x30 [ 351.813988][ T31] [ 351.817173][ T31] Kernel Offset: disabled [ 351.821503][ T31] Rebooting in 86400 seconds..