last executing test programs: 1m53.053106627s ago: executing program 2 (id=1290): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1000000, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000240)="4d010000000000000021", 0xa, 0x81, &(0x7f0000000340)={0x11, 0x0, r3, 0x1, 0xe, 0x6, @random="e44b06bdde0e"}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x37, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)={0x1c, r8, 0xd0d, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r9, 0x0, 0x40001) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r11, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1048020}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x140e, 0x8, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x48052}, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="000100001800010000000000fedbdf250a000000ff00ff0800200000b1000880324d76b5be2a06d619308aab715360ab2eb3a32a85c757c6275ee5d91b08242ffdbe6d0a6d1deee842bca9e9ec6780f823bdfac40a347ade2d6151c1938f89132b46e9878eba6e4aca523cec1065fe2147666ebce4068f4eef7b1b42d057a7673c22b323b8c07f9f74ca2621439501c88504c3192be61a6a9e0f9f747d486dd1c8825ea2b052ea5cf591a07b0346b83657d34487645a7b5297be4ca55bd9be6378abede7a1789e526a302bafac00000008e70f00060000000800e300", @ANYRES32, @ANYBLOB="100016800c000180080002007d2c27000800100001", @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x84}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$int_in(r13, 0x5452, &(0x7f0000000000)=0x887) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x80}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m52.496732019s ago: executing program 2 (id=1295): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) 1m51.481050065s ago: executing program 2 (id=1308): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000080)={0x5, 0xc, 0x9, 0x8, 0x8, 0xd85, 0x1, 0x1, r2}, &(0x7f0000000340)=0x20) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffd74, 0x40004, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) accept$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080006000300070004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1m49.964384951s ago: executing program 2 (id=1314): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x3000000000002}, 0x844) 1m49.761037269s ago: executing program 2 (id=1318): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/196, 0xc4}, 0xfffffffc}], 0x1, 0x103, 0x0) (async) setsockopt$inet6_int(r0, 0x29, 0x42, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) (async) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) r1 = accept4(r0, 0x0, 0x0, 0x800) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) unshare(0x2c020400) (async) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00') ioctl$NS_GET_NSTYPE(r2, 0xb703, 0x0) (async) socket$inet(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) (async) getsockopt$sock_buf(r4, 0x1, 0x1c, &(0x7f0000000280)=""/252, &(0x7f0000000100)=0xfc) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000001300)={'team0\x00', 0x0}) (async) r6 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCOUTQ(r6, 0x5411, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=ANY=[@ANYRES32=r8, @ANYRES16=r5, @ANYRESHEX=r1, @ANYRES64=r6, @ANYRESOCT, @ANYRES32=r0, @ANYRES16=r5], 0x5c}, 0x1, 0x0, 0x0, 0x20008840}, 0x4) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000380)=@raw=[@map_fd={0x18, 0x8, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xa8}], &(0x7f00000003c0)='syzkaller\x00', 0x401, 0x1e, &(0x7f0000000480)=""/30, 0x40f00, 0x1, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x8, 0x7, 0xc}, 0x3c, 0x0, 0x0, 0x2, &(0x7f0000000500), &(0x7f0000000540)=[{0x2, 0x3, 0xa, 0x8}, {0x5, 0x5, 0x4, 0x4}], 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000200)='mm_vmscan_kswapd_wake\x00', r9, 0x0, 0x8}, 0x18) (async) socket(0x28, 0x5, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0xa7, &(0x7f00000006c0)=""/167}, 0x94) 1m48.625026231s ago: executing program 2 (id=1334): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100005, 0x5, 0x5, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_stats_latency\x00', r3, 0x0, 0x40000000}, 0x18) sendmsg$netlink(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r1, &(0x7f0000000100), &(0x7f0000000180)=""/177}, 0x20) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="95210000000000001c00128009000100626f6e64000000000c00028008000a0003000000"], 0x3c}}, 0x0) 1m33.523509561s ago: executing program 32 (id=1334): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100005, 0x5, 0x5, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_stats_latency\x00', r3, 0x0, 0x40000000}, 0x18) sendmsg$netlink(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r1, &(0x7f0000000100), &(0x7f0000000180)=""/177}, 0x20) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="95210000000000001c00128009000100626f6e64000000000c00028008000a0003000000"], 0x3c}}, 0x0) 1m7.159127885s ago: executing program 3 (id=1736): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a0000000210001000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000040000050001100fe8000000e2390950000000000000000000100bb00000000000000000000ffffffffffffe01900020000000000000000000000000000000008000000ee0000000000000000"], 0xa0}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r1, 0x913e0000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x3000) r4 = openat$cgroup(r3, 0x0, 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}, 0x4040010) mmap(&(0x7f0000833000/0x13000)=nil, 0x13000, 0x300000c, 0x12, r6, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r9, &(0x7f0000000340)="07000000010001", 0x7) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r8, 0x1000) 1m6.90601713s ago: executing program 3 (id=1741): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113300000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) 1m6.67445072s ago: executing program 3 (id=1742): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x5f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x55}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x22, 0x2, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="38000000200001002dbd7000000000000a008004ff000001006b2db2a7f18d4ebf7fa4000000009000000014000200fc0200000000000000717553c619fb7dd79f1fefb413e89c4a62de16b33b795b0e7b019b16f772dff5bac176e8ffcdf7aae026560d9851aa9e90e50dcfba9970a20861b761fa61ad58cb73288d50bc904ff675774dcb278e982348d824a41a854ff12b03b52bc2a9ce98e39eaaa33867c1438e124a2b0b914eaaed26add56ba0248ee534326ed6a814d66f698c1429661b2c3cc7330a7724400e3a99c5766cb8ab6455cd197a211b72b9e8"], 0x38}}, 0x0) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@deltaction={0x180, 0x31, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}]}, @TCA_ACT_TAB={0x68, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1bb2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x70, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x14, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x14, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x14, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x81}, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x12, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r4], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xd, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x8}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r7, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r5}, 0x20) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="dc000000", @ANYRES16=r9, @ANYBLOB="010029bd7000fcdbdf253ed32d879b5cbff2ed657464657673696d000000540002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c746963617374000500830001000000080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c7469636173740005008300000000000e0001006e657464657673696d0000000f8002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c746963617374000500830001000000"], 0xdc}, 0x1, 0x0, 0x0, 0x4000}, 0x4c0d0) recvmmsg(r5, &(0x7f00000073c0)=[{{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000002ac0)=""/4101, 0x1005}], 0x1}}], 0x1, 0xf2, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_RCVMTU(r10, 0x112, 0xd, 0x0, &(0x7f0000000ec0)) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xc, 0x4}, {}, {0xb, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xa, 0xa, 0x1, 0xed8, 0x7, 0x8c, 0x40, 0x925e, [{0x101, 0x2, 0x200, 0x3}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff1, 0xb}}]}}]}, 0x5c}}, 0x20040054) unshare(0x2c020400) r11 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00') ioctl$NS_GET_NSTYPE(r11, 0xb703, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000180)=@bpq0, 0x10) sendmsg$nl_route(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="580000001000010400400000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="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"], 0x58}}, 0x0) ioctl$sock_bt_hci(r2, 0x400448ca, &(0x7f0000001300)="8db28b23cda70802d2f22c5dfe2ebc5f9cf9f0dc5f37699280abcbf3c27f8ef1f2a201e95626daaee6386dac6b97f7d230713489416b8ac0d659484cf05077b56cbf9b3538050ad051210d778064163fb8b661d507ee330af81a9cb89305ac08005b6f82ce8decdec07329967be1af5d639b81f5fd1a04d058fa59f3f8e8cbaa6e98f6af90e3222c8e5548e4433526adfc50b5c353bded00d27585cb93277b7519aa9ee41cacec4ffeb7956205d5d33028daa7e3b15cf679cd3a2fc8b33416e7c7e93c144bab477d55077aec6ac928e07b3fc1cbb2d14764000716cddb979233f764f99f738e6909068a840782cc84ef7e8fa1a9d82c89bfe0e64da7307e529dcd9939a0eb759aa23244f9ad4cf1a78370e6d962e31d9828cbaf13ddfc54f7cd66377a08fc5c8434b9d334c74ff346f4f46f46ff269c315726cd5dd3063d4fac3b9f0af420cf05646ce0fffdc99ae92b32671c3e332b4d036213bcf237b06f5069821481b360a95295494586e44c221b7f851661eead751388a5cf5f581ba230b7e34df2ee34c93d16a2f90812273523b2e48865059c808e2b68e0b0fe62e48d2513c59f28d32164e4d491f21bec69e85873a14d76159f7d746b83db8a3c7bcacd8d706b62bbc20f3afab8ad9bd5a52dc0d98f5599456a0253d7554ad6c7c4e6a928e603feb3dd38a1918c611479fc309d7fe446ebb1daf9e9d544f971d6e8205099a42d82799460e7f330cbb59026cd4c103922b1cdbddcc7140895da71c0678e56f01d690a7be9f2da56392a05a706a2faab05bce250475a9f1339b9a9d10fd1b5b26d22fd8f1329dff3a8bff9431aabc49875ae408dddcc54b5b0ad6dfe76ddbd8be9e53b2d1ff58e71ba20f30f0b49595e73b81df229fe603d0805733e14be806e6c88c95b5c4cf6523af74fedd2a2eb6c8e5d78f49f965eeeea5989dda2e34e19c16a0f6cd1b039df611415a19d4386e8cc8d5bde197f808d25f7c7f46944c7f670da62f45ff19e02ffbd3a99de664f836d85668b1b0994edb196677f13c6b7891f38bb71f9589bbc997ffc75c0365eec39c1ecb3b0ae265d1f8990ee15db3b6300f3d801d9b07f3749cf450611fbf87c558a79f3629b17bce400cb77edb6892584cef84a13e44201725e03523ca75021a2eeb16e7bf109a831d0bc399e6b9c9a1f9326ec57d2dea796063e994f9f725e8a99acbc6ffa76872327119611b4e46483eb49e2bf22c50101a154f06e5db7206e077e63f9cf096c6d0f18c17643c4625bd03d52abfc33278cfb4c68338404809508b9218229a9ca597746fb2872ade08d5e63dc607f965cb78442b50f0aff8c4cecb813cee56d2b171184650a1f58089c2c36ae7362c407717219e373ef5a28e51e50757d05c0fe5a1a5f6b51c2b34171a24ea4a1bd029cffd9cc8a31f84f1c8ebbb94a9c62394cbbfc648a9ad4fbfd140de35197854019780cf27946897d88d91593567544335ac2864a10d49f6b63de104c892d5c54c457b9a6f938c645debfc938fb9eea3a8dd73a23e9fc658d542055cbe9100d7e6abdabcdedd61d4fe385d16e20d52c16d8196cee5ee9e943a0e1042e0da4622b423cb44ddfe322ee071550a925aad32a5bdc7362bb7fc54dd48a79826855d425429773b61f6471efc91f3d2184ac4a106ce136cd5b39e83671a39397cd4a621c528952bb61a7ed0a238eceeb41a9b53547092582b992cd95e972881ad8095d56284c0b2190ae647ecbc1ba1f5facd4a0cc0ce5b12ea1f45ec6b0ae79acc17358fbf5a908320e3c2f429fea96ee3b00acecf589b66e6e7f1110879d278bfad5429a60d09d01cd21bdc88b70ebfcd0181265113f015cbd0d80ed633b09f34714473317fd2029762322d9e9459c6792c14a055bbe38babfef4f65177b3b315339a6d40dd4afe41f5b51c6160c097c98376a9ef34e99e2c911804fd65ed348d0556460a75e73005ae265992a5bf791a8bb1e0f42082c3a966c4772d50e9bbc09edd59cbadfc69f62d0e6efc23be7fe5a5f7d571353ad548a000b0e5d462978578bf2a7721fcf1cfbab47c10b4f4f06c7c1e940799be9cd168c518e0ed7b0aa636fb737e95e15f11649ed03f1f1eb13a712cac43765cd98d373c7d99cfe0dca5cdffb2cc8584de4b2a675f3cf6acffcd66b3eb1733ca531a4bb1cbca003c7f76ed15c6371383ec6786d0c5efd3fb0f670670159ace535a821262a5af5c11e5e5f941f84d82b22754c1736650bb4b187f80812a14d776971ec2a64947c38e93d25955e49de27496ab20f0cdd20d0c5d8948c8561d0715e4ab81b5965d3f95da101d850e2aae6c7e06c46995a6569b4498c04af27e6f26e479fc54644a976e424eefd8076c8e9016501db4a073c0d0939a7447aadd6ddc8c204f02407458e25f80bd8c93a02e1418372d9e491e0cc66ffa56d630b14617eb9053e4c28c53a5cf469f20326f5c67accef049367dfb7fd5b7e8dca93ab4c1995b6641e787d735941e8cd556137ee843209c23ce617bd83b9156d4cdd6395b486cde918188667371a5ef3bdc7042f9e4c1eafdeab8a8c4470aca4186588f3f1d1930e577fe71717b954c68f4d65ce76e40ca0f1eb141420cb33ff612c698959c469aadee614856173fb5003084b56a977ad1b6d047f1227253ed18254d39596b7eac41f947b485bc0aed627e6326d732c6c75e3e4d6bff62eb9143d6122ab4285eeec33fd966f5cfb5dd437c725061ce56bc29f2f8a45de76e63802dc3500a3c15551416182783f5d734d18878185c2e71d55b63b134e0bbd2f7676bd899cc40a94f329baefb314365409cd0b698761d89c6bd77684bccb05af8701462e21011038377768767a740748532a857271eb7c659d54e0b36472b3a0652469b5e4420f3314d19a2c4035da450714bffc33b2af3214ab2368d66efedb47333662edfcb4d9703eed833b36a8e063db02c49ee4081b81124871d22bbfcc1e8ac7b233674957d37a8dea21de7cab2f2c2a84b76e0c6adf9dad50e48137de39027744f0874e33cad80e07460a95f69a34f38d125b0e25f6231dd42c3fcb28af30d4cc6715955296cfd8a5f51e55c3d998168d44208e9c24523eb147f655036f75853f8e78080fd0561c687483030c4582e1037e6a55d0612f62324850d3eaf9afe8f9e0d07a0377bb8a3471ef0c95805820a3517d30502e4d8e24a3fca13b0431b4fdd8cf019ee2af81ed68e1ba0230fec92f308603ec833eb4767fb41b4bc30000633a34f06d8aa4996ed95d7d8b6a9f274af668b5e917a6b166933fdb48a81228207bedb8ed7e3d705ec5cad7f1df6d29fdddbaebb96cd71da48097b536aaf7874edd349a6d39f98fbcca14138c2180c2b53765700c94ba914b6edbf4e9f70c90c0393d3bf582f7241588fee02a9b0006a6e33da5fe1276629a4cb7b6390f00bde67fe3ef1d7c760a34ebe59392b8fc96a2424c22364481e4edc5c051552406029fe6088a397b0b66c412baf1a60777c0dbe80626237cd4d52e8f99c1d48e9a557799365419f0f6aaaa8d08feaa11e0e1566d0d3cf0e65b92492aa0a921d3e27bcce6d66b1d842ce3fd819f597572cb56bb19bd3bc33e113ac7cbdfc8f2050c33cad2f2db542de5c02cb6dd2769644b82862522524624c5b8e879968df3012729c40e01fda812d195647bca94e416b37cb082548923c5f5c12d2aca7a5ff2259c4affedf32231d54d981888df09602f69f8395a9938c119adf32e7db578b18a36a7f8469885de2ee7d2814920fbfdb609c472e87050a0a660fb8386d9285ed263f4a29816153dfff99ed1f4971a1512c45ccb87ff702fc5e7dc60abb2b21d7fafc9098ca4f5b0d26c06cb426b80824f8bb90df2736ad7285c4a454a982aa87ebcb1623739f0fb8adc1c3924905c09812868d2a85c4b3c0dcad7e95930aedae5ac496c0260d2c0bf008767806383bae96fc0ed7572906fc2dd2af4d7a2c9ebf70ae53321cc0b195a7aae4bcfeb0e74e710b13528c33d838f17087d8ac720194c446257a025c901aefa29d7862c0d4c22cb7a413f512cf6a1f638601c059816cab1557f83f26cd347e22a0fe4cdab5dbc54cdd102da7661e54ccd4c34d3a30a6192a42c29c824dc5b888651ac091f18d9d52c10ad2faf2b8f957a115c92c90e26d784b12bd6ee8e110425c65b77b99687d041af8e5182ed5aa47a35862b42119c60a29066f5386abe81b2f17338d333df34e62e7a9938b0421edbe2c02c638c120fc4f749e8f561fb3ee4492675342baf259fee07364b675e2528d4f05ea05cc768a74bc2c5d8c24642b6bc7dece9ab7088ee958e38a454a5acc648b9d58889bc8955c978aeed9bd687f0e5e57daa41abd2f3eb594549e0ef8909470ca37aa9ca5eaae88a41b3332e3aa5117b34d901faa3b27093910c2494f824ca80a800f0c7efb150ad5cd658d99f78d7ba9277646c86cb12ba47317e0d0fae09d8d6d2b7908727bfad57075b211202ab749d37ee8ce8b8c77f6fecea9443021ddea00b47419ee32e0d564281c0f41044a641a87d8bd65ad83b4e9ce3503e2ef040ba6ade33d2d02fa2b183583bf3bc0215908c727b9599fd2a9eb65218b2b030a6ecea5e69872d2dc7ff776797149f2403bb2a1a95d682ac6799889bc2f7c16b234fd3078fa4c838041d734a61fdf61d6c0a74b22124332f4b32f59eaa23a2616f3009685a3a927b3984e977c1ab7809b33957d7147697483ce28516f721cd3a7e0f2629fe5c342b244a41d4bc0cc22ed769adfcd132315244d67ec1fe0524ff422a0fbfad440fb4d06651cc251b60a52d0362ea5f87dc26c33dcb993604934f7a837d6e6f51b9ecdfc6618cf8bb5a7df5e64bb9c842bd4f82ebda97732a8f8d7295b68433ef3f58ec48719be4be1b894aecec2d12bbe0227f394ce478f9552d493e57732fe055decba722e3c67a4e13bdec18273300a4d209191268a40940f1d6b99aed051fc2c3c54f7a12db9f035d39c604c3339597da5d772b07fd1126fbb6ccca50f11a88ad8356289aa0e8bd1ce2dce55bd8d0545789870aceeedb337d49ae1c1112c3b49924839db3205d1516994263e99d41690c1472342b959c8d383517c66ae7d96de03031448154db6af3b0b23ad64e9d4b3c616fb1a0f9e5e0b28d77c57464787ef3181d99c404b4c2a2eb2bd580479cda9eed75baf679eb63197bb58d1e73b55154d4b0d8a22026e978cc24c52841633c133229a65015010367216f8f1518722a4791361e09d2183c0bc24b96b127e55fd3e9f96d059309889b314adcb41dc40b8d7f55922584f0d10fbfc1a2c4f9faf21025fd2530f3748426e990a3a8ae5abf51291175347ba7b4b48e0da726d6bde64133b1390f56ddbde1fd450e466217c4a430a0f8ecfb0d56cc3d5e4a55264cf3c3fc1f3a78d8ced8fed74dba182ea8fff6080cdf46c1abde480dd52098a6acc1df38dbd6b665d08dbc0384a1cc70ca6e300c8bdacc3f35c090f45f315b406986d57ab9cd067816478d4284bac97a16d5505ad4ba139def034cbd0129e79998a7c9250dbb43e8a71531d2f4942fbad9171422d6ed7ba2f2f41753d28da2950afd8d375ac7d0c3ed616788f34dc385768e615d73fd625cd830dad0cf6b604749c46f1d0ff81c0ff6177e35d20a43f5379a30393bc69221f4aeb59f93343b3cf9eacecb4beec829173f4b933c301216b3e7d2d786891dec4df2790c344a6beb6baa423c04a9e85f0a3426494492db161515d38aa54c1dcd716707ceea722102423a44de7c8471e6513ba00a94d279367c2bbe6b1f03") 1m5.598080998s ago: executing program 3 (id=1744): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r2}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d6fe682c6100000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4044001) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000003d00070100000000fbffffff037c0000040012800c0001"], 0x24}}, 0x4) socket$can_bcm(0x1d, 0x2, 0x2) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vxcan1\x00'}) (async) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r2}, 0x10) (async) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d6fe682c6100000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) (async) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4044001) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000003d00070100000000fbffffff037c0000040012800c0001"], 0x24}}, 0x4) (async) 1m5.321400587s ago: executing program 3 (id=1747): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r4, &(0x7f0000000180)={0x2, 0x0, @multicast2, 0x4}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48814}, 0x14000012) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000011d80)=@newtfilter={0x43c, 0x2c, 0x400, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xfff1}, {0x9, 0xfff1}, {0xfff3, 0x7}}, [@f_rsvp6={{0xa}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x0, 0x1, 0x21, 0x6, 0x4, 0x9, 0xa, 0x6, 0x3, 0xe23f, 0x243c, 0x58b, 0x1000, 0x2, 0x5, 0x6, 0x80000000, 0x1, 0x80000000, 0x7, 0x1, 0x7, 0xc7, 0x7, 0x5, 0x7, 0x200, 0x7, 0x7, 0xde7, 0x3, 0x88f00000, 0x30000000, 0x2, 0x6, 0x3, 0x5, 0xd3a, 0x3, 0x5, 0x4, 0x0, 0x0, 0x6, 0x39f0, 0x72, 0x7, 0x0, 0x28, 0x91, 0x4, 0x2, 0xffff, 0x3, 0x7, 0x1, 0xcc9, 0x6, 0x10000, 0x0, 0x1, 0x2, 0x9, 0xfffffffb, 0x7, 0x1, 0x0, 0x9a, 0xe25, 0x5, 0x9, 0x80, 0x200, 0xffff, 0x0, 0x7ff, 0x4027, 0xa, 0x1, 0x4, 0x8, 0x700, 0x0, 0xe97, 0x5, 0x4, 0x4, 0x6, 0x0, 0x10001, 0x4, 0x7, 0xb36, 0xe, 0x6, 0x6, 0x9, 0x7, 0x8000, 0x2, 0x3, 0x20, 0x0, 0x0, 0x101, 0x7, 0x13, 0x10, 0x2, 0xc, 0x5, 0x7, 0x4, 0xfffffffa, 0x200009, 0x1, 0x1, 0x8, 0x81, 0x2, 0x0, 0xa, 0xffffffff, 0x6, 0x6, 0x8, 0x8, 0x8, 0x6a0ff34, 0xfffffff8, 0x0, 0x3, 0x7, 0x36, 0x401, 0xfffffff5, 0xac4, 0x5, 0x40, 0x80000000, 0x1, 0x85f, 0x3, 0x8, 0xfffffffc, 0x0, 0x4, 0x3, 0x5, 0x3, 0x300000, 0x1, 0x0, 0x8cb, 0x0, 0x9a89, 0x3, 0x1, 0xd, 0xfffffff8, 0xffff, 0xfffff1b5, 0x94f, 0x7, 0x2, 0x45, 0x8, 0x7, 0x2, 0x7fff, 0x2, 0x401, 0x0, 0x10000, 0x0, 0x4, 0x0, 0x6, 0x3, 0x1, 0x6, 0xffffffff, 0x1ff, 0x9, 0x951e, 0x10000, 0x2, 0x7fffffff, 0x6, 0x3, 0x6, 0x9, 0x1, 0x7, 0x3, 0x9, 0x2, 0x3, 0x4, 0x5, 0xa, 0x7d8, 0xff, 0x6, 0x2, 0x5, 0x11, 0x2e0c, 0x1ff, 0x0, 0x8, 0x6, 0x4, 0x3, 0x80000000, 0x9, 0x4, 0x5, 0xd, 0x6899, 0x2d87, 0x2, 0x8, 0x8, 0x8, 0x5, 0x4, 0x9, 0x1, 0x3, 0x6, 0x9, 0xff, 0x2000, 0x4, 0x75, 0x1, 0x4, 0x4, 0x0, 0xd, 0x5, 0x433, 0x9, 0x4, 0x5, 0x7ff, 0x200, 0x84, 0xfffffffb, 0x6, 0x5, 0x7, 0x7ff, 0x80000001]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x20044010}, 0x81) recvmmsg$unix(r5, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/4116, 0x1014}], 0x1}}], 0x1, 0x10000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7000000010000100"/20, @ANYRES32=r1, @ANYBLOB="000000002f95abbe480012800e0001006970366772657461700000003400028008000100", @ANYRES32=r1, @ANYBLOB="14000600fe80000000000000000000000000000014000700ff"], 0x70}}, 0x0) 1m5.053228856s ago: executing program 3 (id=1749): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x15, 0x301, 0x0, 0x25dfdbf8, {0x5}}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r5, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x22024800) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x6}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x25, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) unshare(0x20000400) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000140)) r9 = socket$kcm(0x10, 0x2, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_TIMESTAMPING(r10, 0x1, 0x41, 0x0, &(0x7f0000000140)) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r11}, 0x10) connect$ax25(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @default}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default]}, 0x48) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081064e81f782db44b9040a1d08040600000000f309a1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4ee0000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd400d65afd67580ae4edef5d2defd5ccae8d3fb7c27a1059ae31c6", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4) ioctl$PPPIOCSFLAGS1(r8, 0x40047459, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000500)={r2, 0x4, 0x60, 0x4}) ioctl$TUNSETDEBUG(r12, 0x400454c9, &(0x7f0000000580)=0x3) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0x54, r5, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x800, 0x34}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5f}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x7, 0x2a, [@challenge={0x10, 0x1, 0x68}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040811}, 0x4000080) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) 1m3.946817s ago: executing program 0 (id=1758): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x3c, r1, 0x821, 0x70bd2c, 0x2ddfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x40480c4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) connect$pppl2tp(r7, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)={0x40, r6, 0xa29, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d784308000100", @ANYRES32=r5], 0x40}}, 0x0) r9 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r9, 0x65, 0x3, &(0x7f0000000040), 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) (async) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x3c, r1, 0x821, 0x70bd2c, 0x2ddfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x40480c4) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000001880)={'wg1\x00'}) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) (async) connect$pppl2tp(r7, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) (async) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)={0x40, r6, 0xa29, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d784308000100", @ANYRES32=r5], 0x40}}, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) setsockopt$CAN_RAW_LOOPBACK(r9, 0x65, 0x3, &(0x7f0000000040), 0x4) (async) 1m3.449161814s ago: executing program 0 (id=1759): bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)="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", &(0x7f0000000100)=""/99}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x11, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1a7, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@alu={0x7, 0x0, 0x1, 0x8, 0x0, 0x30, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='syzkaller\x00', 0xda55, 0x61, &(0x7f00000002c0)=""/97, 0x0, 0x24, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0xe, 0xf, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x8, 0x0, &(0x7f00000003c0)=[{0x5, 0x1, 0x9, 0x2}, {0x5, 0x5, 0x2}, {0x1, 0x2, 0x5, 0x5}, {0x4, 0x5, 0xa, 0x6}, {0x0, 0x2, 0x7, 0xc}, {0x0, 0x5, 0xa, 0xb}, {0x3, 0x4, 0xf, 0x9}, {0x4, 0x1}], 0x10, 0x4}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@map=0x1, 0x1f, 0x1, 0x4, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000006c0)={0x4, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@map=r3, r0, 0x20, 0x30, 0x0, @void, @void, @void, @value=r4, r2}, 0x20) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r5, &(0x7f0000000740)='cpu.pressure\x00', 0x2, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_group_source_req(r6, 0x0, 0x2c, &(0x7f0000000780)={0x9, {{0x2, 0x4e22, @loopback}}, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x108) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b80)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x230, 0x0, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x8e, 0x6, "025d9528ff610fca312c24d30fa85f3ef569972576e880fc6775d8ccd59e682596ef5649e7da37640a6192dc60bbac329924a54fd433ec0b9fd737649fc30a2543d326838ea1dc1dafb7de97de5e6eba1234ac4f14a7680a57602fe8b53c83ecac37a57a3d62804fd8372ccbfaab2c7856547527feb40b513e56ce58278aa7823b639d331f76b012c42c"}, @NFTA_TABLE_USERDATA={0x5b, 0x6, "10a81497252fdc4ec64c84e6e559419b1988e35b2af8a00bbdc5ae4689af2e83a4d6d313d5c16ef829e6ddbffbdbed62039432277d3ff69ac8700a6ef464e647233164727bebcb8d1bd99433ac746e47a6136e04f49514"}, @NFTA_TABLE_USERDATA={0x103, 0x6, "4e149ddf706d78d18c96dbb2175e3592992de7eb2a7f7d48eefc61014032c52afdc467cc8d2ddff73f8469cabd1d3a56fc9a6bfa8034b320d596a08838287e3557c965336ed8ca1631c07c4a153bf36d32fa5f2935748b63eaedf9fd61b89b13a84d1f9601cf2be024abe546e7883bdb0f9951d267f8ce566f5002b67c2356764346fc0747b75d8bb06b3d280d777ee1d539cc5e2e20a87ba6109ee2d86b44a29929098d95b14ca7a64038dc6db04ac88ce244520f5945a08beca09c4807fbcaacc4f3e9ce034b9b1b398d410f7ed58cf8415e309a5c09e21802f4b0766ae448eb53cdf3a506fc33058e9f970c197be9ade0cbe3b0be3a33dfc0b53a873891"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x258}, 0x1, 0x0, 0x0, 0xcb6f92a1a7f678e}, 0x20000004) openat$cgroup_pressure(r0, &(0x7f0000000c00)='cpu.pressure\x00', 0x2, 0x0) openat$cgroup_freezer_state(r5, &(0x7f0000000c40), 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r8) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000cc0), r8) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d40), r8) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000d80)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r9, &(0x7f0000000e80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1410a008}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x4c, r10, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0xa6c2401b996c15f7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c0}, 0x4000015) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000f80)={'ip6gre0\x00', &(0x7f0000000f00)={'ip6tnl0\x00', 0x0, 0x4, 0x8, 0x8, 0x3, 0x11, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x10, 0x20, 0x1087, 0xfffffc01}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000010c0)={'tunl0\x00', &(0x7f0000000fc0)={'syztnl1\x00', 0x0, 0x40, 0x10, 0xffff98e3, 0x3, {{0x2b, 0x4, 0x0, 0x1, 0xac, 0x68, 0x0, 0x9, 0x2f, 0x0, @multicast2, @broadcast, {[@timestamp_prespec={0x44, 0x3c, 0x68, 0x3, 0x4, [{@local, 0x8001}, {@multicast2, 0x7ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@local, 0xd}, {@empty, 0x29a}, {@remote, 0x400}, {@multicast2, 0x3}]}, @lsrr={0x83, 0x17, 0x17, [@multicast1, @local, @private=0xa010101, @rand_addr=0x64010101, @empty]}, @timestamp_addr={0x44, 0x34, 0xd, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x22}, 0x9e59}, {@rand_addr=0x64010100, 0xffff}, {@loopback, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0xcc3}, {@empty, 0x7}, {@multicast1, 0x20}]}, @rr={0x7, 0xb, 0x92, [@broadcast, @remote]}, @ra={0x94, 0x4, 0x1}, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001180)={'ip6_vti0\x00', &(0x7f0000001100)={'syztnl1\x00', 0x0, 0x29, 0x2, 0x0, 0x3, 0x0, @private1, @mcast1, 0x8, 0x700, 0x2, 0xa}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000011c0)={@mcast1, 0x0}, &(0x7f0000001200)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001240)={'syztnl1\x00', 0x0, 0x2f, 0x7, 0x5, 0x3ff, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, 0x7807, 0x20, 0x0, 0xed2d}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r12, &(0x7f00000027c0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002780)={&(0x7f0000001300)={0x1454, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1208, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_VALUE={0x2e, 0x4, "4341bb67ce50afbd98965e2b6559c1e998208441b43c5b1719690c996eb0202611b5e65df45beea41956"}, @ETHTOOL_A_BITSET_BITS={0xe0, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\'!{)\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xc5\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x12e3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x995f}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wpan4\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wpan4\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_BITSET_MASK={0xef, 0x5, "aae08065904ba76b41f0fa05714f8c55dc8817ecc73375338cb21d52912dc45a51250bf02dbae1dc7d45fd13f4521759a7f3f734b2d864a0588c65c155cff0f15836a3b90e9accb64ddbb5ef3f50fc0be5a4f7e9b1a70c32d44893074d2a5c0da4ecf2a82c2aed094745f7bc4c5dc323c9bfaf7d83f2738f076a134adbef9dc5f0debea034f8268d2137dcd2c2c9a79c6aa4aade9f3fcc48fd1a2aca9bfdd1cb2b5d9354cfb631a4b0341976fae9287f3ad71ebde12470644bb02f0c4aaca9e6327c2939e86b688334cc643c7d30137c235abd3adf6db5b3842008a3d439a211ab18cf0b993e026d166b0e"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x150, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x98, 0x3, 0x0, 0x1, [{0x4}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '%)^,-&*-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x684e}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '({@)]]-,\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '#\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'cpu.pressure\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_VALUE={0xab, 0x4, "91dfa1cd2d59ad97221a990faeb48cba1021d0e2a6e095f751f831ab9b9ca7c59dd3ab455421eb494bbaf38319c7bc6f65b1364b7a6b127fbed2f7e02818efac19b56a087527a5da2fbb5dd57c9b3f8d4164d9aedc5d5f6c4b22b188e507ccc056f52c770a015c47c2625d67d67b9673b4bbcaf0af3ccb4ad9d0866e1a4386135c8cf145f3c359dbdc7caf09a34febaa60f33f974cdb1d008f4e976835bd5fc4a241dad8aa866b"}]}, @ETHTOOL_A_DEBUG_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}]}, 0x1454}, 0x1, 0x0, 0x0, 0x2000040}, 0x44844) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002880)={r1, 0x58, &(0x7f0000002800)}, 0x10) sendmsg$IPCTNL_MSG_CT_GET_DYING(r7, &(0x7f0000002980)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x2001000}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x14, 0x6, 0x1, 0x4ac26b0f29476225, 0x0, 0x0, {0x2, 0x0, 0x7}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20004011) 1m0.880459106s ago: executing program 0 (id=1761): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x409}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x376}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0xffffffa2, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a0102000000000000000002000000090002797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100010000000000000000000000000a"], 0x64}}, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000700)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-neon\x00'}, 0x58) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x214, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) 58.285111717s ago: executing program 0 (id=1771): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) (async) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) unshare(0x68040200) (async) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$alg(0x26, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x149a40, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x149a40, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180004ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180004ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000013b80)=ANY=[@ANYBLOB="280000001b1401"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x10) (async) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000013b80)=ANY=[@ANYBLOB="280000001b1401"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x10) write(r3, &(0x7f00000000c0)="510003000000", 0x6) r4 = socket$kcm(0x2, 0x8, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x10448) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r6, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r6, 0x0) accept4(r5, 0x0, 0x0, 0x80000) (async) r8 = accept4(r5, 0x0, 0x0, 0x80000) setsockopt(r8, 0x84, 0x81, &(0x7f00000001c0)="020000000980ffff", 0x8) (async) setsockopt(r8, 0x84, 0x81, &(0x7f00000001c0)="020000000980ffff", 0x8) write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000002034a94030008000400ffffffffffffaaaaaaaaaabb080045f0002c00000000002f9078ac1e0001e0000001000065580018907804e700000000000086ddffff000000009821d9f02f84492bbbd4be4a7a07f7270fbaebe2e58bf3bdde78b12eb4751b464bae68804e044ea798fa712ba4216e80c8c72337f678"], 0x48) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) 54.336571749s ago: executing program 0 (id=1780): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, r1, 0x201, 0x70bd26, 0xfffffffe, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x31}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x4c}, 0x8, 0x3000000000002, 0x3a000000}, 0x844) 54.104360899s ago: executing program 0 (id=1783): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket(0x10, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x7) socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)=ANY=[@ANYBLOB="94000000", @ANYRES16=r5, @ANYBLOB="010000000000000000000a000000800004"], 0x94}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f00000002c0), &(0x7f0000000240)=r7}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0xffffffffffffffbe, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd25, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r9, {0xf, 0xf}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r10}, 0x18) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x0, @hyper}, 0x10) accept(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x50) 49.959731981s ago: executing program 33 (id=1749): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x15, 0x301, 0x0, 0x25dfdbf8, {0x5}}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r5, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x22024800) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x6}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x25, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) unshare(0x20000400) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000140)) r9 = socket$kcm(0x10, 0x2, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_TIMESTAMPING(r10, 0x1, 0x41, 0x0, &(0x7f0000000140)) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r11}, 0x10) connect$ax25(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @default}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default]}, 0x48) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081064e81f782db44b9040a1d08040600000000f309a1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4ee0000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd400d65afd67580ae4edef5d2defd5ccae8d3fb7c27a1059ae31c6", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4) ioctl$PPPIOCSFLAGS1(r8, 0x40047459, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000500)={r2, 0x4, 0x60, 0x4}) ioctl$TUNSETDEBUG(r12, 0x400454c9, &(0x7f0000000580)=0x3) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0x54, r5, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x800, 0x34}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5f}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x7, 0x2a, [@challenge={0x10, 0x1, 0x68}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040811}, 0x4000080) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) 39.06484586s ago: executing program 34 (id=1783): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket(0x10, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x7) socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)=ANY=[@ANYBLOB="94000000", @ANYRES16=r5, @ANYBLOB="010000000000000000000a000000800004"], 0x94}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f00000002c0), &(0x7f0000000240)=r7}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0xffffffffffffffbe, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd25, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r9, {0xf, 0xf}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r10}, 0x18) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x0, @hyper}, 0x10) accept(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x50) 7.026969136s ago: executing program 5 (id=2031): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000090000000800000002"], 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000016c0)={{0x14}, [@NFT_MSG_NEWRULE={0x124, 0x6, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x7fffffff}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x7}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xafe}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0xfffffdb2, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0x43, 0x7, 0x1, 0x0, "fbaab35039f8346f6c387fe3fd09e8538f01ab5ebb149dc485b3dce71d0c10adbcee0c58a8ded980a0df0400"/63}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6003}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1a}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0xffffffff}]}], {0x14}}, 0x14c}, 0x1, 0x0, 0x0, 0x20040015}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000e0e15804000000148dc79f07ee000000"], 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x50) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls}, 0x94) pipe(&(0x7f00000001c0)) socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d0400000004000000040000000000000000000010040000000000000000000009030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x20) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) 6.596618396s ago: executing program 5 (id=2033): r0 = socket(0xa, 0x2, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb79"], 0xfdef) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000300)="06", 0x40000}], 0x2}}], 0x1, 0x890) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040), 0x4) 5.452512215s ago: executing program 5 (id=2042): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123f51c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e3962dcddef6af1a11972a6b4975022278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd0971d379380bf63432872cfed453870000b219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d3f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a74e04bde740750fa4d9aaa705989b8e673e3296e52d3112874ec51d6fe048ba6866adebab53168770a71ad901ace383e7927de217d6bf74daf41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafce5c1b3f97a297c9e490f241999085afabdd529f62ca0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637f99f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec737555392a0b06491cba71f897144910fe050038ec9e475e89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb6179d257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0117c9b737b9b59418006c1bc1aafa2768e82597251e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b101000f49e298727340e87cdefb40e56e9cfad973347d0de7ba4754ff231a1b933d8f931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf444b032dad13007b82e6044f643fc8cd07a97e2bbe636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935f602325984386b21b96492ae662082b56cf666e63a757c0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e71338a40c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2603bfab96831957a08e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d01af43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0fd9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627ebe92d48aa5fc0a7bf1b5108b34d22ad004de8274c22c8ba823d964969c9f02bb78c598fa8701b000884de710b54e5ab2e8ff0c7ae23e0b601ac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105b65007c8ff1f00a8ce7e31f7c9c3e3fa61aab967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa1904122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700ba363ca3182105960bef3378a980000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450cfe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c32e4f1f22af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b404797056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa58291c4eb9d4e08ad7a9c5f04be1ab59719a8200007bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b7f76c78ba0b44ec0bdfa0d32d7030000003a073b12eb579032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e02b7cd25385f3b9628471b4364987b0b2c82a8b0f976387ebb62ead0e1b761e6ec9b824fe006ea52c0c469e3bd8fed05a486bd5511144ebb63d56d61da5fcb58e196a8923edaf228b0cb96b856b15c90b154494fb0cff768b3417fcc89acb9b9b4f8581c82ff3121b5920f4e71508eea4341ec618f4d9110928ea8dd17e36f3beb0c07d911c00eb4054ad48cab563c5ad97d732c3653635df7600091973d44ff94ac6d670ecc085501bd91b586adf858b41d918fd58f8577adb541857dbbf33be97c4809c6595ebfff19b34cec7fd877e8f2aad6a1a6a4ec6dbb3de42bb2e75b4768d139d7b7ff5d51e6863b6704901b59fd92495608395fce98c267a3846b67e7a5b57d995e07dca8db555aea5a0f6f1cd85d791f22d06ff37fcbb22b2d9296b36faee22e513b276fc8494ce31699343278aa8f531ee549d2ba495059c80d5748d8a0cb19df27338aaafbf0849c31572d17a786383b3f619212651a076e5148fa6421f5405e65ee31e6fbd510d92c17fe12a7f203066848e2a9adef66ad7ae8edea20fb8c7233de3736949e15b88699c2f8576060cf95d2593828abde6e2eed2a717655782ae9e589f5de9792c810ec07a842bca96e594f13211eae7ee1919b7af1e33ff726792cbb1366fb8a3684370e35122b0ad40f55846ca7d39cf6f9a1cfa5460f537e89e1c5f3cd10a3d8ae3ecec0c7e4114aec30742d88f313d74447723808da0889e34b31c13a79b8bb105cdcb234d56246bbf003c0ad03ff20f573df9604720d652b0a0cc5d90a284b5c7824bfdc4e3f18eaf9820ffbd8c4f32c8de631c181ab76505dac753fec759b0414cb3c5dfa02b6a3b93ff79bcf8c613b4a9124923e7e6ce74266fd78564000000000ce0d3ac2350502cf4a410152ee893d57622bee2b52df83cd30b4ae17d507fba05e7055db7e6d4cfc085773b900ca50bee4d49529f24bab389fb87fbb481340e8ce1810727212dc5e96d99de07611cb588a5d8b5c510c1f5b3fb568971646821b50dc2542003eb60a4ee9398ae4b6681c29cd921fb35b12ca111f12c59ac39dde4bf4f7524362304610979f5199ef9d271af60a421e29c6483423157ed4c2721123ddf33313a97ec1a55115b6df23157ad17b5e544db26c46d31b2e7375c37ace025955c9482e1ef841554c202c356842233c57c258f8f2043b4b6de433e8a2fb9365b65496c5777c1a1a223763d51190a24fb4047ad7ff6258f1b000000000000000000000000e0ef07726228fb150d09f697ee3db6cc096676225780d422fe917a5c57bedabb42399727b386e979dde3b7243dad1f78e8592937866cfc017f3a8ad31c53115fb7f3452bd3318c4a17cc80bcab32d9ed35273c3c930719ddb5b757f9d85cc86ddd"], &(0x7f0000000140)='GPL\x00'}, 0x48) socket$kcm(0x29, 0x5, 0x0) (async) r2 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r3) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) accept(r5, 0x0, 0x0) (async) accept(r5, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000000)=0x20000b) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f0000001bc0)=[{{&(0x7f0000000240)={0xa, 0x4f21, 0x400, @private0, 0x3}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c, &(0x7f0000001680)=[{&(0x7f0000000080)="9265e0", 0x3}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r6, 0x1) getsockopt$bt_hci(r6, 0x84, 0x80, &(0x7f0000000640)=""/4139, &(0x7f0000000140)=0x102b) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xfff2}, 0x8) sendto$inet6(r7, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x1000000, @loopback, 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r7, 0x84, 0x8, &(0x7f0000000000)=0x1000, 0x4) (async) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r7, 0x84, 0x8, &(0x7f0000000000)=0x1000, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000088fe508a8500000004000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r8}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f00000016c0)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f00000016c0)) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$sock_int(r9, 0x1, 0x4, 0x0, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x60}]}) (async) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x60}]}) close(r4) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000300000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a00000000000000000000008040000200000000000008000000000000000000000000000000004400050000000000000000000000000000000000000000003c00000000000000fe800000f7ff000000000000000000bb0200000004030000feffffff0000000000000000"], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 4.731859305s ago: executing program 4 (id=2049): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a0000000210001000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000040000050001100fe8000000e2390950000000000000000000100bb00000000000000000000ffffffffffffe01900020000000000000000000000000000000008000000ee0000000000000000"], 0xa0}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r1, 0x913e0000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x3000) r4 = openat$cgroup(r3, 0x0, 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @multicast2=0x80ee3600, @broadcast}}}], 0x20}, 0x4040010) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) mmap(&(0x7f0000833000/0x13000)=nil, 0x13000, 0x300000c, 0x12, r5, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r7, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 4.653218589s ago: executing program 5 (id=2050): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711229000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000000b0601"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0xc00c0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x4010, r4, 0x80000000) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0x0, 0x2}, 0x6) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x4c84c000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='fsi_master_aspeed_opb_error\x00', r0, 0x0, 0x7}, 0x18) 4.000612229s ago: executing program 5 (id=2053): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000140)=0xc, 0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000040)={r4, 0x5, 0x1, 0x6, 0x9, 0x8b}, 0x14) bind$rds(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x20010, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000080)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x6}, @cswp={0x58, 0x114, 0x7, {{0x9, 0x6}, &(0x7f0000000200)=0x4, &(0x7f0000000240)=0x1ce8bf1e, 0x226, 0x10000000400, 0x9, 0x3, 0x6, 0xfffffffffffffffd}}, @rdma_dest={0x18, 0x114, 0x2, {0x9, 0x8}}, @fadd={0x58, 0x114, 0x6, {{0x8, 0x3}, &(0x7f0000000280)=0xc, &(0x7f00000002c0)=0x7, 0x9, 0x193, 0x5, 0xae7, 0x14, 0x4a}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000580)=""/221, 0xdd}, &(0x7f0000000400), 0x28}}], 0x110}, 0x0) r5 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}, &(0x7f00000000c0)=0x1c, 0x800) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x5) 3.903043143s ago: executing program 4 (id=2054): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="840100001a00010000000000000000007f0000010000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000000000000000000000330000002001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0100000000000000000000000000000200000000000000000000004c00490078636263286165732900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048000200637279707464287863686163686131322d67656e657269632900000000000000000000000000000000000000000000000000000000000000000000000000000000000000309a40c2772c459be5053be234aed8e45909465e89f6613e24226cb9a4489c228ef7e5136e563cd5d5fdb0f9fc2b55d021a5d7306b12707388ba54dc0e7d7410836f54ee9f6edf5c88267a8e298c7447534a936b2315ceda4cfd0fb5bc9c0c58bd9da5375cf03cbc59e3cada327499f58d679eb5bab100000000d476faf05ea0c0973bc55ce60ca41ef6d975741bb68f1b38b46322a18d86079f24ca123df4e5840215b4a2845e533607b32571a77a"], 0x184}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="840100001a00010000000000000000007f0000010000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x184}}, 0x0) (async) 3.653002014s ago: executing program 4 (id=2055): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x18, 0x24, 0x301, 0x0, 0x0, {0x1}, [@typed={0x4, 0x138, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) close(0x4) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x44, r2, 0x1, 0xfffffffc, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x4}]}]}]}, 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x18, 0x24, 0x301, 0x0, 0x0, {0x1}, [@typed={0x4, 0x138, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) (async) close(0x4) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x44, r2, 0x1, 0xfffffffc, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x4}]}]}]}, 0x44}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) 3.287720791s ago: executing program 4 (id=2057): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'erspan0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x8, 0x5387, 0x4, {{0xe, 0x4, 0x3, 0x0, 0x38, 0x68, 0x0, 0x4, 0x2f, 0x0, @loopback, @multicast2, {[@ssrr={0x89, 0x23, 0xc1, [@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x39}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x30, r1, 0x100, 0x70bd65, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040085}, 0x4000000) 3.030085534s ago: executing program 4 (id=2058): bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000060400000000000000000000010500000008000000000000000000000300000000040000000200000004000000000000000000000b03"], 0x0, 0x5a}, 0x28) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="000008000100000000003d0000004500004000000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b4040004907800040a08d58838068b9100000000000000000000020000000000"], 0x4e) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x7, 0x0, 0x3}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) (async) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) (async) unshare(0x2000800) 2.824413532s ago: executing program 5 (id=2059): r0 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@un=@abs, &(0x7f00000000c0)=0x80, 0x80000) bind$alg(r0, 0x0, 0xd) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) unshare(0x62040200) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x40, 0x0, 0x400, 0x0, 0x30, 0x0, 0xa3}, 0x9c) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080)=0x800) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000001017000000440006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca4198904000500"], 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x4000004) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d6"], 0x98}}, 0x4048010) r7 = socket$inet6(0xa, 0x3, 0x3c) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x7}, 0x1c) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) write(r4, &(0x7f0000000000)="110000001a005f0214f9f407000904", 0xf) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x100, @loopback}, 0x1c) 2.819265601s ago: executing program 1 (id=2060): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000d0bc6807020000f8ff8f4eb7030006000000000000000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_kthread_stop\x00', r1}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x20000000}) 2.538994397s ago: executing program 4 (id=2061): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket(0x8, 0x3, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095000000d3031a006dd015836e4d27f5182b60bbb7c19e21eec859fe68f9428ac407630eac8eb682f5b2d86b4abf9e63ad263fec7db9338ca9eebf2218c8b9ca64bcdcdaa06fc4c7aa217fcecd9443c54143bde8ddcbc3b8ac619930206d8d0881af823d6d18c66f021c20b55013d7fb6ea7013c062d13176d71d7dad98eb976ed679fa639"], &(0x7f0000000000)='GPL\x00', 0x4, 0xfa, &(0x7f00000003c0)=""/250, 0x41100, 0x6c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40008000}, 0x94) 2.281759631s ago: executing program 1 (id=2062): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500000010000000"], 0x0}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) bind$alg(r1, &(0x7f00000005c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(generic-gcm-aesni)\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1f, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4000000000000407910000000000000670000c200000000950005000000000071a13928b72c696950a4edd77f9876d874394900f3bde847f8c78119dfbc27abc969c82ce6f6f0b2e10179582eed3525598659f1307bc7dea42e897c2305fd2a9989f18e0b716808f6491a914b82ce112e8a52578b3a8078cfd0b7d34cd51a741cdf3bdf46d174934650e575b0f5097a4d8f97c4b165abe4bb2be76d95cdba3f0b3a790af9d04d66016aeb34cf29cfd883a854803074ce6d65e4f15f11719754006007593f2f12b706682b684633803352f0e8ce93a2570ca6dd0ff917652d"], &(0x7f0000000700)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080), 0x10, 0x0, r0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0xd0}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r2, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000740)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x16, &(0x7f0000000800)=[{}, {}], 0x10, 0x10, &(0x7f0000000840), &(0x7f0000000a40), 0x8, 0x27, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x18, r8, 0xb03, 0x70bd2b, 0x0, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004e00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x40}], 0x30, 0x88010}], 0x1, 0x20000010) sendmmsg$inet(r6, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) accept$alg(r5, 0x0, 0x0) r9 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r9, 0x89ef, &(0x7f00000006c0)=0x6) sendmsg$tipc(r4, &(0x7f0000000680)={&(0x7f00000000c0)=@id={0x1e, 0x3, 0x3, {0x4e22, 0x3}}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000200)="f97d9c2cb30309542178499d8684bee56adbcaf42acb4123e5999b8410c4d28d6f9f5ac0ca223be8fe8070b1aac51ba63d31612c8896431a2e8b716c4efd96a4a0be6576c8a368e29331d1ffa88b37dfc541214a314faf30fdcebd24e590760718cc2e18d65bc24f0632cb1cbfb4479de2b92b4f245ae28358355e86b8f4d7de6d022ab2729e81f9d7f3a1e6ba1e60b9c6849f98ccf0e41229781597b1ae3b631b914506bdfbc8397eec01a7b9e95907bcd83facd4c77522c5ab1119398e3fa7a51e77be65ac05", 0xc7}, {&(0x7f0000000300)="d459c9f072ec46f72ff0d0401d3d5bd98a26c00694d32629bc3c81a4b8e1012992a3a1aed63135bb024796d027883daf9edb62b3e250de36cc9d76a3591be6b440e535b614df1a55e6bce59bd281223876cb887a19963ca7b37e028f0ed31fc75a7793a94f0f22a0d7863e5f7f3f0022b149bacfef13c519538e62274ec9eaeaa0fe5045d4b74cb6421f1a99bf61bf2159dfdadf352e47ffb77155f9ea0884994bde6351733b3f1e1026310d90c4b3ec45cdc4dab69b7f5fd1712066a2de12f2f902a8ff612d7d39d151de", 0xcb}, {&(0x7f0000000400)="91bd047416b2ef2c404dfcba1e5bb47b1d065299cdeab6a52d1af1fdddec99d773817c01a877de610bea60629ebcf2d68a9f87735015d71d73b8f38b10495bfe3eb76fccf5c9f8c2eecb41bdd39b30c2bd5d0db63b90d786cfe486400ee02405d62a2dcf62e76dbe7c7d915d0a52fc56ee25a7d55cf42081d35b662dddd4210485f041f375254f0cb44717c086005979146c97e562fc8f4978aab945fa", 0x9d}, {&(0x7f00000004c0)="2b41c2c77d8b9f25b3ae38d72709f28ae03a32", 0x13}, {&(0x7f0000000500)="e9e3f62224eee0d909bfe06498c49f0a12f3e23c971cd0a2201d5ca235dee3db99dfda486cf68f45239eef92e081f4cde08c590764", 0x35}, {&(0x7f0000000540)="835e48003fa402ebe2af99f446f3e0cf63bcad004e91b46d62982d0acd8cb14adb2a382944f1ce715c33c858a03ba0093e9d3cb5ef15c11a363a84bd80404a0be826406727f3451f9d6b662a924233f2e09d2aea5582be478d630daeb8ae5a3ad2f5be6477f3f21715ea", 0x6a}], 0x6, &(0x7f0000000640)="a2f2d8d1e7b8bcef2996bb2a66247f75c101003ee1649b9cc6", 0x19, 0x20040010}, 0x800) 2.061814901s ago: executing program 7 (id=2063): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x9, 0x0, 0x6, 0x7ff, 0x1, 0x6, 0x2, {0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x6, 0x1, 0x6, 0x6, 0x5}}, &(0x7f0000000500)=0xb0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000540)={r1, 0x1, 0x30}, 0xc) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) sendmmsg$inet6(r0, &(0x7f0000006c40)=[{{&(0x7f0000000280)={0xa, 0x4e23, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x401}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000002c0)='\"', 0x1}], 0x1}}], 0x1, 0x4000) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3a}, {@in6=@remote, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x100000001, 0xffffffff, 0x0, 0x0, 0x40000000010000}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0x9}, 0x70bd28, 0x0, 0x2}}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3a}, {@in6=@remote, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x100000001, 0xffffffff, 0x0, 0x0, 0x40000000010000}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0x9}, 0x70bd28, 0x0, 0x2}}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="05002e83", @ANYRES16=0x0, @ANYBLOB="0100000000000000000001000000000000000c410000004c0014ffffffee62726f6164636173742d6c696e6b00"/98], 0x68}}, 0x0) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="05002e83", @ANYRES16=0x0, @ANYBLOB="0100000000000000000001000000000000000c410000004c0014ffffffee62726f6164636173742d6c696e6b00"/98], 0x68}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1004e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(&(0x7f0000000000)=[{r4, 0x8104}], 0x1, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f0000000000)=[{r4, 0x8104}], 0x1, 0x0, 0x0, 0x0) r5 = socket(0x1e, 0x4, 0x0) socket$netlink(0x10, 0x3, 0x4) (async) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0}], 0x1) (async) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0}], 0x1) writev(0xffffffffffffffff, 0x0, 0x0) close(0x3) (async) close(0x3) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmsg$unix(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) recvmmsg$unix(r5, 0x0, 0x0, 0x400122a0, 0x0) 1.830569052s ago: executing program 6 (id=2064): socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet6(0xa, 0x3, 0x5) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x5) (async) sendmmsg(r0, &(0x7f0000000480)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x4000000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[], 0x18}}], 0x2, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'syztnl1\x00', r4, 0x4, 0x81, 0x4, 0x9, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x7800, 0x1, 0x40}}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x10) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000680)=ANY=[@ANYRES32=r5, @ANYRESDEC=r4, @ANYRES64=r5], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="090000000800000004000000094000000a000000", @ANYRES32, @ANYBLOB="f3ff00e5efbe2ac3", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?'], 0x48) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f0000000080), 0x4) (async) sendmmsg$inet(r7, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) (async) close(r8) (async) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000140)=[{&(0x7f0000000700)="580000190dfc834b80040d8c560a067f0200000058000b4824ca945f6c004745b14625010ebc0000e6ffffffff7f00f0fffeffe8090053416e807b00fff5dd001a00f2ef0000080c100000000000001d9ee0122c24f500bbd9d5b256f9c0cfb125df0000000000000000f21f74fb129148e73821116c29b52c0a74bd021f39e1d6748df36ccd645f81d98b80b099133f917fa74c9ab4bf268d62122e07e545ba8953d4f64eadc7b140a05d3bd200a6abd9fc98eeeab7b943ff53f6fced10edd8a32055d33a51ac658b1082c8a25830cc23f29ada0219a35900002a693fb5e6c1eebe5055908cda", 0xe7}], 0x1) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000002400000300000000800000001100000004002f80"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @rand_addr=0x64010101}]}, &(0x7f00000002c0)=0x10) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x400, 0x1, 0x7, 0x4, r12}, &(0x7f0000000080)=0x10) 1.664435187s ago: executing program 7 (id=2065): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffff9}, 0x28) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0x3, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) (async) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r11 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r11, 0x891d) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x80) close(0x3) sendmsg$rds(r4, &(0x7f0000000900)={&(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000280)=""/179, 0xb3}, {&(0x7f0000000340)=""/146, 0x92}, {&(0x7f00000004c0)=""/236, 0xec}, {&(0x7f00000005c0)=""/109, 0x6d}], 0x4, &(0x7f0000000780)=[@zcopy_cookie={0x18, 0x114, 0xc, 0xfffffff9}, @mask_cswp={0x58, 0x114, 0x9, {{0x5, 0x4}, &(0x7f0000000400)=0x8, &(0x7f0000000640)=0x7f, 0x0, 0xc, 0x396, 0xb}}, @rdma_dest={0x18, 0x114, 0x2, {0x3, 0x9}}, @mask_fadd={0x58, 0x114, 0x8, {{0x9, 0xa}, &(0x7f0000000680)=0x401, &(0x7f00000006c0)=0x7d21, 0x8, 0x1386, 0x7, 0xeb, 0x41, 0xec}}, @fadd={0x58, 0x114, 0x6, {{0x5, 0x6b}, &(0x7f0000000700)=0x8, &(0x7f0000000740), 0x6, 0x839, 0x1000, 0x3, 0x1, 0x7}}, @zcopy_cookie={0x18}], 0x150, 0x4040000}, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xf7ffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40901}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 1.650846134s ago: executing program 1 (id=2066): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000000eaffffffffffffff00180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffff05b702000008000000b7030000000000008500000006000000850000172a0001ff9400000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x80020}, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x30, 0x18, 0x1, 0xffc, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @MPLS_IPTUNNEL_TTL={0x5, 0x2, 0x7f}}]}, 0x30}}, 0x44890) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x200, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x110, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5748262b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x14f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x4, @rand_addr=' \x01\x00', 0x9}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'pim6reg\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x70e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_NODE={0x9c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8000}, @TIPC_NLA_NODE_ID={0x61, 0x3, "ad17a83e7234ff8079d32c307f1df23aa93bd1a4fc7986cee6c6ae0b55d1d525fd5d172bc953ef32880b04d8327a002e469464bb107e967ea55c060caa5f12967052d673b76515cfb77b4a5c6d1f901a00280d9cff584b842c4e080ce0"}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x44000}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000340)={r1}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x600040}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x78, r5, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000804}, 0x4000004) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x14, r8, 0x917}, 0x14}}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000100000000000000", @ANYRES32=0x1, @ANYBLOB="018000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000040000000500"/28], 0x50) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000200)={'gre0\x00', 0x0, 0x80, 0x20, 0x47, 0x5, {{0xa, 0x4, 0x1, 0x3, 0x28, 0x68, 0x0, 0xe, 0x2f, 0x0, @private=0xa010100, @local, {[@noop, @ra={0x94, 0x4, 0x1}, @noop, @timestamp_prespec={0x44, 0xc, 0xcf, 0x3, 0x5, [{@empty, 0x1}]}]}}}}}) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x0, 0x0, r10, 0xe92c, '\x00', r11, r12, 0x1, 0x1, 0x5}, 0x50) ioctl$sock_SIOCETHTOOL(r9, 0x89f1, &(0x7f0000010640)={'tunl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x42, 0x0, 0x0, 0x0, 0xf8, 0x0, 0xfc, 0xfe, 0x0, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0x45, [0x0, 0x89ff]}}) socket$netlink(0x10, 0x3, 0x9) 1.534236293s ago: executing program 6 (id=2067): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b80)=@newqdisc={0x4c0, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x490, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0xffffffd1, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x0, 0x2, "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"}]}}]}, 0x4c0}}, 0x0) sendmmsg$inet(r0, &(0x7f0000002500)=[{{&(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000100)="c7530c1e0a47cb147967930be6c9bbc88b557be9000e0622438fc273cad80684ebaff08b9db4e3094d633ff027cef587012a5d3d263185062134193e53e41bba140b8b3c858edbc2d8b63e03612a60981b9b448f6b2e6544c1377d44f40ac962f11626221756f3ed571c607643ce6e20d8dce20ba4e8ea5dc7a323b4eea181b4812b5903261ca475bdca35d27013663c4313541b6cefeac351ebabee4ba2ad560a8c3a497c619e5961b46d94268245b6a85776ef06a2d242e738930183e067a22d00f2660e7d28ef7037d6a171", 0xcd}, {&(0x7f0000001500)="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", 0x1000}, {&(0x7f0000000200)="b00005a5c1cd0d859dd6cff0a5d2ecffdd5d90a8428498fd75e34953e526460cdca734cbd97e44b2c60f1d42c0ec7d1912ad686ef706ca0904b754183c500a0795427217eebcd800d5e8a6dcd250e46cae28b6286e416ed16dcf778734586aa3f1e9e3f61477d4c0d5b6deaae700a3617ceddf08c42726e510352f71295cdc75", 0x80}], 0x3, &(0x7f0000000680)=[@ip_retopts={{0x118, 0x0, 0x7, {[@lsrr={0x83, 0x13, 0x6, [@broadcast, @multicast1, @private=0xa010100, @remote]}, @noop, @cipso={0x86, 0x40, 0x1, [{0x1, 0x7, "f99cc41d69"}, {0x1, 0xd, "da88a0eebaa694c921c97d"}, {0x2, 0x4, "a0fc"}, {0x7, 0x8, "8dcbc5943c79"}, {0x5, 0x6, "2887e4a3"}, {0x7, 0x2}, {0x5, 0xa, "061df1f96650f048"}, {0x2, 0x2}, {0x5, 0x6, "db0035a5"}]}, @timestamp={0x44, 0xc, 0xcb, 0x0, 0x0, [0xbb39, 0x3]}, @cipso={0x86, 0x54, 0x3, [{0x1, 0xf, "24e2adc98b077cb55a61e8aa44"}, {0x0, 0x8, "8140755f5386"}, {0x5, 0x12, "15ce97022f3f9ed0e7f6fab5267fb973"}, {0x0, 0xa, "7cbee4ac1bddcb2a"}, {0x1, 0x10, "4578bc4488f875773c3a104a0150"}, {0x6, 0xb, "86c2be7244f5f5809b"}]}, @cipso={0x86, 0x53, 0x2, [{0x0, 0x3, '\\'}, {0x5, 0x8, "234e156932df"}, {0x0, 0xc, "04c5757b5da22b7862f1"}, {0x6, 0x5, "e6616f"}, {0x7, 0xd, "30537124e44481dfbb16b7"}, {0x7, 0xf, "37b1e8a376503f635559094cda"}, {0x2, 0xc, "4e5c149992ce6b314e31"}, {0x0, 0x9, "4230fb6c1ad758"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @loopback, @dev={0xac, 0x14, 0x14, 0x3a}}}}, @ip_retopts={{0xb0, 0x0, 0x7, {[@ssrr={0x89, 0x23, 0x67, [@loopback, @empty, @dev={0xac, 0x14, 0x14, 0x15}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x31}, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x54, 0x98, 0x1, 0x0, [{@broadcast, 0x9d}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x470}, {@broadcast, 0xc377}, {@multicast2, 0x6}, {@dev={0xac, 0x14, 0x14, 0x14}, 0xffffffc8}, {@loopback, 0x2bb}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x401}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000}, {@multicast2, 0x8}, {@multicast2, 0xff}]}, @ssrr={0x89, 0x1b, 0x5f, [@multicast2, @broadcast, @empty, @broadcast, @remote, @remote]}, @generic={0x89, 0xc, "ba51a0a912153500ef51"}]}}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x71, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x34, 0xd3, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x20}, 0x4}, {@remote, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@local, 0x9}, {@broadcast, 0x9}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x3}]}, @rr={0x7, 0xf, 0x40, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0xa}, @loopback]}, @rr={0x7, 0xf, 0x93, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast1]}, @ssrr={0x89, 0x23, 0xf4, [@loopback, @empty, @remote, @empty, @remote, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}]}}}], 0x290}}, {{&(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000300)="9f5e4b66dcb96ee237d2f0e3d97f7c0d99ea04232c22d8613749fedd3dcd935e2ac5500a4a25e041913319a4a2584e6070f591c7ed27f2b06409d4d1d93d6ebeaca88cea3e3e30e55dcb23a5ea33373171ebca02371039fb715e016f6b51814246e25f7dd106d562b3e83c189bfdc79e41f75455aa7e1655c93b41b7e0424e68b50d6a118bddcff437", 0x89}, {&(0x7f0000000940)="68f0442dcf124f385f6ffa53b4311f82a03965b77307afc54310fbfdfc50a0b4b1695e8f40071ff78325991c888f40afc56a86d1f28a0c17de1a8047a930902d8ff41b10d9ebc8e929a01599ec109e4b09568d0194502ec1a80f31db63b7cde0a24fd5cd9992ae113425b7c1ed1d688e8bf869105c8feeb820887c8c552980b858141cc68e698ee08eab215642532f3e04a09155f28fa8e61009cb0a52a7c660965489236e27d938348ad6de5339fa07", 0xb0}, {&(0x7f0000000a00)="e844945cd22b2f05cc853bc0c2c95248242f1039412aa01ae6eb45dd7b479a6cb3431581e9e3bd478c78350b3d7685723e5a39f4c0b743362de06d43f717e8eaae18ca7b2345513ca567ab5f3dc2f57583c1772b4bd543341894cbd52477e1bb11e720b3f94a75a4fa43064d56e6bb68b981df9cab", 0x75}, {&(0x7f0000000a80)="0a6c2b54833e0ea38d85133f0e5c078055db74dc8226ef666979e96005632cb4ad2a65e7012306a350cf1bfd84f984991e4aef35806605d7e5592fa663843113c17de44f4a362ed7324f5ce7f5da13b1a0ec15f84ef62b9cfbb53fd8a2334ac56c6df25cbbb5f9588e96a200213a8898010241d229f1132c23fc11bd5db34cd53fef180799ed07b2d46c861cf231dc4266e4fe34f75f55a7af9e251355fd332940f3c1f569e5ecdce8837b7616fa988252b9db28b7fbc4a8069e4838ad0cbc1f7fd677", 0xc3}], 0x4, &(0x7f0000000bc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xffff0000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffff8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffff9}}], 0x78}}, {{&(0x7f0000000c40)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000f40)=[{&(0x7f0000000c80)="bf57ae132cfdb223ea09847016594575b8a767fdaf9be15c6db1167677f2a843f08106ace584d969ea8d735d4a901c2bbcc575581b77e3fbebe23221ec0054154ff2683472631f535cf3f3d84e4f6971d5baccbc4aed08f4ea74802e0f111e9901b395be17396f546a1a742f39302cc4bd", 0x71}, {&(0x7f0000000d00)="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", 0xfd}, {&(0x7f0000000e00)="432b797db0729bc90bae0cafebac1fe67678e5c7b9e37161bcd383ff43f25321d84c", 0x22}, {&(0x7f0000000e40)="ae5c6f6c744721f4e157646ef01a8f579781a6a51d460630d8c1f424a94e107364c9898a457b9b83ec8bc41c421830127da2e52d71c72f3047d691490e5133968d591ef10678120b4084b015ac53a4e2968c16b5892f36c4b0506999d9e1cf14550c225ad7365361131774edb2035478f0c291f749d2d7e33368abd95fa87c8a258cf7a5f1", 0x85}, {&(0x7f0000000f00)="7d02cb019e7b2ba7c2c7d0e6605ead8ef521b6a9022ccf87ab35afa551f71defc021c7576e416849e63d6bc7ff72", 0x2e}], 0x5}}, {{&(0x7f0000000fc0)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f0000001380)=[{&(0x7f0000001000)="b601212242af4760ca5666c08ed2211f86f7654b74af7d427e5722debc3da61d95630b24cfe65a27dac97560053b5e5a73d1aaec045d6110e9d3f1ab26c684f7a0d3d77986aabed6e61ddbc09da15277e50403d7c591b8c3b747bac596d92e93fdb82be79402b9b60a385401e91a4ade98cfedc60f10822b91b2de0151070ba89a7bf5e7b0de30919454928a564523407fb912c7bec50d7282d92087859dd0b47132e6fdf33ba6a765f6432b791bb37a913632f2af41fc6bc42055e5e6d3fdebbbad3da714519d8e0b2cd0bb969d", 0xce}, {&(0x7f0000001100)="c5e37f8838f88337074c2322737a86e5a59943220eb10153b58db30faeb757eafe019aebc54735fdb8b59975498e8af782175dc46e80efa0e1ee959e9a1df569bcaa72332bfaace3b5948066e6bbb1c19aa74d8fcb95b3e1d92f8e9282eda61b449ed53d94dc4a82c87bb0591ece02894400c136ba15368a76059f2543599b0f3ea57068a2ff5b953eadfe46dbcbdb2b1a023b6160cc1e658f5711e7da05a711ae2ac6b09fb1c566f5e573e75f9230a652b25e27cbe4062bd4a532222954828b202952571c5378b28836e9efc5", 0xcd}, {&(0x7f0000001200)="d651936d64e35378b2b1e17baa471ec5e496af877d812242e9e2cff0965dcbaba3b3d4d8ddb3c39bf4682b7730e14e1f523a97c5055815a1166d546bab4ab4edaf5b6f963dc227b9fbb89d8cbc4d5b56f9fba5667ce5e754b4c9a428fd61baac63eec32be20f190de0eb1e454fa8370682a8a4556a5f7f68cf5ef1609f399821117e71431a8b585a71abb53610e9e7814945ddfd341c8cd0d19a5156eaf02e0e642bdc4005944e7458e8e10c7d86c40f421b596965273eca5bb2497a9c11109d3160e81fb002c9b2fcff3cd067fb51", 0xcf}, {&(0x7f0000001300)="77eadea24a75886d144f8df79b0a1cd3faad0bc78b8fdc55eaae46b90501503eb7bc88dccdda1d80ccf8a721f456629ab0fc16f239958d48d38a413c1b42d2ad172425289a9b337848bba93e44d6f0cb2ab241348b5a96eacbe93a74f69b9869c2e55b094476", 0x66}], 0x4, &(0x7f00000013c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xd}}, @ip_retopts={{0x74, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0x10, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x30}, 0x81}, {@loopback, 0x3}, {@local, 0x2}]}, @ssrr={0x89, 0xb, 0xed, [@broadcast, @local]}, @timestamp_addr={0x44, 0x3c, 0xa6, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@loopback, 0x6}, {@local, 0x7f}, {@multicast1, 0x98}, {@broadcast, 0x9}, {@local, 0xff7e}, {@broadcast, 0x8}]}]}}}], 0x90}}], 0x4, 0x4000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$phonet(0x23, 0x2, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), r6) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000012c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r6, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, r7, 0x1, 0x70bd2a, 0x1, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x8880) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x20, 0x8}, {0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x1}, [@tmpl={0x184, 0x5, [{{@in=@rand_addr=0x64010101, 0x4d3, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x5, 0x0, 0xff, 0xfffffffe}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x1, 0x3}, {{@in=@loopback, 0x0, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x278b6a28}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in=@empty, 0xffffffff, 0x0, 0x0, 0x5}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x6c}, 0x2, @in=@broadcast, 0x0, 0x1, 0x0, 0x4}]}]}, 0x23c}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f00000014c0)=ANY=[@ANYBLOB="18020000160080ff0000000000000000850000002c00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xe, 0x0, &(0x7f0000000080)="0047f5421f0a29f1dd558391e0bd", 0x0, 0x6, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) 988.461978ms ago: executing program 6 (id=2068): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x90, 0x30, 0xffff, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_ife={0x78, 0x1, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x3}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xa, 0x80, 0x3, 0x0, 0x10}}}, @TCA_IFE_TYPE={0x6, 0x5, 0x9}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb46, 0x2, 0x0, 0x9}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x5, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}]}, 0x70}, 0x1, 0x7}, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r2, 0x89e2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0xa, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) 914.727467ms ago: executing program 6 (id=2069): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r0, @ANYBLOB="da7dc7c4932be422cd7e78d30cde84136e811987023ea78b28acac0b61900cc45465c922e85f560d82882240bfaa6ce49d3f61cf8ea89082999f1546c90e3c42422cab6bf6bb3f31b04b467a810a3f6a5359dac7bdfe1f2e52f05bc80a23e6abe501fe09dd3b60080e0f648590b9687dfe4ae28eb382dbfcdc6b", @ANYBLOB="974ce9ca12b10ce9cfd0c1fde1872b9f783cdddfff615aa8d9c77837ca752e797bcd789ac168859c283061db8c8aefa041762e817ca09f29", @ANYRES16=r0, @ANYBLOB="5aaf8eb19e0e6f6f54c3443a9a6ac6c7022c6d25f6085085739243678733b0b59505e15dc55aa6d4a1ad5ca65d29b67b1d8f225f82260139e3d49da10d516b2c322cc0baac4cccadb8af9372a39132e5079d32821c0339786d6f294f368beaaf2327"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000800) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1], 0x20) socket(0x2b, 0x80801, 0x1) r2 = socket$inet6(0xa, 0x80803, 0x83) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@private1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xae}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x32}, 0x0, @in=@multicast1, 0x4000, 0x0, 0x0, 0x0, 0x9}}, 0xe8) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000580)={r6, r7}, 0xc) ioctl$SIOCAX25GETINFOOLD(r5, 0x89e9, &(0x7f00000001c0)) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x4) sendmsg$nl_route(r4, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000007100fedbdf2507000000000000000000", @ANYRES32=r8, @ANYBLOB="0c0001800500060002000000"], 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, r9, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) 890.807711ms ago: executing program 7 (id=2070): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, &(0x7f00000000c0)='z', 0x5c8, 0x0, &(0x7f0000000100)={0x11, 0x88a8, r2, 0x1, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="e4000000", @ANYBLOB="ee3c84594c32854d6815fe6b86c00a2ac001d127a9b87ea0e186033d2868de3a8beda234d4b7044c845ad02cc8fb8d6a02929eb22f7551ca8400c060556903fee996169f658588c9341d300a4a6d254619da26b531aa31bcd6028c9273ac305a5effe44330f2a972558bc1fb3df3c49319721f5072592697ef898930761a3988c85af18c4a03bdf8418a8a72da8f684b3ca8cd1446a7edda546f", @ANYRES8=r0, @ANYRES32=r5, @ANYRES8=r0], 0xe4}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) close(0x4) 668.459463ms ago: executing program 7 (id=2071): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000780)=0x67, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x2}, 0x50) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000007c0)=ANY=[@ANYBLOB="0a000000160000007fea190a04d602e300000000694a3c0fd09db8cbdfbde4f09216bd17b79286eb342ba0bab076451f5d2834c33293c924d15f4d5ba03bef3816035b54ccce71d3b4d6163eb4ec2e41e79e53bad84980fce8185bf8634c1f834d5d6d5f30095df41951d01a693c71c377e140ed279ee16bcecd1a9905c5ba574f5d76482cf285fa6d3aafcc0a27544478dd2e8037a5ff723b45808b6c2f4b20783a59a911fd0bfca7f65ba0bb49778f1818355deb9d1d66e808a136ba9b8657e9ccd5eef3effdadfc6bc94fa64240603905640e2b32bdc90b530dbf3bb331d268bb4cbdb5c410e6d7cbd9d7b0a9", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0x0, 0x0, 0x0}, 0x94) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0xdf64, 0x3e, &(0x7f0000000340)=""/62, 0x41100, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0xc, 0x7, 0x43e64c37}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000940), 0x10, 0x2}, 0x94) r4 = socket$alg(0x26, 0x5, 0x0) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000300)=0x5, 0x4) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000af00000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x288a2, r3}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r5, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r8, 0x11, 0x1, &(0x7f0000000600)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @local, 0x2}, 0x1c) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40fbffff0f00010400000000000000010000ef00", @ANYRES32=0x0, @ANYBLOB="7b15000000000000080000000b00011caa31f3a897ceef503caf87f5e23edcd962db0a0a02800600"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x880) 624.892987ms ago: executing program 6 (id=2072): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x161042, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) splice(r1, 0x0, r0, &(0x7f0000000000)=0x40000000, 0x7fffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=@newlink={0x4c, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1b400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_MIIMON={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="6d9310000000f4dbdf25010000000c00060000000000020000000800010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20048890}, 0x880) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r7) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000280)={0x8, &(0x7f0000000480)=[{@none}, {@fixed}, {}, {@fixed}, {}, {@fixed}, {@none}, {@none}]}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0706000000000000000027000000050031000400000008000200", @ANYRES32=r7], 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x24060884) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r8, 0x4, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x44010) 617.800924ms ago: executing program 1 (id=2073): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x6) listen(r1, 0x1ad72f7) accept4$netrom(r1, 0x0, 0x0, 0x80000) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x8003}}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}]}, @NFT_MSG_NEWRULE={0xd4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x23}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_COMPAT={0x4c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x805}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2b}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x89}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x140}}, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 460.351597ms ago: executing program 7 (id=2074): bpf$OBJ_GET_PROG(0x9, &(0x7f00000000c0)=@generic={0x0, 0x33}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x8, 0x2, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = accept4(0xffffffffffffffff, &(0x7f00000003c0)=@ethernet={0x0, @random}, &(0x7f0000000540)=0x80, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$pppl2tp(r2, &(0x7f0000000580)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x2, 0x3}}, 0x26) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="021304060200000027bd700005000000"], 0x10}}, 0x4080) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x800000, 0x0, 0xffffffff}, 0x20, 0x0, 0x7, 0x8, 0x101, 0x14, 0x0, 0x0, 0x0, 0x0, {0x200}}}}]}, 0x78}}, 0x4080) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, &(0x7f0000000380)=0x3, 0x4) recvmmsg(r5, &(0x7f0000003280)=[{{0x0, 0x0, 0x0}, 0xa85}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000380)={0x0, 0x2, 0x5, 0x7, 0x3, 0x9f5a}, 0x14) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000008580100000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c010380400000800800034000000002340002803000028008000180fffffffd090002"], 0x1ec}}, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e22, @multicast1}}}, &(0x7f0000000000)=0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000000c0)={r10, 0x8}, 0x8) 398.593775ms ago: executing program 1 (id=2075): r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x11000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x9}, @void, @val={0xc, 0x99, {0xcb3, 0x54}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x2400005c}, 0x20088081) (async, rerun: 64) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async, rerun: 64) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r3, 0x67931673aaa2f93e, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x14) r5 = syz_init_net_socket$ax25(0x3, 0x6, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r2) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r7, &(0x7f0000000440)="b18de68cb3cc9824edb2f8c926911591e260e62a156d4eb84291acb0e89a2e8dea7a6bf44352c99d95561d6d2f8bcb558409309ab123140c6a25001f9784ce4c952cf001a854ce902fab90adc2159d", 0x4f, 0x8000, &(0x7f00000004c0)={0xa, 0x4e20, 0xdea, @remote, 0x8000}, 0x1c) (async) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xd8, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000780)={&(0x7f00000006c0), 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r3, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4040061) (async) sendto$packet(0xffffffffffffffff, &(0x7f00000007c0)="9df763cf09f7e23610cbb7b344f17b4a47e5070fb028feb4a1ba4395c780c3a8a30c6dc7c5773807e3ff780b90421044df026df68861adb71c8346e8cf57fc4c26797d9ced08d93baf71733315f5def847e465e2f00def12a7bcfaf3d427cb6fc6721a84798b5d8daf9d0966c71d27b54d76f3722c1f8731c70ef70a95e354eae0b6e12ba6a63353", 0x88, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r2) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000900), r2) (rerun: 32) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x64, r9, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x80) (async) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)={0x1b, 0x0, 0x0, 0x8, 0x0, r1, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3}, 0x50) (async) pipe(&(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000c80), 0x4) (rerun: 64) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000e40)={0xffffffffffffffff, 0x20, &(0x7f0000000e00)={&(0x7f0000000d40)=""/32, 0x20, 0x0, &(0x7f0000000d80)=""/82, 0x52}}, 0x10) (async) r14 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001080)=@bpf_ext={0x1c, 0x27, &(0x7f0000000e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x1, 0xb, 0x3, 0x20, 0xfffffffffffffff0}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x77}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000fc0)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x14, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001000)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x183c, 0xffffffffffffffff, 0x0, &(0x7f0000001040)=[r1, r7, 0x1, r1, r1, r1, r1, r1, r2], 0x0, 0x10, 0x8}, 0x94) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0xa, 0x16, &(0x7f0000000b00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@map_fd={0x18, 0xb, 0x1, 0x0, r11}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @jmp={0x5, 0x0, 0xd, 0x4, 0x7, 0x80, 0xffffffffffffffff}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x200}, @alu={0x4, 0x1, 0xd, 0x2, 0x7, 0xfffffffffffffffc, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000bc0)='syzkaller\x00', 0x7fff, 0x5d, &(0x7f0000000c00)=""/93, 0x41000, 0x42, '\x00', r6, @fallback=0x1f, r12, 0x8, &(0x7f0000000cc0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000d00)={0x4, 0x7, 0x5d33376b, 0xffff}, 0x10, r13, r14, 0x2, 0x0, &(0x7f0000001140)=[{0x3, 0x2, 0xd, 0xb}, {0x4, 0x3, 0x7, 0x4}], 0x10, 0x1}, 0x94) sendfile(r0, r15, &(0x7f0000001240)=0x7, 0xf) (async) ioctl$SIOCSIFHWADDR(r11, 0x8924, &(0x7f0000001280)={'pimreg0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001380)=@o_path={&(0x7f00000012c0)='./file0\x00', 0xffffffffffffffff, 0x4000, r11}, 0x18) 115.378392ms ago: executing program 6 (id=2076): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500000010000000"], 0x0}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) bind$alg(r1, &(0x7f00000005c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(generic-gcm-aesni)\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1f, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4000000000000407910000000000000670000c200000000950005000000000071a13928b72c696950a4edd77f9876d874394900f3bde847f8c78119dfbc27abc969c82ce6f6f0b2e10179582eed3525598659f1307bc7dea42e897c2305fd2a9989f18e0b716808f6491a914b82ce112e8a52578b3a8078cfd0b7d34cd51a741cdf3bdf46d174934650e575b0f5097a4d8f97c4b165abe4bb2be76d95cdba3f0b3a790af9d04d66016aeb34cf29cfd883a854803074ce6d65e4f15f11719754006007593f2f12b706682b684633803352f0e8ce93a2570ca6dd0ff917652d"], &(0x7f0000000700)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080), 0x10, 0x0, r0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0xd0}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r2, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000740)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x16, &(0x7f0000000800)=[{}, {}], 0x10, 0x10, &(0x7f0000000840), &(0x7f0000000a40), 0x8, 0x27, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x18, r8, 0xb03, 0x70bd2b, 0x0, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004e00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x40}], 0x30, 0x88010}], 0x1, 0x20000010) sendmmsg$inet(r6, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) accept$alg(r5, 0x0, 0x0) r9 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r9, 0x89ef, &(0x7f00000006c0)=0x6) sendmsg$tipc(r4, &(0x7f0000000680)={&(0x7f00000000c0)=@id={0x1e, 0x3, 0x3, {0x4e22, 0x3}}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000200)="f97d9c2cb30309542178499d8684bee56adbcaf42acb4123e5999b8410c4d28d6f9f5ac0ca223be8fe8070b1aac51ba63d31612c8896431a2e8b716c4efd96a4a0be6576c8a368e29331d1ffa88b37dfc541214a314faf30fdcebd24e590760718cc2e18d65bc24f0632cb1cbfb4479de2b92b4f245ae28358355e86b8f4d7de6d022ab2729e81f9d7f3a1e6ba1e60b9c6849f98ccf0e41229781597b1ae3b631b914506bdfbc8397eec01a7b9e95907bcd83facd4c77522c5ab1119398e3fa7a51e77be65ac05", 0xc7}, {&(0x7f0000000300)="d459c9f072ec46f72ff0d0401d3d5bd98a26c00694d32629bc3c81a4b8e1012992a3a1aed63135bb024796d027883daf9edb62b3e250de36cc9d76a3591be6b440e535b614df1a55e6bce59bd281223876cb887a19963ca7b37e028f0ed31fc75a7793a94f0f22a0d7863e5f7f3f0022b149bacfef13c519538e62274ec9eaeaa0fe5045d4b74cb6421f1a99bf61bf2159dfdadf352e47ffb77155f9ea0884994bde6351733b3f1e1026310d90c4b3ec45cdc4dab69b7f5fd1712066a2de12f2f902a8ff612d7d39d151de", 0xcb}, {&(0x7f0000000400)="91bd047416b2ef2c404dfcba1e5bb47b1d065299cdeab6a52d1af1fdddec99d773817c01a877de610bea60629ebcf2d68a9f87735015d71d73b8f38b10495bfe3eb76fccf5c9f8c2eecb41bdd39b30c2bd5d0db63b90d786cfe486400ee02405d62a2dcf62e76dbe7c7d915d0a52fc56ee25a7d55cf42081d35b662dddd4210485f041f375254f0cb44717c086005979146c97e562fc8f4978aab945fa", 0x9d}, {&(0x7f00000004c0)="2b41c2c77d8b9f25b3ae38d72709f28ae03a32", 0x13}, {&(0x7f0000000500)="e9e3f62224eee0d909bfe06498c49f0a12f3e23c971cd0a2201d5ca235dee3db99dfda486cf68f45239eef92e081f4cde08c590764", 0x35}, {&(0x7f0000000540)="835e48003fa402ebe2af99f446f3e0cf63bcad004e91b46d62982d0acd8cb14adb2a382944f1ce715c33c858a03ba0093e9d3cb5ef15c11a363a84bd80404a0be826406727f3451f9d6b662a924233f2e09d2aea5582be478d630daeb8ae5a3ad2f5be6477f3f21715ea", 0x6a}], 0x6, &(0x7f0000000640)="a2f2d8d1e7b8bcef2996bb2a66247f75c101003ee1649b9cc6", 0x19, 0x20040010}, 0x800) 46.801861ms ago: executing program 7 (id=2077): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0xfbfc, 0x0, 0x0, 0x90f0}, 0x8) sendto$inet6(r0, &(0x7f0000000300)="81", 0x1, 0x10, &(0x7f0000000280)={0xa, 0x0, 0x80000000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x81}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56741, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0xfffffeee, 0x2, {0x21}}]}}]}, 0x48}}, 0x0) 0s ago: executing program 1 (id=2078): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xfff9, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000240)="4d010000000000000021", 0xa, 0x81, &(0x7f0000000340)={0x11, 0x0, r3, 0x1, 0xe, 0x6, @random="e44b06bdde0e"}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x37, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)={0x1c, r8, 0xd0d, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r9, 0x0, 0x40001) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r11, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1048020}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x140e, 0x8, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x48052}, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="000100001800010000000000fedbdf250a000000ff00ff0800200000b1000880324d76b5be2a06d619308aab715360ab2eb3a32a85c757c6275ee5d91b08242ffdbe6d0a6d1deee842bca9e9ec6780f823bdfac40a347ade2d6151c1938f89132b46e9878eba6e4aca523cec1065fe2147666ebce4068f4eef7b1b42d057a7673c22b323b8c07f9f74ca2621439501c88504c3192be61a6a9e0f9f747d486dd1c8825ea2b052ea5cf591a07b0346b83657d34487645a7b5297be4ca55bd9be6378abede7a1789e526a302bafac00000008e70f00060000000800e300", @ANYRES32, @ANYBLOB="100016800c000180080002007d2c27000800100001", @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x84}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$int_in(r13, 0x5452, &(0x7f0000000000)=0x887) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x80}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) kernel console output (not intermixed with test programs): 1] netlink: 24 bytes leftover after parsing attributes in process `syz.3.967'. [ 198.127827][ T9706] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 198.149982][ T9700] netlink: 48 bytes leftover after parsing attributes in process `syz.1.968'. [ 198.169643][ T9700] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 198.215428][ T9713] netlink: 'syz.2.971': attribute type 2 has an invalid length. [ 198.238618][ T9713] netlink: 'syz.2.971': attribute type 2 has an invalid length. [ 198.257167][ T9713] netlink: 'syz.2.971': attribute type 1 has an invalid length. [ 198.264923][ T9713] netlink: 'syz.2.971': attribute type 1 has an invalid length. [ 198.312454][ T9713] netlink: 'syz.2.971': attribute type 2 has an invalid length. [ 198.366594][ T9713] netlink: 'syz.2.971': attribute type 1 has an invalid length. [ 198.494098][ T9721] netlink: 32 bytes leftover after parsing attributes in process `syz.1.974'. [ 198.825459][ T9743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.979'. [ 199.022389][ T9739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.477277][ T9754] netlink: 48 bytes leftover after parsing attributes in process `syz.4.985'. [ 199.506796][ T9761] netlink: 'syz.3.987': attribute type 7 has an invalid length. [ 199.527719][ T9754] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 199.540801][ T9749] netlink: 32 bytes leftover after parsing attributes in process `syz.1.983'. [ 199.858382][ T9777] netlink: 'syz.4.992': attribute type 1 has an invalid length. [ 199.965253][ T9775] syzkaller0: entered promiscuous mode [ 199.995115][ T9775] syzkaller0: entered allmulticast mode [ 200.165554][ T9799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.994'. [ 200.378977][ T9780] netlink: 248 bytes leftover after parsing attributes in process `syz.3.991'. [ 200.430027][ T9785] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.446551][ T9785] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.547090][ T9797] bond1: (slave ip6gretap1): Removing an active aggregator [ 200.557624][ T9797] bond1: (slave ip6gretap1): Releasing backup interface [ 200.676425][ T9785] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.697518][ T9785] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.850725][ T9817] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 200.852118][ T153] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 200.866551][ T9821] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 202.323615][ T9785] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.334641][ T9785] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.383486][ T9828] tipc: Enabling of bearer rejected, failed to enable media [ 202.429547][ T9840] pimreg3: entered allmulticast mode [ 202.449662][ T9840] pimreg3: left allmulticast mode [ 202.556203][ T9785] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.590846][ T9785] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.756123][ T9861] __nla_validate_parse: 3 callbacks suppressed [ 202.756144][ T9861] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1005'. [ 202.778403][ T9861] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1005'. [ 202.787495][ T9861] tipc: Invalid UDP bearer configuration [ 202.787553][ T9861] tipc: Enabling of bearer rejected, failed to enable media [ 202.965492][ T8862] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.980393][ T8862] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.016982][ T8862] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.043715][ T8862] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.118296][ T49] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.147323][ T49] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.173042][ T9859] IPVS: Unknown mcast interface: lo [ 203.390560][ T2958] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.412064][ T2958] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.595226][ T9892] tipc: Enabled bearer , priority 0 [ 203.604082][ T9894] netlink: 4428 bytes leftover after parsing attributes in process `syz.4.1014'. [ 203.628855][ T9894] openvswitch: netlink: Flow key attr not present in new flow. [ 203.640324][ T9892] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 203.671704][ T9892] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 203.697262][ T9898] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1017'. [ 203.743063][ T9892] tipc: Resetting bearer [ 203.944700][ T9912] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1022'. [ 203.955068][ T9912] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1022'. [ 204.085061][ T9919] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1025'. [ 204.314673][ T9927] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.339609][ T9932] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1029'. [ 204.357272][ T9927] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.508799][ T9939] xt_CT: You must specify a L4 protocol and not use inversions on it [ 204.529472][ T9927] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.548891][ T9939] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1031'. [ 204.558090][ T9927] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.579685][ T9939] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1031'. [ 204.628814][ T8774] tipc: Node number set to 2638239172 [ 204.724131][ T9927] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.745047][ T9927] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.807580][ T9946] tipc: Enabled bearer , priority 0 [ 204.834592][ T9951] syzkaller0: entered promiscuous mode [ 204.841425][ T9951] syzkaller0: entered allmulticast mode [ 204.866309][ T9927] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.924249][ T9927] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.954277][ T30] audit: type=1800 audit(1752833652.403:3): pid=9947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1032" name="memory.events" dev="tmpfs" ino=976 res=0 errno=0 [ 205.049206][ T9956] tipc: Resetting bearer [ 205.065737][ T9944] tipc: Resetting bearer [ 205.137373][ T9944] tipc: Disabling bearer [ 206.181762][ T9985] nbd: must specify at least one socket [ 206.593970][T10000] netlink: 'syz.0.1045': attribute type 3 has an invalid length. [ 206.722805][ T8862] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.739917][ T8862] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.772962][ T8862] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.791914][ T8862] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.911900][ T2958] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.923483][ T2958] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.052041][ T2958] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.080652][ T2958] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.210944][T10015] tipc: Enabled bearer , priority 0 [ 207.222914][T10015] syzkaller0: entered promiscuous mode [ 207.238869][T10015] syzkaller0: entered allmulticast mode [ 207.279448][T10015] tipc: Resetting bearer [ 207.289960][T10018] vlan0: entered promiscuous mode [ 207.337169][T10014] tipc: Resetting bearer [ 207.407780][T10014] tipc: Disabling bearer [ 207.423055][T10020] netlink: 'syz.2.1051': attribute type 1 has an invalid length. [ 207.870372][T10038] __nla_validate_parse: 6 callbacks suppressed [ 207.870394][T10038] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1056'. [ 208.081355][T10043] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1058'. [ 208.197974][T10051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1060'. [ 208.207281][T10051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1060'. [ 208.261002][T10059] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1060'. [ 208.328526][T10051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1060'. [ 208.577203][T10064] tipc: Enabled bearer , priority 0 [ 208.624797][T10067] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1064'. [ 208.646494][T10070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1065'. [ 208.658918][T10067] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 208.682587][T10064] syzkaller0: entered promiscuous mode [ 208.688290][T10064] syzkaller0: entered allmulticast mode [ 208.767844][T10076] netlink: 'syz.2.1067': attribute type 9 has an invalid length. [ 208.897335][T10064] tipc: Resetting bearer [ 209.095796][T10079] tipc: Resetting bearer [ 209.124514][T10079] tipc: Disabling bearer [ 209.653029][T10113] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1078'. [ 209.944548][T10124] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1081'. [ 210.467409][T10143] No such timeout policy "syz0" [ 210.983728][T10182] netlink: 'syz.0.1098': attribute type 1 has an invalid length. [ 211.053435][T10186] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.061791][T10182] netlink: 'syz.0.1098': attribute type 4 has an invalid length. [ 211.086504][T10180] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 211.134032][T10180] macvlan0: entered promiscuous mode [ 211.140602][T10180] macvlan0: entered allmulticast mode [ 211.146374][T10180] bond3: (slave macvlan0): Error -98 calling set_mac_address [ 211.682556][ T5858] Bluetooth: hci1: command 0x0406 tx timeout [ 211.688985][ T5858] Bluetooth: hci2: command 0x0406 tx timeout [ 211.699010][ T5858] Bluetooth: hci3: command 0x0406 tx timeout [ 212.125497][T10235] batman_adv: batadv0: Removing interface: dummy0 [ 212.141799][T10235] bridge_slave_0: left allmulticast mode [ 212.149058][T10235] bridge_slave_0: left promiscuous mode [ 212.154922][T10235] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.188914][T10243] netlink: 'syz.3.1113': attribute type 16 has an invalid length. [ 212.189784][T10235] bridge_slave_1: left allmulticast mode [ 212.206743][T10235] bridge_slave_1: left promiscuous mode [ 212.212829][T10243] netlink: 'syz.3.1113': attribute type 17 has an invalid length. [ 212.222579][T10235] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.253515][T10235] bond0: (slave bond_slave_0): Releasing backup interface [ 212.261748][T10235] bond_slave_0: left promiscuous mode [ 212.276268][T10235] bond0: (slave bond_slave_1): Releasing backup interface [ 212.287806][T10235] bond_slave_1: left promiscuous mode [ 212.299255][T10235] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.314597][T10235] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.325665][T10235] bond2: (slave batadv1): Releasing active interface [ 212.336862][T10235] batman_adv: batadv0: Interface deactivated: gretap1 [ 212.344805][T10235] batman_adv: batadv0: Removing interface: gretap1 [ 212.357741][T10235] bond4: (slave veth7): Releasing active interface [ 212.438063][T10243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.448025][T10243] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.463490][T10243] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 212.574868][T10252] tipc: Enabling of bearer rejected, already enabled [ 212.853004][T10261] lo: entered promiscuous mode [ 212.908985][T10261] lo: entered allmulticast mode [ 213.091529][T10274] ieee802154 phy0 wpan0: encryption failed: -90 [ 213.241914][T10283] __nla_validate_parse: 11 callbacks suppressed [ 213.241933][T10283] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1127'. [ 213.411369][T10292] netlink: 'syz.0.1129': attribute type 1 has an invalid length. [ 213.541629][T10292] bond5: entered promiscuous mode [ 213.546994][T10292] bond5: entered allmulticast mode [ 213.553161][T10292] 8021q: adding VLAN 0 to HW filter on device bond5 [ 213.565773][T10292] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1129'. [ 213.655972][ T5972] IPVS: starting estimator thread 0... [ 213.779750][T10297] IPVS: using max 24 ests per chain, 57600 per kthread [ 213.789887][T10301] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1131'. [ 214.068096][T10310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1136'. [ 214.470983][T10323] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1139'. [ 214.576065][T10323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1139'. [ 214.624218][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 214.630929][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 214.954731][T10339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1144'. [ 215.165673][T10345] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1145'. [ 215.277715][T10350] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.882322][T10359] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1150'. [ 215.895785][ T8860] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.924881][ T8860] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.933795][T10359] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1150'. [ 215.957211][T10359] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.967026][ T8860] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.977386][ T8860] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.994280][T10359] lo speed is unknown, defaulting to 1000 [ 216.004117][T10359] lo speed is unknown, defaulting to 1000 [ 216.018042][T10359] lo speed is unknown, defaulting to 1000 [ 216.120950][T10360] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 216.876958][T10359] infiniband syz0: set active [ 216.892777][ T5972] lo speed is unknown, defaulting to 1000 [ 216.930416][T10359] infiniband syz0: added lo [ 216.936622][T10359] syz0: rxe_create_cq: returned err = -12 [ 216.992141][T10359] infiniband syz0: Couldn't create ib_mad CQ [ 216.998381][T10359] infiniband syz0: Couldn't open port 1 [ 217.019751][T10398] lo speed is unknown, defaulting to 1000 [ 217.172904][T10359] RDS/IB: syz0: added [ 217.202599][T10359] smc: adding ib device syz0 with port count 1 [ 217.229071][T10359] smc: ib device syz0 port 1 has pnetid [ 217.305629][ T8780] lo speed is unknown, defaulting to 1000 [ 217.499198][T10415] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.506476][T10415] IPv6: NLM_F_CREATE should be set when creating new route [ 217.711097][T10359] lo speed is unknown, defaulting to 1000 [ 217.933312][T10431] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.013940][T10428] tipc: New replicast peer: 172.20.20.170 [ 218.060152][T10428] tipc: Enabled bearer , priority 10 [ 218.203920][T10428] tipc: Disabling bearer [ 218.345250][T10452] __nla_validate_parse: 6 callbacks suppressed [ 218.345268][T10452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1178'. [ 218.500858][T10359] lo speed is unknown, defaulting to 1000 [ 218.736244][T10458] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1182'. [ 218.757770][T10458] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 218.765117][T10458] IPv6: NLM_F_CREATE should be set when creating new route [ 218.908215][T10359] lo speed is unknown, defaulting to 1000 [ 218.969464][T10468] bond1: (slave erspan0): Releasing active interface [ 219.013610][T10468] bridge_slave_0: left allmulticast mode [ 219.033783][T10468] bridge_slave_0: left promiscuous mode [ 219.049545][T10468] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.056851][T10482] netlink: 'syz.0.1186': attribute type 10 has an invalid length. [ 219.081175][T10468] bridge_slave_1: left allmulticast mode [ 219.086875][T10468] bridge_slave_1: left promiscuous mode [ 219.106480][T10468] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.137466][T10468] bond0: (slave bond_slave_0): Releasing backup interface [ 219.153694][T10468] bond0: (slave bond_slave_1): Releasing backup interface [ 219.182438][T10468] team0: Port device team_slave_0 removed [ 219.203739][T10468] team0: Port device team_slave_1 removed [ 219.210880][T10468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.218528][T10468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.234669][T10468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.243192][T10468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.264730][T10468] team0: Port device batadv1 removed [ 219.276283][T10468] bond1: (slave veth5): Releasing active interface [ 219.404621][T10359] lo speed is unknown, defaulting to 1000 [ 219.463077][T10486] netlink: 'syz.0.1188': attribute type 8 has an invalid length. [ 219.745631][T10499] netlink: 'syz.0.1194': attribute type 64 has an invalid length. [ 219.749064][T10497] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1193'. [ 219.777243][T10497] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 219.839968][T10359] lo speed is unknown, defaulting to 1000 [ 220.033857][T10509] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 220.073804][T10507] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1197'. [ 220.087709][T10507] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 220.196251][T10359] lo speed is unknown, defaulting to 1000 [ 220.379279][T10519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1202'. [ 220.500045][T10359] lo speed is unknown, defaulting to 1000 [ 220.661771][T10527] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1206'. [ 220.696896][T10525] netlink: 'syz.0.1205': attribute type 27 has an invalid length. [ 220.769124][T10530] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1207'. [ 220.918851][ T5168] Bluetooth: hci4: link tx timeout [ 220.924892][ T5168] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 220.933455][ T5853] Bluetooth: hci4: link tx timeout [ 220.940566][ T5853] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 220.949725][ T5853] Bluetooth: hci4: link tx timeout [ 220.955018][ T5853] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 220.965243][ T5853] Bluetooth: hci4: link tx timeout [ 220.970598][ T5853] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 220.981735][ T5853] Bluetooth: hci4: link tx timeout [ 220.986967][ T5853] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 220.995023][ T5853] Bluetooth: hci4: link tx timeout [ 221.000422][ T5853] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 221.008390][ T5853] Bluetooth: hci4: link tx timeout [ 221.013775][ T5853] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 221.228793][ T5853] Bluetooth: hci4: link tx timeout [ 221.234033][ T5853] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 221.254431][ T5853] Bluetooth: hci4: link tx timeout [ 221.259722][ T5853] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 221.505182][T10541] tipc: Enabling of bearer rejected, already enabled [ 221.710949][T10544] lo speed is unknown, defaulting to 1000 [ 221.763845][T10551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1214'. [ 221.791742][T10553] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 222.114706][T10561] netlink: 'syz.1.1218': attribute type 13 has an invalid length. [ 222.186361][T10561] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 222.300169][ T8780] lo speed is unknown, defaulting to 1000 [ 222.959007][ T5853] Bluetooth: hci4: command 0x0405 tx timeout [ 223.043047][T10578] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1224'. [ 223.105773][T10585] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1225'. [ 223.218205][T10589] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (3) [ 223.256126][T10591] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (3) [ 223.399948][T10595] netlink: 'syz.1.1228': attribute type 13 has an invalid length. [ 223.421676][T10595] __nla_validate_parse: 1 callbacks suppressed [ 223.421714][T10595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1228'. [ 223.452808][T10596] netlink: 'syz.0.1229': attribute type 11 has an invalid length. [ 223.462295][T10598] lo: left promiscuous mode [ 223.536425][T10598] batadv_slave_1: left promiscuous mode [ 223.544336][T10602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1229'. [ 223.553368][T10598] vlan0: left promiscuous mode [ 223.565083][T10602] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1229'. [ 223.568214][T10598] veth5: left promiscuous mode [ 223.594548][T10598] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 223.734636][T10606] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1232'. [ 223.759010][T10593] lo speed is unknown, defaulting to 1000 [ 224.251960][T10625] Cannot find add_set index 0 as target [ 225.648449][T10611] syz.2.1234: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x404dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_RETRY_MAYFAIL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 225.669538][T10611] CPU: 0 UID: 0 PID: 10611 Comm: syz.2.1234 Not tainted 6.16.0-rc6-syzkaller-01562-gd61f6cb6f6ef #0 PREEMPT(full) [ 225.669589][T10611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 225.669602][T10611] Call Trace: [ 225.669611][T10611] [ 225.669621][T10611] dump_stack_lvl+0x189/0x250 [ 225.669658][T10611] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.669684][T10611] ? __pfx__printk+0x10/0x10 [ 225.669714][T10611] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 225.669742][T10611] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 225.669773][T10611] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 225.669805][T10611] warn_alloc+0x214/0x310 [ 225.669832][T10611] ? __pfx_warn_alloc+0x10/0x10 [ 225.669862][T10611] ? __get_vm_area_node+0x28f/0x300 [ 225.669894][T10611] ? veth_dev_init+0x363/0x570 [ 225.669924][T10611] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 225.669990][T10611] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 225.670021][T10611] ? __kasan_kmalloc_large+0x1c/0xa0 [ 225.670057][T10611] ? rcu_is_watching+0x15/0xb0 [ 225.670083][T10611] ? veth_dev_init+0x363/0x570 [ 225.670105][T10611] ? veth_dev_init+0x363/0x570 [ 225.670134][T10611] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 225.670165][T10611] ? veth_dev_init+0x363/0x570 [ 225.670199][T10611] veth_dev_init+0x363/0x570 [ 225.670232][T10611] register_netdevice+0x6bc/0x1ae0 [ 225.670283][T10611] ? snprintf+0xda/0x120 [ 225.670318][T10611] ? __pfx_register_netdevice+0x10/0x10 [ 225.670343][T10611] ? __pfx_snprintf+0x10/0x10 [ 225.670370][T10611] ? __asan_memset+0x22/0x50 [ 225.670409][T10611] ? dev_addr_mod+0x2ce/0x3d0 [ 225.670439][T10611] veth_newlink+0x5cc/0xa50 [ 225.670467][T10611] ? __pfx_veth_newlink+0x10/0x10 [ 225.670514][T10611] ? __pfx_css_rstat_updated+0x10/0x10 [ 225.670610][T10611] ? validate_linkmsg+0x765/0x950 [ 225.670651][T10611] ? __pfx_veth_newlink+0x10/0x10 [ 225.670678][T10611] rtnl_newlink_create+0x310/0xb00 [ 225.670709][T10611] ? __pfx_aa_get_newest_label+0x10/0x10 [ 225.670736][T10611] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 225.670757][T10611] ? rtnl_newlink+0x8db/0x1c70 [ 225.670780][T10611] ? __pfx___mutex_lock+0x10/0x10 [ 225.670813][T10611] ? ns_capable+0x8a/0xf0 [ 225.670841][T10611] rtnl_newlink+0x16d6/0x1c70 [ 225.670864][T10611] ? netlink_sendmsg+0x805/0xb30 [ 225.670890][T10611] ? __pfx_rtnl_newlink+0x10/0x10 [ 225.670965][T10611] ? __lock_acquire+0xab9/0xd20 [ 225.671013][T10611] ? __pfx_rtnl_newlink+0x10/0x10 [ 225.671027][T10611] rtnetlink_rcv_msg+0x7cf/0xb70 [ 225.671055][T10611] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 225.671089][T10611] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 225.671119][T10611] ? ref_tracker_free+0x63a/0x7d0 [ 225.671141][T10611] ? __copy_skb_header+0xa7/0x550 [ 225.671168][T10611] ? __pfx_ref_tracker_free+0x10/0x10 [ 225.671193][T10611] netlink_rcv_skb+0x205/0x470 [ 225.671217][T10611] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 225.671242][T10611] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 225.671275][T10611] ? netlink_deliver_tap+0x2e/0x1b0 [ 225.671304][T10611] ? netlink_deliver_tap+0x2e/0x1b0 [ 225.671331][T10611] netlink_unicast+0x75c/0x8e0 [ 225.671361][T10611] netlink_sendmsg+0x805/0xb30 [ 225.671383][T10611] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.671400][T10611] ? aa_sock_msg_perm+0x94/0x160 [ 225.671416][T10611] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 225.671432][T10611] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.671447][T10611] __sock_sendmsg+0x219/0x270 [ 225.671471][T10611] ____sys_sendmsg+0x505/0x830 [ 225.671493][T10611] ? __pfx_____sys_sendmsg+0x10/0x10 [ 225.671517][T10611] ? import_iovec+0x74/0xa0 [ 225.671541][T10611] ___sys_sendmsg+0x21f/0x2a0 [ 225.671560][T10611] ? __pfx____sys_sendmsg+0x10/0x10 [ 225.671583][T10611] ? futex_wait+0x285/0x360 [ 225.671618][T10611] ? __lock_acquire+0xab9/0xd20 [ 225.671641][T10611] __x64_sys_sendmsg+0x19b/0x260 [ 225.671661][T10611] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 225.671687][T10611] ? rcu_is_watching+0x15/0xb0 [ 225.671710][T10611] ? do_syscall_64+0xbe/0x3b0 [ 225.671728][T10611] do_syscall_64+0xfa/0x3b0 [ 225.671742][T10611] ? lockdep_hardirqs_on+0x9c/0x150 [ 225.671764][T10611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.671779][T10611] ? clear_bhb_loop+0x60/0xb0 [ 225.671797][T10611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.671812][T10611] RIP: 0033:0x7f259b18e929 [ 225.671826][T10611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.671840][T10611] RSP: 002b:00007f2598ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.671855][T10611] RAX: ffffffffffffffda RBX: 00007f259b3b5fa0 RCX: 00007f259b18e929 [ 225.671866][T10611] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: 0000000000000007 [ 225.671876][T10611] RBP: 00007f259b210ca1 R08: 0000000000000000 R09: 0000000000000000 [ 225.671885][T10611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.671894][T10611] R13: 0000000000000000 R14: 00007f259b3b5fa0 R15: 00007ffca3771fa8 [ 225.671917][T10611] [ 225.671933][T10611] Mem-Info: [ 226.163499][T10611] active_anon:4570 inactive_anon:0 isolated_anon:0 [ 226.163499][T10611] active_file:1766 inactive_file:39887 isolated_file:0 [ 226.163499][T10611] unevictable:768 dirty:197 writeback:0 [ 226.163499][T10611] slab_reclaimable:11766 slab_unreclaimable:205898 [ 226.163499][T10611] mapped:30506 shmem:1371 pagetables:1135 [ 226.163499][T10611] sec_pagetables:0 bounce:0 [ 226.163499][T10611] kernel_misc_reclaimable:0 [ 226.163499][T10611] free:1219791 free_pcp:16761 free_cma:0 [ 226.209020][T10611] Node 0 active_anon:18280kB inactive_anon:0kB active_file:7064kB inactive_file:159348kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122024kB dirty:788kB writeback:0kB shmem:3948kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13072kB pagetables:4408kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 226.247415][T10611] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 226.282325][T10611] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 226.311494][T10611] lowmem_reserve[]: 0 2498 2499 2499 2499 [ 226.317396][T10611] Node 0 DMA32 free:962144kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18236kB inactive_anon:0kB active_file:7064kB inactive_file:157768kB unevictable:1536kB writepending:788kB present:3129332kB managed:2558352kB mlocked:0kB bounce:0kB free_pcp:51420kB local_pcp:34144kB free_cma:0kB [ 226.350270][T10611] lowmem_reserve[]: 0 0 1 1 1 [ 226.355044][T10611] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 226.385505][T10611] lowmem_reserve[]: 0 0 0 0 0 [ 226.390567][T10611] Node 1 Normal free:3901648kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:15680kB local_pcp:6368kB free_cma:0kB [ 226.424855][T10611] lowmem_reserve[]: 0 0 0 0 0 [ 226.429714][T10611] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 226.442987][T10611] Node 0 DMA32: 2823*4kB (UM) 1630*8kB (UME) 322*16kB (UME) 864*32kB (UME) 331*64kB (UME) 117*128kB (UME) 43*256kB (UME) 24*512kB (UM) 4*1024kB (UM) 1*2048kB (U) 205*4096kB (M) = 962412kB [ 226.461943][T10611] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 226.474622][T10611] Node 1 Normal: 188*4kB (UE) 42*8kB (UME) 33*16kB (UME) 118*32kB (UME) 35*64kB (UME) 8*128kB (UME) 3*256kB (UM) 4*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 948*4096kB (M) = 3901648kB [ 226.492857][T10611] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 226.502890][T10611] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 226.512370][T10611] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 226.522070][T10611] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 226.531421][T10611] 43020 total pagecache pages [ 226.536133][T10611] 0 pages in swap cache [ 226.540376][T10611] Free swap = 124996kB [ 226.544541][T10611] Total swap = 124996kB [ 226.548765][T10611] 2097051 pages RAM [ 226.552591][T10611] 0 pages HighMem/MovableOnly [ 226.557365][T10611] 425421 pages reserved [ 226.561593][T10611] 0 pages cma reserved [ 227.921106][T10612] veth9: entered promiscuous mode [ 228.085249][T10643] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.189362][T10649] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1245'. [ 228.339781][T10659] netlink: 'syz.3.1247': attribute type 1 has an invalid length. [ 228.361641][T10659] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1247'. [ 228.489299][T10666] bond1: left promiscuous mode [ 228.495109][T10666] hsr1: left promiscuous mode [ 228.513359][T10666] bond5: left promiscuous mode [ 228.519749][T10666] veth9: left promiscuous mode [ 228.862954][T10683] TCP: tcp_parse_options: Illegal window scaling value 128 > 14 received [ 229.186132][T10695] netlink: 'syz.2.1257': attribute type 1 has an invalid length. [ 229.350691][T10705] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1258'. [ 229.777851][T10722] lo speed is unknown, defaulting to 1000 [ 229.837776][T10726] netlink: 'syz.0.1265': attribute type 1 has an invalid length. [ 229.884934][T10732] netlink: 'syz.2.1266': attribute type 1 has an invalid length. [ 229.931853][T10726] bond7: entered promiscuous mode [ 229.937409][T10726] 8021q: adding VLAN 0 to HW filter on device bond7 [ 229.994232][T10732] 8021q: adding VLAN 0 to HW filter on device bond3 [ 230.022116][T10731] 8021q: adding VLAN 0 to HW filter on device bond7 [ 230.029829][T10731] bond7: (slave vcan1): The slave device specified does not support setting the MAC address [ 230.040248][T10731] bond7: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 230.054259][T10731] bond7: (slave vcan1): making interface the new active one [ 230.061859][T10731] vcan1: entered promiscuous mode [ 230.069304][T10731] bond7: (slave vcan1): Enslaving as an active interface with an up link [ 230.082434][T10739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1268'. [ 230.099626][T10739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1268'. [ 230.134617][T10739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1268'. [ 230.185165][T10739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1268'. [ 230.278333][T10739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1268'. [ 230.331053][T10739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1268'. [ 230.382777][T10739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1268'. [ 230.409034][T10739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1268'. [ 230.429715][T10739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1268'. [ 230.491346][T10751] nbd: must specify an index to disconnect [ 231.145270][T10766] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 231.218330][T10774] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 231.502985][T10792] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 231.766393][T10803] lo speed is unknown, defaulting to 1000 [ 231.853520][T10806] netlink: 'syz.2.1283': attribute type 1 has an invalid length. [ 233.002178][T10837] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 233.012903][T10841] netlink: 'syz.1.1291': attribute type 1 has an invalid length. [ 234.166400][T10889] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 234.401977][T10897] __nla_validate_parse: 73 callbacks suppressed [ 234.402028][T10897] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1309'. [ 234.761042][T10909] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1312'. [ 235.956039][T10916] netlink: 'syz.1.1316': attribute type 5 has an invalid length. [ 235.978924][T10916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1316'. [ 236.060852][T10916] bridge2: entered promiscuous mode [ 236.066111][T10916] bridge2: entered allmulticast mode [ 236.270189][T10931] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1320'. [ 236.408114][T10936] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1321'. [ 236.408317][T10939] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1323'. [ 236.578987][T10947] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1324'. [ 236.633964][T10947] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1324'. [ 236.671236][T10952] netlink: 'syz.0.1327': attribute type 1 has an invalid length. [ 236.746116][T10952] bond8: entered promiscuous mode [ 236.761680][T10952] bond8: entered allmulticast mode [ 236.777507][T10952] 8021q: adding VLAN 0 to HW filter on device bond8 [ 236.793169][T10952] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1327'. [ 237.214755][T10977] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1335'. [ 237.398482][T10986] ip6t_srh: unknown srh match flags 4000 [ 237.544788][ T30] audit: type=1800 audit(1752833684.993:4): pid=10999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1341" name=35FFFF dev="tmpfs" ino=1298 res=0 errno=0 [ 237.591009][ T30] audit: type=1800 audit(1752833685.023:5): pid=10999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1341" name=35FFFF dev="tmpfs" ino=1298 res=0 errno=0 [ 237.621308][T11000] lo speed is unknown, defaulting to 1000 [ 238.348447][T11034] netlink: 'syz.0.1352': attribute type 7 has an invalid length. [ 238.584026][T11038] @ÿ: renamed from bond_slave_0 [ 239.575484][T11072] __nla_validate_parse: 2 callbacks suppressed [ 239.575505][T11072] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1361'. [ 239.700122][T11081] netlink: 'syz.3.1363': attribute type 3 has an invalid length. [ 239.855694][T11085] sock: sock_timestamping_bind_phc: sock not bind to device [ 239.935822][T11087] tun0: tun_chr_ioctl cmd 35111 [ 240.245851][T11092] bond3: (slave bridge2): Releasing backup interface [ 240.358353][T11096] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1368'. [ 240.390187][T11099] lo speed is unknown, defaulting to 1000 [ 241.488007][T11101] lo speed is unknown, defaulting to 1000 [ 241.775055][T11116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1372'. [ 241.894854][T11122] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1374'. [ 242.173848][T11132] netlink: 'syz.4.1377': attribute type 10 has an invalid length. [ 242.204198][T11133] netlink: 'syz.4.1377': attribute type 10 has an invalid length. [ 242.388173][T11133] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 242.429407][T11140] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1379'. [ 242.729002][T11149] netlink: 'syz.4.1382': attribute type 3 has an invalid length. [ 242.736845][T11149] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1382'. [ 243.029614][T11166] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1386'. [ 243.133919][T11173] netlink: 'syz.4.1387': attribute type 64 has an invalid length. [ 243.171563][T11173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1387'. [ 243.734143][T11201] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1394'. [ 243.875630][T11215] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1399'. [ 243.989469][T11224] netlink: 'syz.1.1402': attribute type 1 has an invalid length. [ 244.000709][T11223] tipc: Enabling of bearer rejected, already enabled [ 244.230844][T11234] lo speed is unknown, defaulting to 1000 [ 244.582520][T11250] __nla_validate_parse: 2 callbacks suppressed [ 244.582541][T11250] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1410'. [ 244.802926][T11258] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1413'. [ 244.891058][T11260] ip6t_rpfilter: unknown options [ 245.342726][T11283] netlink: 'syz.0.1421': attribute type 3 has an invalid length. [ 245.859609][T11317] xt_bpf: check failed: parse error [ 245.998636][ T5853] Bluetooth: hci4: command 0x0405 tx timeout [ 246.160253][T11330] netlink: 'syz.1.1435': attribute type 4 has an invalid length. [ 246.212127][T11332] netlink: 'syz.1.1435': attribute type 4 has an invalid length. [ 246.267504][ T8768] lo speed is unknown, defaulting to 1000 [ 246.277814][ T8768] lo speed is unknown, defaulting to 1000 [ 246.299004][ T8790] lo speed is unknown, defaulting to 1000 [ 246.400747][T11338] netlink: 'syz.1.1437': attribute type 13 has an invalid length. [ 246.419512][T11338] netlink: 'syz.1.1437': attribute type 17 has an invalid length. [ 246.486378][T11338] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 246.618501][T11347] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1440'. [ 246.627739][T11347] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 246.657105][T11348] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1440'. [ 246.675448][T11348] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 246.693731][T11350] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1440'. [ 246.703844][T11348] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1440'. [ 247.062926][T11369] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1446'. [ 247.089668][T11369] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1446'. [ 247.101519][T11369] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1446'. [ 247.111146][T11369] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1446'. [ 247.290384][T11379] batadv_slave_0: entered promiscuous mode [ 247.738513][T11404] validate_nla: 1 callbacks suppressed [ 247.744355][T11404] netlink: 'syz.4.1457': attribute type 2 has an invalid length. [ 249.087567][T11400] geneve1: entered promiscuous mode [ 249.112475][ T8860] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.136619][ T8860] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.154486][ T8860] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.172648][ T8860] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.243082][T11420] netem: incorrect ge model size [ 249.248434][T11420] netem: change failed [ 249.266808][T11421] netem: incorrect ge model size [ 249.286348][T11421] netem: change failed [ 249.684011][T11450] x_tables: duplicate underflow at hook 1 [ 249.719632][T11450] x_tables: duplicate underflow at hook 1 [ 249.873544][T11448] syzkaller0: entered promiscuous mode [ 249.889381][T11448] syzkaller0: entered allmulticast mode [ 250.033577][T11448] lo speed is unknown, defaulting to 1000 [ 250.069981][T11466] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 250.070118][T11470] __nla_validate_parse: 70 callbacks suppressed [ 250.070137][T11470] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1469'. [ 250.543407][T11485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1474'. [ 250.559873][T11485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1474'. [ 250.572855][T11485] netlink: 'syz.0.1474': attribute type 3 has an invalid length. [ 252.343989][T11499] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1477'. [ 252.580746][T11509] macvlan1 (unregistering): left promiscuous mode [ 252.612450][T11514] netlink: 'syz.3.1482': attribute type 1 has an invalid length. [ 252.645616][T11514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1482'. [ 252.804520][ T5168] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 252.814111][ T5168] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 252.822663][ T5168] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 252.839665][ T5168] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 252.847564][ T5168] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 252.904943][T11527] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1483'. [ 253.007823][T11520] lo speed is unknown, defaulting to 1000 [ 253.468304][T11549] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1485'. [ 253.612811][T11522] lo speed is unknown, defaulting to 1000 [ 253.876498][T11559] netlink: 'syz.0.1489': attribute type 1 has an invalid length. [ 253.898492][T11559] netlink: 'syz.0.1489': attribute type 3 has an invalid length. [ 253.906492][T11559] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1489'. [ 253.917815][T11559] NCSI netlink: No device for ifindex 246 [ 254.879053][ T5853] Bluetooth: hci5: command tx timeout [ 254.983500][T11589] syzkaller0: entered promiscuous mode [ 254.999387][T11589] syzkaller0: entered allmulticast mode [ 255.107940][T11522] chnl_net:caif_netlink_parms(): no params data found [ 255.318980][T11604] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1498'. [ 255.438355][T11613] ksmbd: Unknown IPC event: 3, ignore. [ 255.472316][T11604] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 255.579830][T11622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1503'. [ 255.670399][T11622] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 255.684898][T11622] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7) [ 255.699676][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.706380][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.711757][T11522] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.737710][T11522] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.747599][T11522] bridge_slave_0: entered allmulticast mode [ 255.758827][T11522] bridge_slave_0: entered promiscuous mode [ 255.773719][T11522] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.783550][T11522] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.795422][T11522] bridge_slave_1: entered allmulticast mode [ 255.839451][T11522] bridge_slave_1: entered promiscuous mode [ 255.922246][T11636] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1508'. [ 255.937286][T11641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1510'. [ 256.193684][T11643] netlink: 'syz.0.1508': attribute type 17 has an invalid length. [ 256.250840][T11522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.288231][T11648] vlan0: entered promiscuous mode [ 256.316780][T11648] macvlan2: entered promiscuous mode [ 256.346262][T11522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.453157][T11659] netlink: 'syz.3.1513': attribute type 21 has an invalid length. [ 256.488101][T11664] netlink: 'syz.3.1513': attribute type 21 has an invalid length. [ 256.497240][T11522] team0: Port device team_slave_0 added [ 256.516952][T11522] team0: Port device team_slave_1 added [ 256.535076][T11659] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1513'. [ 256.570702][T11664] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1513'. [ 256.761925][T11522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.773686][T11522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.813965][T11522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.835649][T11522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.843878][T11522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.870723][T11522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.959030][ T5853] Bluetooth: hci5: command tx timeout [ 257.017391][T11677] 8021q: adding VLAN 0 to HW filter on device bond4 [ 257.026600][T11677] bond0: (slave bond4): Enslaving as an active interface with an up link [ 257.042035][T11522] hsr_slave_0: entered promiscuous mode [ 257.048883][T11522] hsr_slave_1: entered promiscuous mode [ 257.059524][T11522] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.067112][T11522] Cannot create hsr debugfs directory [ 257.106099][T11692] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1523'. [ 257.260318][T11700] netlink: 'syz.0.1525': attribute type 15 has an invalid length. [ 257.531676][T11710] bridge0: port 1(gretap0) entered blocking state [ 257.540744][T11710] bridge0: port 1(gretap0) entered disabled state [ 257.547475][T11710] gretap0: entered allmulticast mode [ 257.557630][T11710] gretap0: entered promiscuous mode [ 257.625881][T11522] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 257.627721][T11714] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 257.663316][T11522] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 257.676994][T11522] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 257.708263][T11522] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 257.806004][T11726] macsec2: entered allmulticast mode [ 257.813556][T11726] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 257.822461][T11726] batman_adv: batadv0: Adding interface: macsec2 [ 257.829259][T11726] batman_adv: batadv0: The MTU of interface macsec2 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.856497][T11726] batman_adv: batadv0: Interface activated: macsec2 [ 258.017388][T11737] FAULT_INJECTION: forcing a failure. [ 258.017388][T11737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.037157][T11522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.088891][T11737] CPU: 0 UID: 0 PID: 11737 Comm: syz.0.1537 Not tainted 6.16.0-rc6-syzkaller-01562-gd61f6cb6f6ef #0 PREEMPT(full) [ 258.088923][T11737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 258.088936][T11737] Call Trace: [ 258.088945][T11737] [ 258.088954][T11737] dump_stack_lvl+0x189/0x250 [ 258.088985][T11737] ? __pfx____ratelimit+0x10/0x10 [ 258.089016][T11737] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.089041][T11737] ? __pfx__printk+0x10/0x10 [ 258.089069][T11737] ? __might_fault+0xb0/0x130 [ 258.089109][T11737] should_fail_ex+0x414/0x560 [ 258.089136][T11737] _copy_from_user+0x2d/0xb0 [ 258.089165][T11737] ___sys_sendmsg+0x158/0x2a0 [ 258.089193][T11737] ? __pfx____sys_sendmsg+0x10/0x10 [ 258.089256][T11737] ? __fget_files+0x2a/0x420 [ 258.089273][T11737] ? __fget_files+0x3a0/0x420 [ 258.089303][T11737] __x64_sys_sendmsg+0x19b/0x260 [ 258.089337][T11737] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 258.089371][T11737] ? __pfx_ksys_write+0x10/0x10 [ 258.089405][T11737] ? do_syscall_64+0xbe/0x3b0 [ 258.089430][T11737] do_syscall_64+0xfa/0x3b0 [ 258.089448][T11737] ? lockdep_hardirqs_on+0x9c/0x150 [ 258.089478][T11737] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.089499][T11737] ? clear_bhb_loop+0x60/0xb0 [ 258.089523][T11737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.089543][T11737] RIP: 0033:0x7f780c58e929 [ 258.089562][T11737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.089580][T11737] RSP: 002b:00007f780d3a2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 258.089603][T11737] RAX: ffffffffffffffda RBX: 00007f780c7b5fa0 RCX: 00007f780c58e929 [ 258.089617][T11737] RDX: 0000000000000844 RSI: 0000200000000200 RDI: 0000000000000004 [ 258.089630][T11737] RBP: 00007f780d3a2090 R08: 0000000000000000 R09: 0000000000000000 [ 258.089642][T11737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.089653][T11737] R13: 0000000000000000 R14: 00007f780c7b5fa0 R15: 00007ffcadab2458 [ 258.089685][T11737] [ 258.099515][T11522] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.381411][ T2958] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.388633][ T2958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.466936][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.475060][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.542452][T11751] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 258.694888][T11755] team0: Port device gtp1 added [ 258.737459][T11761] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1545'. [ 259.038813][ T5853] Bluetooth: hci5: command tx timeout [ 259.212185][T11786] FAULT_INJECTION: forcing a failure. [ 259.212185][T11786] name failslab, interval 1, probability 0, space 0, times 0 [ 259.233475][T11786] CPU: 1 UID: 0 PID: 11786 Comm: syz.4.1548 Not tainted 6.16.0-rc6-syzkaller-01562-gd61f6cb6f6ef #0 PREEMPT(full) [ 259.233517][T11786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 259.233533][T11786] Call Trace: [ 259.233544][T11786] [ 259.233553][T11786] dump_stack_lvl+0x189/0x250 [ 259.233581][T11786] ? __pfx____ratelimit+0x10/0x10 [ 259.233612][T11786] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.233635][T11786] ? __pfx__printk+0x10/0x10 [ 259.233667][T11786] ? __pfx___might_resched+0x10/0x10 [ 259.233696][T11786] should_fail_ex+0x414/0x560 [ 259.233722][T11786] should_failslab+0xa8/0x100 [ 259.233754][T11786] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 259.233783][T11786] ? __alloc_skb+0x112/0x2d0 [ 259.233807][T11786] __alloc_skb+0x112/0x2d0 [ 259.233829][T11786] netlink_sendmsg+0x5c6/0xb30 [ 259.233860][T11786] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.233884][T11786] ? aa_sock_msg_perm+0x94/0x160 [ 259.233907][T11786] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 259.233927][T11786] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.233947][T11786] __sock_sendmsg+0x219/0x270 [ 259.233979][T11786] ____sys_sendmsg+0x505/0x830 [ 259.234010][T11786] ? __pfx_____sys_sendmsg+0x10/0x10 [ 259.234042][T11786] ? import_iovec+0x74/0xa0 [ 259.234073][T11786] ___sys_sendmsg+0x21f/0x2a0 [ 259.234100][T11786] ? __pfx____sys_sendmsg+0x10/0x10 [ 259.234161][T11786] ? __fget_files+0x2a/0x420 [ 259.234177][T11786] ? __fget_files+0x3a0/0x420 [ 259.234214][T11786] __x64_sys_sendmsg+0x19b/0x260 [ 259.234241][T11786] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 259.234275][T11786] ? __pfx_ksys_write+0x10/0x10 [ 259.234300][T11786] ? rcu_is_watching+0x15/0xb0 [ 259.234330][T11786] ? do_syscall_64+0xbe/0x3b0 [ 259.234354][T11786] do_syscall_64+0xfa/0x3b0 [ 259.234372][T11786] ? lockdep_hardirqs_on+0x9c/0x150 [ 259.234402][T11786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.234435][T11786] ? clear_bhb_loop+0x60/0xb0 [ 259.234458][T11786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.234478][T11786] RIP: 0033:0x7f2f34b8e929 [ 259.234496][T11786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.234513][T11786] RSP: 002b:00007f2f35992038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 259.234534][T11786] RAX: ffffffffffffffda RBX: 00007f2f34db5fa0 RCX: 00007f2f34b8e929 [ 259.234567][T11786] RDX: 0000000000000844 RSI: 0000200000000200 RDI: 0000000000000004 [ 259.234580][T11786] RBP: 00007f2f35992090 R08: 0000000000000000 R09: 0000000000000000 [ 259.234593][T11786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.234605][T11786] R13: 0000000000000000 R14: 00007f2f34db5fa0 R15: 00007ffec9bcce28 [ 259.234636][T11786] [ 259.519784][T11785] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1547'. [ 259.720097][T11522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.400364][T11522] veth0_vlan: entered promiscuous mode [ 260.451466][T11522] veth1_vlan: entered promiscuous mode [ 260.606227][T11522] veth0_macvtap: entered promiscuous mode [ 260.642339][T11522] veth1_macvtap: entered promiscuous mode [ 260.689602][T11835] smc: net device bond0 applied user defined pnetid SYZ2 [ 260.707527][T11522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.735789][T11835] smc: net device bond0 erased user defined pnetid SYZ2 [ 260.780722][T11522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.817165][ T8862] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.845435][ T8862] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.914729][ T8862] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.921873][T11842] netlink: 'syz.3.1565': attribute type 21 has an invalid length. [ 260.934687][ T8862] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.963284][T11842] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1565'. [ 260.973584][T11848] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1565'. [ 260.987986][T11842] netlink: 'syz.3.1565': attribute type 4 has an invalid length. [ 261.014654][T11842] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1565'. [ 261.030735][T11850] openvswitch: netlink: IP tunnel TTL not specified. [ 261.144692][ T5853] Bluetooth: hci5: command tx timeout [ 261.439786][T11867] netlink: 'syz.1.1570': attribute type 1 has an invalid length. [ 261.542855][T11861] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 261.570241][T11872] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1573'. [ 261.589748][T11861] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 261.611398][T11872] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 261.755335][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.778401][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.902963][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.904647][T11877] lo speed is unknown, defaulting to 1000 [ 261.951660][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.284538][T11898] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 262.395698][T11903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1582'. [ 262.451569][T11903] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1582'. [ 262.479770][T11903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1582'. [ 262.493601][T11903] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1582'. [ 262.511733][T11900] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1580'. [ 262.604201][T11903] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1582'. [ 262.617725][T11900] batadv1: entered promiscuous mode [ 262.655591][T11906] lo speed is unknown, defaulting to 1000 [ 262.861163][T11919] ip6tnl3: entered promiscuous mode [ 262.908022][T11919] ip6tnl3: entered allmulticast mode [ 264.042704][T11953] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 264.409811][T11969] bridge_slave_1: left allmulticast mode [ 264.415534][T11969] bridge_slave_1: left promiscuous mode [ 264.452070][T11969] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.515586][T11969] bridge_slave_0: left allmulticast mode [ 264.521779][T11969] bridge_slave_0: left promiscuous mode [ 264.537991][T11969] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.242610][T11999] netlink: 'syz.5.1609': attribute type 13 has an invalid length. [ 265.252356][T11999] netlink: 'syz.5.1609': attribute type 17 has an invalid length. [ 265.374523][T11999] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 265.636587][T12013] x_tables: duplicate underflow at hook 4 [ 265.688268][ T8862] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.707112][ T8862] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.716289][ T8862] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.732168][ T8862] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.083813][T12033] netlink: 'syz.3.1617': attribute type 10 has an invalid length. [ 266.095973][T12033] __nla_validate_parse: 84 callbacks suppressed [ 266.095993][T12033] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1617'. [ 266.141553][T12033] team0: Port device geneve0 added [ 266.313284][T12037] openvswitch: netlink: Tunnel attr 227 out of range max 16 [ 266.871212][T12053] bridge0: port 2(veth0_to_bridge) entered blocking state [ 266.891238][T12053] bridge0: port 2(veth0_to_bridge) entered disabled state [ 266.906323][T12053] veth0_to_bridge: entered allmulticast mode [ 266.940434][T12053] veth0_to_bridge: entered promiscuous mode [ 266.979914][T12057] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 267.019226][T12058] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 267.351994][T12076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1629'. [ 267.436240][T12071] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1627'. [ 267.445749][T12071] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 267.453027][T12071] IPv6: NLM_F_CREATE should be set when creating new route [ 267.608807][T12083] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1632'. [ 267.802723][T12087] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1634'. [ 267.819278][T12087] netlink: 564 bytes leftover after parsing attributes in process `syz.5.1634'. [ 267.828497][T12087] netlink: 171 bytes leftover after parsing attributes in process `syz.5.1634'. [ 267.858759][T12087] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1634'. [ 267.888063][T12087] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1634'. [ 267.897126][T12092] tipc: Enabled bearer , priority 0 [ 267.917399][T12092] syzkaller0: entered promiscuous mode [ 267.931969][T12092] syzkaller0: entered allmulticast mode [ 267.940500][T12087] netlink: 102 bytes leftover after parsing attributes in process `syz.5.1634'. [ 268.061136][T12092] tipc: Resetting bearer [ 268.123670][T12105] netlink: 'syz.3.1639': attribute type 10 has an invalid length. [ 268.196114][T12105] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 268.212397][T12088] tipc: Resetting bearer [ 268.249353][T12088] tipc: Disabling bearer [ 268.285939][T12109] !: renamed from dummy0 (while UP) [ 269.011493][T12128] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 269.018900][T12128] IPv6: NLM_F_CREATE should be set when creating new route [ 269.818479][T12173] FAULT_INJECTION: forcing a failure. [ 269.818479][T12173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.914481][T12173] CPU: 1 UID: 0 PID: 12173 Comm: syz.1.1653 Not tainted 6.16.0-rc6-syzkaller-01562-gd61f6cb6f6ef #0 PREEMPT(full) [ 269.914514][T12173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 269.914526][T12173] Call Trace: [ 269.914534][T12173] [ 269.914542][T12173] dump_stack_lvl+0x189/0x250 [ 269.914572][T12173] ? __pfx____ratelimit+0x10/0x10 [ 269.914603][T12173] ? __pfx_dump_stack_lvl+0x10/0x10 [ 269.914627][T12173] ? __pfx__printk+0x10/0x10 [ 269.914671][T12173] should_fail_ex+0x414/0x560 [ 269.914697][T12173] _copy_to_user+0x31/0xb0 [ 269.914727][T12173] simple_read_from_buffer+0xe1/0x170 [ 269.914762][T12173] proc_fail_nth_read+0x1df/0x250 [ 269.914785][T12173] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 269.914808][T12173] ? rw_verify_area+0x258/0x650 [ 269.914832][T12173] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 269.914853][T12173] vfs_read+0x200/0x980 [ 269.914885][T12173] ? __pfx___mutex_lock+0x10/0x10 [ 269.914905][T12173] ? __pfx_vfs_read+0x10/0x10 [ 269.914933][T12173] ? __fget_files+0x2a/0x420 [ 269.914955][T12173] ? __fget_files+0x3a0/0x420 [ 269.914971][T12173] ? __fget_files+0x2a/0x420 [ 269.914999][T12173] ksys_read+0x145/0x250 [ 269.915028][T12173] ? __pfx_ksys_read+0x10/0x10 [ 269.915050][T12173] ? rcu_is_watching+0x15/0xb0 [ 269.915079][T12173] ? do_syscall_64+0xbe/0x3b0 [ 269.915102][T12173] do_syscall_64+0xfa/0x3b0 [ 269.915119][T12173] ? lockdep_hardirqs_on+0x9c/0x150 [ 269.915148][T12173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.915168][T12173] ? clear_bhb_loop+0x60/0xb0 [ 269.915193][T12173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.915211][T12173] RIP: 0033:0x7f5819b8d33c [ 269.915229][T12173] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 269.915246][T12173] RSP: 002b:00007f581aaa2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 269.915267][T12173] RAX: ffffffffffffffda RBX: 00007f5819db5fa0 RCX: 00007f5819b8d33c [ 269.915281][T12173] RDX: 000000000000000f RSI: 00007f581aaa20a0 RDI: 0000000000000003 [ 269.915292][T12173] RBP: 00007f581aaa2090 R08: 0000000000000000 R09: 0000000000000000 [ 269.915304][T12173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.915315][T12173] R13: 0000000000000000 R14: 00007f5819db5fa0 R15: 00007ffd06605f58 [ 269.915352][T12173] [ 270.387213][T12181] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 270.454924][T12181] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 270.923849][T12187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 271.202118][T12215] __nla_validate_parse: 6 callbacks suppressed [ 271.202139][T12215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1668'. [ 271.209618][T12213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1667'. [ 271.246109][T12215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1668'. [ 271.281968][T12213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1667'. [ 271.287934][T12215] netlink: 'syz.0.1668': attribute type 3 has an invalid length. [ 271.309159][T12218] openvswitch: netlink: IPv4 tun info is not correct [ 271.342188][T12217] netlink: 'syz.3.1669': attribute type 23 has an invalid length. [ 271.631569][T12217] bridge: RTM_NEWNEIGH with invalid ether address [ 272.665090][T12249] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1678'. [ 272.674596][T12249] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 272.774875][T12256] lo speed is unknown, defaulting to 1000 [ 272.783087][T12260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1680'. [ 272.853846][T12260] batman_adv: batadv0: Interface deactivated: macsec2 [ 272.878261][T12260] batman_adv: batadv0: Removing interface: macsec2 [ 273.016183][T12262] syzkaller0: entered promiscuous mode [ 273.027408][T12262] syzkaller0: entered allmulticast mode [ 274.227675][T12297] netlink: 'syz.1.1691': attribute type 1 has an invalid length. [ 274.290925][T12300] netlink: 'syz.4.1692': attribute type 1 has an invalid length. [ 274.375921][T12299] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 274.473652][T12302] 8021q: adding VLAN 0 to HW filter on device bond4 [ 274.482856][ T8868] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 274.638875][ T2982] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 275.485534][T12332] lo speed is unknown, defaulting to 1000 [ 275.792925][T12362] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.020448][T12376] No such timeout policy "syz0" [ 276.049321][T12376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1710'. [ 276.094313][T12377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1710'. [ 276.109868][T12381] netlink: 'syz.1.1711': attribute type 13 has an invalid length. [ 276.138217][T12381] netlink: 'syz.1.1711': attribute type 17 has an invalid length. [ 276.208036][T12381] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 276.367379][T12391] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1715'. [ 276.371942][T12389] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1714'. [ 276.394003][T12390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.871881][T12405] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1720'. [ 276.922705][T12407] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1720'. [ 277.075281][T12339] lo speed is unknown, defaulting to 1000 [ 277.590494][T12428] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 277.618693][ T8774] IPVS: starting estimator thread 0... [ 277.634720][T12428] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 277.730574][T12433] IPVS: using max 25 ests per chain, 60000 per kthread [ 277.806193][T12443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1728'. [ 278.033169][T12435] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1728'. [ 278.477614][T12463] netlink: 'syz.0.1734': attribute type 42 has an invalid length. [ 279.164643][T12477] warn_alloc: 1 callbacks suppressed [ 279.164662][T12477] syz.1.1738: vmalloc error: size 67108864, failed to allocated page array size 131072, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 279.264364][T12477] CPU: 0 UID: 0 PID: 12477 Comm: syz.1.1738 Not tainted 6.16.0-rc6-syzkaller-01562-gd61f6cb6f6ef #0 PREEMPT(full) [ 279.264396][T12477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 279.264410][T12477] Call Trace: [ 279.264418][T12477] [ 279.264427][T12477] dump_stack_lvl+0x189/0x250 [ 279.264462][T12477] ? __pfx_dump_stack_lvl+0x10/0x10 [ 279.264488][T12477] ? __pfx__printk+0x10/0x10 [ 279.264516][T12477] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 279.264544][T12477] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 279.264574][T12477] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 279.264616][T12477] warn_alloc+0x214/0x310 [ 279.264642][T12477] ? __pfx_warn_alloc+0x10/0x10 [ 279.264671][T12477] ? __get_vm_area_node+0x28f/0x300 [ 279.264701][T12477] ? translate_table+0x1a8/0x1f90 [ 279.264728][T12477] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 279.264790][T12477] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 279.264826][T12477] ? rcu_is_watching+0x15/0xb0 [ 279.264851][T12477] ? translate_table+0x1a8/0x1f90 [ 279.264879][T12477] ? translate_table+0x1a8/0x1f90 [ 279.264899][T12477] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 279.264929][T12477] ? translate_table+0x1a8/0x1f90 [ 279.264949][T12477] ? xt_alloc_table_info+0x3b/0xa0 [ 279.264980][T12477] translate_table+0x1a8/0x1f90 [ 279.265034][T12477] ? __pfx_translate_table+0x10/0x10 [ 279.265076][T12477] ? _copy_from_user+0x94/0xb0 [ 279.265110][T12477] do_arpt_set_ctl+0x993/0xf10 [ 279.265137][T12477] ? __mutex_trylock_common+0x153/0x260 [ 279.265167][T12477] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 279.265195][T12477] ? rcu_is_watching+0x15/0xb0 [ 279.265236][T12477] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 279.265259][T12477] ? __pfx___mutex_lock+0x10/0x10 [ 279.265278][T12477] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 279.265296][T12477] ? aa_sk_perm+0x81e/0x950 [ 279.265333][T12477] ? __pfx_aa_sk_perm+0x10/0x10 [ 279.265370][T12477] nf_setsockopt+0x26f/0x290 [ 279.265395][T12477] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 279.265429][T12477] do_sock_setsockopt+0x17c/0x1b0 [ 279.265457][T12477] __x64_sys_setsockopt+0x13f/0x1b0 [ 279.265485][T12477] do_syscall_64+0xfa/0x3b0 [ 279.265504][T12477] ? lockdep_hardirqs_on+0x9c/0x150 [ 279.265533][T12477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.265551][T12477] ? clear_bhb_loop+0x60/0xb0 [ 279.265574][T12477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.265593][T12477] RIP: 0033:0x7f5819b8e929 [ 279.265611][T12477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.265626][T12477] RSP: 002b:00007f581aaa2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 279.265647][T12477] RAX: ffffffffffffffda RBX: 00007f5819db5fa0 RCX: 00007f5819b8e929 [ 279.265662][T12477] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 000000000000000a [ 279.265690][T12477] RBP: 00007f5819c10ca1 R08: 0000000000000a50 R09: 0000000000000000 [ 279.265703][T12477] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 279.265715][T12477] R13: 0000000000000000 R14: 00007f5819db5fa0 R15: 00007ffd06605f58 [ 279.265748][T12477] [ 279.265756][T12477] Mem-Info: [ 279.451472][T12493] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1742'. [ 279.601203][T12497] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1742'. [ 279.613789][T12477] active_anon:7953 inactive_anon:0 isolated_anon:0 [ 279.613789][T12477] active_file:1787 inactive_file:39910 isolated_file:0 [ 279.613789][T12477] unevictable:768 dirty:164 writeback:0 [ 279.613789][T12477] slab_reclaimable:11620 slab_unreclaimable:221215 [ 279.613789][T12477] mapped:37484 shmem:4241 pagetables:1288 [ 279.613789][T12477] sec_pagetables:0 bounce:0 [ 279.613789][T12477] kernel_misc_reclaimable:0 [ 279.613789][T12477] free:1188328 free_pcp:18771 free_cma:0 [ 279.718655][T12477] Node 0 active_anon:31912kB inactive_anon:0kB active_file:7148kB inactive_file:159440kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:149936kB dirty:656kB writeback:0kB shmem:15428kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:14036kB pagetables:5020kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 279.789109][T12477] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 279.857392][T12477] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 279.937455][T12477] lowmem_reserve[]: 0 2498 2499 2499 2499 [ 279.958969][T12477] Node 0 DMA32 free:833572kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31660kB inactive_anon:0kB active_file:7148kB inactive_file:157860kB unevictable:1536kB writepending:656kB present:3129332kB managed:2558352kB mlocked:0kB bounce:0kB free_pcp:60072kB local_pcp:35268kB free_cma:0kB [ 280.048474][T12477] lowmem_reserve[]: 0 0 1 1 1 [ 280.054127][T12477] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 280.158721][T12477] lowmem_reserve[]: 0 0 0 0 0 [ 280.188229][T12477] Node 1 Normal free:3901648kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:15696kB local_pcp:6380kB free_cma:0kB [ 280.265136][T12477] lowmem_reserve[]: 0 0 0 0 0 [ 280.267292][T12503] netlink: 'syz.3.1744': attribute type 1 has an invalid length. [ 280.280775][T12477] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 280.302065][T12503] netlink: 'syz.3.1744': attribute type 1 has an invalid length. [ 280.328583][T12477] Node 0 DMA32: 43*4kB (ME) 614*8kB (UME) 730*16kB (UME) 294*32kB (UME) 530*64kB (UME) 394*128kB (UME) 221*256kB (UME) 101*512kB (UM) 19*1024kB (UM) 1*2048kB (U) 146*4096kB (M) = 838332kB [ 280.368662][T12477] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 280.418275][T12477] Node 1 Normal: 188*4kB (UE) 42*8kB (UME) 33*16kB (UME) 118*32kB (UME) 35*64kB (UME) 8*128kB (UME) 3*256kB (UM) 4*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 948*4096kB (M) = 3901648kB [ 280.526067][T12509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1746'. [ 280.537135][T12477] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 280.581767][T12512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1747'. [ 280.600353][T12477] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 280.649005][T12477] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 280.714700][T12477] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 280.750395][T12477] 44334 total pagecache pages [ 280.755134][T12477] 0 pages in swap cache [ 280.796668][T12477] Free swap = 124996kB [ 280.805672][T12477] Total swap = 124996kB [ 280.823455][T12477] 2097051 pages RAM [ 280.839132][T12477] 0 pages HighMem/MovableOnly [ 280.843850][T12477] 425421 pages reserved [ 280.848023][T12477] 0 pages cma reserved [ 280.898019][T12518] netlink: del zone limit has 8 unknown bytes [ 283.220010][T12590] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 284.809855][T12529] __nla_validate_parse: 1 callbacks suppressed [ 284.809877][T12529] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1753'. [ 284.870894][T12595] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1760'. [ 284.897352][T12595] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1760'. [ 284.925044][T12595] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1760'. [ 284.958713][T12598] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1761'. [ 284.967833][T12595] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1760'. [ 284.992519][T12595] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1760'. [ 285.032620][T12595] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1760'. [ 285.054350][T12595] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1760'. [ 285.092416][T12595] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1760'. [ 285.129928][T12590] lo speed is unknown, defaulting to 1000 [ 285.278986][ T5168] Bluetooth: hci5: command 0x0405 tx timeout [ 285.732164][T12604] lo speed is unknown, defaulting to 1000 [ 285.907254][T12626] netlink: 'syz.4.1768': attribute type 13 has an invalid length. [ 285.923392][T12626] netlink: 'syz.4.1768': attribute type 17 has an invalid length. [ 286.083284][T12626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.110080][T12626] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.130188][T12626] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 286.257778][T12617] lo speed is unknown, defaulting to 1000 [ 286.713137][T12625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 287.685444][T12614] mpoa:mpoad_close: () going down [ 287.724581][T12633] lo speed is unknown, defaulting to 1000 [ 288.142222][T12641] lo speed is unknown, defaulting to 1000 [ 289.005606][T12640] lo speed is unknown, defaulting to 1000 [ 289.061115][T12663] pimreg: entered allmulticast mode [ 289.134126][T12663] pimreg: left allmulticast mode [ 289.173310][T12662] openvswitch: netlink: IP tunnel dst address not specified [ 289.445715][T12651] lo speed is unknown, defaulting to 1000 [ 290.170531][T12666] IPv6: sit1: Disabled Multicast RS [ 290.742567][T12672] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 291.010579][T12677] tipc: Enabling of bearer rejected, failed to enable media [ 291.061820][T12675] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 291.110338][T12675] netlink: 'syz.4.1778': attribute type 4 has an invalid length. [ 291.652166][T12692] netlink: 'syz.4.1781': attribute type 3 has an invalid length. [ 291.821007][T12704] __nla_validate_parse: 49 callbacks suppressed [ 291.821028][T12704] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1783'. [ 291.907632][T12706] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1787'. [ 292.003675][T12703] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1786'. [ 292.014239][T12703] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 292.021510][T12703] IPv6: NLM_F_CREATE should be set when creating new route [ 292.652822][T12733] tipc: Enabling of bearer rejected, failed to enable media [ 292.799963][T12738] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1793'. [ 292.831026][T12738] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1793'. [ 292.873306][T12738] netlink: 'syz.5.1793': attribute type 3 has an invalid length. [ 293.174586][T12751] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1797'. [ 293.199742][T12751] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1797'. [ 293.452874][T12754] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1798'. [ 293.462391][T12754] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 293.879074][T12770] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1805'. [ 293.900776][T12770] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1805'. [ 293.921573][T12770] netlink: 'syz.5.1805': attribute type 3 has an invalid length. [ 294.283477][T12779] tipc: Enabling of bearer rejected, failed to enable media [ 294.921260][T12795] xt_bpf: check failed: parse error [ 295.001059][T12796] lo speed is unknown, defaulting to 1000 [ 296.038934][T12809] openvswitch: netlink: Actions may not be safe on all matching packets [ 296.345678][T12812] netlink: 'syz.5.1816': attribute type 3 has an invalid length. [ 296.628814][T12819] netlink: 'syz.5.1819': attribute type 30 has an invalid length. [ 296.692458][T12821] netlink: 'syz.5.1819': attribute type 30 has an invalid length. [ 296.772416][T12823] tipc: Enabling of bearer rejected, failed to enable media [ 296.830209][T12821] __nla_validate_parse: 9 callbacks suppressed [ 296.830234][T12821] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1819'. [ 296.859080][ T5168] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 296.870802][ T5168] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 296.874534][T12821] netlink: 'syz.5.1819': attribute type 30 has an invalid length. [ 296.886903][ T5168] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 296.907272][ T5168] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 296.915262][ T5168] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 297.057421][T12826] lo speed is unknown, defaulting to 1000 [ 297.559422][T12838] 8021q: adding VLAN 0 to HW filter on device bond5 [ 297.582390][T12838] bond0: (slave bond5): Enslaving as an active interface with an up link [ 297.694350][T12841] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1824'. [ 298.027101][T12826] chnl_net:caif_netlink_parms(): no params data found [ 298.286611][T12826] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.341694][T12826] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.368872][T12826] bridge_slave_0: entered allmulticast mode [ 298.390010][T12826] bridge_slave_0: entered promiscuous mode [ 298.428167][T12826] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.446296][T12826] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.463552][T12826] bridge_slave_1: entered allmulticast mode [ 298.480900][T12826] bridge_slave_1: entered promiscuous mode [ 298.623371][T12826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.654249][T12826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.880106][T12826] team0: Port device team_slave_0 added [ 298.901606][T12826] team0: Port device team_slave_1 added [ 298.959108][ T5853] Bluetooth: hci6: command tx timeout [ 299.010410][T12826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.020163][T12826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.046537][T12826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.084675][T12826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.108590][T12826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.156930][T12826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.191102][T12870] tipc: Enabling of bearer rejected, failed to enable media [ 299.427640][T12826] hsr_slave_0: entered promiscuous mode [ 299.464029][T12826] hsr_slave_1: entered promiscuous mode [ 299.495117][T12826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 299.519713][T12826] Cannot create hsr debugfs directory [ 300.326852][T12904] netlink: 'syz.4.1841': attribute type 9 has an invalid length. [ 300.349068][T12904] netlink: 'syz.4.1841': attribute type 6 has an invalid length. [ 300.365803][T12826] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 300.384816][T12826] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 300.514311][T12915] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1844'. [ 300.630073][T12826] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 300.742398][T12826] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 301.039011][ T5853] Bluetooth: hci6: command tx timeout [ 301.192596][T12933] lo speed is unknown, defaulting to 1000 [ 301.433931][T12826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.492674][T12826] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.539460][ T8867] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.546640][ T8867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.557864][T12943] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1849'. [ 301.588001][T12943] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1849'. [ 301.613281][ T8867] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.616153][T12943] netlink: 'syz.5.1849': attribute type 3 has an invalid length. [ 301.620478][ T8867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.916553][T12949] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1851'. [ 302.032104][T12949] team1: entered promiscuous mode [ 302.102353][T12949] team1: entered allmulticast mode [ 302.107874][T12953] netlink: 'syz.5.1851': attribute type 10 has an invalid length. [ 302.135917][T12953] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 302.181824][T12948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.527949][T12826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.120383][ T5853] Bluetooth: hci6: command tx timeout [ 303.194100][T12971] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 303.420322][T12826] veth0_vlan: entered promiscuous mode [ 303.461644][T12974] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1855'. [ 303.465725][T12826] veth1_vlan: entered promiscuous mode [ 303.617018][T12826] veth0_macvtap: entered promiscuous mode [ 303.643944][T12826] veth1_macvtap: entered promiscuous mode [ 303.727966][T12826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.766071][T12826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.831655][ T8856] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.878998][ T8856] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.940800][ T8856] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.974404][ T8856] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.105996][ T8856] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.129622][ T8856] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.231373][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.256188][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.352456][T12993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1860'. [ 304.367397][T12993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1860'. [ 304.388878][T12993] netlink: 'syz.1.1860': attribute type 3 has an invalid length. [ 305.122122][T13016] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1867'. [ 305.199105][ T5853] Bluetooth: hci6: command tx timeout [ 305.299495][T13006] kthread_run failed with err -4 [ 305.364779][T13013] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1866'. [ 305.585823][T13025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1870'. [ 305.611749][T13025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1870'. [ 305.628067][T13025] netlink: 'syz.4.1870': attribute type 3 has an invalid length. [ 306.037419][T13049] lo speed is unknown, defaulting to 1000 [ 306.257587][T13062] netlink: 'syz.1.1879': attribute type 1 has an invalid length. [ 306.292084][T13062] netlink: 'syz.1.1879': attribute type 3 has an invalid length. [ 306.331807][T13062] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1879'. [ 306.368660][T13062] NCSI netlink: No device for ifindex 246 [ 306.392520][T13065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1881'. [ 306.409102][T13065] netlink: 'syz.4.1881': attribute type 3 has an invalid length. [ 307.167943][T13051] __nla_validate_parse: 1 callbacks suppressed [ 307.167962][T13051] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1876'. [ 307.549632][T13087] FAULT_INJECTION: forcing a failure. [ 307.549632][T13087] name failslab, interval 1, probability 0, space 0, times 0 [ 307.566302][T13087] CPU: 1 UID: 0 PID: 13087 Comm: syz.1.1888 Not tainted 6.16.0-rc6-syzkaller-01562-gd61f6cb6f6ef #0 PREEMPT(full) [ 307.566335][T13087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 307.566362][T13087] Call Trace: [ 307.566370][T13087] [ 307.566380][T13087] dump_stack_lvl+0x189/0x250 [ 307.566410][T13087] ? __pfx____ratelimit+0x10/0x10 [ 307.566449][T13087] ? __pfx_dump_stack_lvl+0x10/0x10 [ 307.566475][T13087] ? __pfx__printk+0x10/0x10 [ 307.566505][T13087] ? __pfx___might_resched+0x10/0x10 [ 307.566530][T13087] ? fs_reclaim_acquire+0x7d/0x100 [ 307.566556][T13087] should_fail_ex+0x414/0x560 [ 307.566583][T13087] should_failslab+0xa8/0x100 [ 307.566616][T13087] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 307.566645][T13087] ? __alloc_skb+0x112/0x2d0 [ 307.566671][T13087] __alloc_skb+0x112/0x2d0 [ 307.566696][T13087] alloc_skb_with_frags+0xca/0x890 [ 307.566718][T13087] ? aa_label_sk_perm+0x413/0x560 [ 307.566757][T13087] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 307.566793][T13087] sock_alloc_send_pskb+0x857/0x990 [ 307.566842][T13087] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 307.566882][T13087] ? aa_sk_perm+0x81e/0x950 [ 307.566917][T13087] hci_sock_sendmsg+0x207/0xef0 [ 307.566947][T13087] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 307.566969][T13087] ? aa_sock_msg_perm+0x94/0x160 [ 307.566992][T13087] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 307.567014][T13087] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 307.567036][T13087] __sock_sendmsg+0x219/0x270 [ 307.567070][T13087] sock_write_iter+0x258/0x330 [ 307.567100][T13087] ? __pfx_sock_write_iter+0x10/0x10 [ 307.567140][T13087] ? bpf_lsm_file_permission+0x9/0x20 [ 307.567164][T13087] ? security_file_permission+0x75/0x290 [ 307.567204][T13087] vfs_write+0x548/0xa90 [ 307.567237][T13087] ? __pfx_sock_write_iter+0x10/0x10 [ 307.567264][T13087] ? __pfx_vfs_write+0x10/0x10 [ 307.567302][T13087] ? __fget_files+0x2a/0x420 [ 307.567330][T13087] ksys_write+0x145/0x250 [ 307.567361][T13087] ? __pfx_ksys_write+0x10/0x10 [ 307.567386][T13087] ? rcu_is_watching+0x15/0xb0 [ 307.567416][T13087] ? do_syscall_64+0xbe/0x3b0 [ 307.567447][T13087] do_syscall_64+0xfa/0x3b0 [ 307.567466][T13087] ? lockdep_hardirqs_on+0x9c/0x150 [ 307.567496][T13087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.567517][T13087] ? clear_bhb_loop+0x60/0xb0 [ 307.567541][T13087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.567561][T13087] RIP: 0033:0x7f5819b8e929 [ 307.567579][T13087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.567596][T13087] RSP: 002b:00007f581aaa2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 307.567618][T13087] RAX: ffffffffffffffda RBX: 00007f5819db5fa0 RCX: 00007f5819b8e929 [ 307.567633][T13087] RDX: 0000000000000007 RSI: 0000200000000340 RDI: 000000000000000b [ 307.567646][T13087] RBP: 00007f581aaa2090 R08: 0000000000000000 R09: 0000000000000000 [ 307.567658][T13087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.567670][T13087] R13: 0000000000000000 R14: 00007f5819db5fa0 R15: 00007ffd06605f58 [ 307.567702][T13087] [ 307.734436][ T5168] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 307.887201][ T5168] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 307.895724][ T5168] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 307.904011][ T5168] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 307.920141][ T5168] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 307.992644][T13079] lo speed is unknown, defaulting to 1000 [ 308.294552][T13098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1890'. [ 308.715536][T13091] lo speed is unknown, defaulting to 1000 [ 309.556562][T13111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1893'. [ 309.572080][T13111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1893'. [ 309.594291][T13111] netlink: 'syz.1.1893': attribute type 3 has an invalid length. [ 309.677539][T13113] netlink: 'syz.1.1894': attribute type 1 has an invalid length. [ 309.832211][T13113] veth3: entered promiscuous mode [ 309.916192][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.931779][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.952731][T13091] chnl_net:caif_netlink_parms(): no params data found [ 310.009470][ T5853] Bluetooth: hci7: command tx timeout [ 310.326107][T13091] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.348891][T13091] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.369416][T13091] bridge_slave_0: entered allmulticast mode [ 310.377419][T13091] bridge_slave_0: entered promiscuous mode [ 310.391518][T13091] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.408999][T13091] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.416304][T13091] bridge_slave_1: entered allmulticast mode [ 310.455158][T13091] bridge_slave_1: entered promiscuous mode [ 310.508399][T13131] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1898'. [ 310.624156][T13091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.660236][T13133] syzkaller1: entered promiscuous mode [ 310.676103][T13133] syzkaller1: entered allmulticast mode [ 310.755921][T13091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.921217][T13091] team0: Port device team_slave_0 added [ 310.935580][T13091] team0: Port device team_slave_1 added [ 311.044174][T13091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.051830][T13091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.079203][T13151] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1903'. [ 311.081609][T13091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.102273][T13150] tipc: Enabling of bearer rejected, already enabled [ 311.105899][T13151] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1903'. [ 311.132364][T13151] netlink: 'syz.5.1903': attribute type 3 has an invalid length. [ 311.184406][T13091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.191789][T13091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.268569][T13091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.367457][T13153] FAULT_INJECTION: forcing a failure. [ 311.367457][T13153] name failslab, interval 1, probability 0, space 0, times 0 [ 311.398785][T13153] CPU: 1 UID: 0 PID: 13153 Comm: syz.1.1904 Not tainted 6.16.0-rc6-syzkaller-01562-gd61f6cb6f6ef #0 PREEMPT(full) [ 311.398817][T13153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 311.398829][T13153] Call Trace: [ 311.398838][T13153] [ 311.398847][T13153] dump_stack_lvl+0x189/0x250 [ 311.398884][T13153] ? __pfx____ratelimit+0x10/0x10 [ 311.398928][T13153] ? __pfx_dump_stack_lvl+0x10/0x10 [ 311.398952][T13153] ? __pfx__printk+0x10/0x10 [ 311.398985][T13153] ? __pfx___might_resched+0x10/0x10 [ 311.399008][T13153] ? fs_reclaim_acquire+0x7d/0x100 [ 311.399033][T13153] should_fail_ex+0x414/0x560 [ 311.399060][T13153] should_failslab+0xa8/0x100 [ 311.399091][T13153] __kmalloc_noprof+0xcb/0x4f0 [ 311.399116][T13153] ? kfree+0x4d/0x440 [ 311.399138][T13153] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 311.399168][T13153] tomoyo_realpath_from_path+0xe3/0x5d0 [ 311.399193][T13153] ? tomoyo_domain+0xd9/0x130 [ 311.399224][T13153] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 311.399255][T13153] tomoyo_path_number_perm+0x1e8/0x5a0 [ 311.399290][T13153] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 311.399337][T13153] ? __lock_acquire+0xab9/0xd20 [ 311.399380][T13153] ? __fget_files+0x2a/0x420 [ 311.399401][T13153] ? __fget_files+0x2a/0x420 [ 311.399417][T13153] ? __fget_files+0x3a0/0x420 [ 311.399433][T13153] ? __fget_files+0x2a/0x420 [ 311.399455][T13153] security_file_ioctl+0xcb/0x2d0 [ 311.399487][T13153] __se_sys_ioctl+0x47/0x170 [ 311.399515][T13153] do_syscall_64+0xfa/0x3b0 [ 311.399533][T13153] ? lockdep_hardirqs_on+0x9c/0x150 [ 311.399562][T13153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.399580][T13091] hsr_slave_0: entered promiscuous mode [ 311.399582][T13153] ? clear_bhb_loop+0x60/0xb0 [ 311.399606][T13153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.399623][T13153] RIP: 0033:0x7f5819b8e929 [ 311.399638][T13153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.399657][T13153] RSP: 002b:00007f581aaa2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 311.399680][T13153] RAX: ffffffffffffffda RBX: 00007f5819db5fa0 RCX: 00007f5819b8e929 [ 311.399698][T13153] RDX: 0000200000000000 RSI: 0000000080044943 RDI: 0000000000000006 [ 311.399714][T13153] RBP: 00007f581aaa2090 R08: 0000000000000000 R09: 0000000000000000 [ 311.399729][T13153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.399744][T13153] R13: 0000000000000000 R14: 00007f5819db5fa0 R15: 00007ffd06605f58 [ 311.399777][T13153] [ 311.399787][T13153] ERROR: Out of memory at tomoyo_realpath_from_path. [ 311.413614][T13091] hsr_slave_1: entered promiscuous mode [ 311.688158][T13091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.695876][T13091] Cannot create hsr debugfs directory [ 311.713321][T13157] lo speed is unknown, defaulting to 1000 [ 311.987870][T13164] netlink: 'syz.6.1906': attribute type 10 has an invalid length. [ 312.088960][ T5853] Bluetooth: hci7: command tx timeout [ 312.109962][T13164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.137576][T13164] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 312.563120][T13091] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 312.629677][T13091] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 312.668896][T13091] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 312.768357][T13091] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 312.932479][T13182] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1908'. [ 313.190211][T13091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.251572][T13091] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.337516][ T8867] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.344749][ T8867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.394490][ T2982] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.401697][ T2982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.431961][T13194] syzkaller1: entered promiscuous mode [ 313.437479][T13194] syzkaller1: entered allmulticast mode [ 313.541917][T13194] team0: Device gtp0 is of different type [ 313.860377][T13198] netlink: 324 bytes leftover after parsing attributes in process `syz.1.1913'. [ 313.962167][T13202] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1914'. [ 314.159256][ T5853] Bluetooth: hci7: command tx timeout [ 314.299142][T13091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.275118][T13091] veth0_vlan: entered promiscuous mode [ 315.306111][T13091] veth1_vlan: entered promiscuous mode [ 315.452314][T13091] veth0_macvtap: entered promiscuous mode [ 315.517498][T13091] veth1_macvtap: entered promiscuous mode [ 315.577929][T13091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.621827][T13091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.824280][ T8867] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.862859][ T8867] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.885859][ T8867] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.886294][T13229] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 315.906724][ T8867] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.924339][T13229] netdevsim netdevsim6: Falling back to sysfs fallback for: ./file0 [ 316.093709][ T1340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.124558][ T1340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.185336][ T1340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.194855][ T1340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.239306][ T5853] Bluetooth: hci7: command tx timeout [ 316.487383][T13238] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1885'. [ 316.709277][T13242] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1920'. [ 316.737704][T13242] 8021q: VLANs not supported on nlmon0 [ 316.813895][T13243] lo speed is unknown, defaulting to 1000 [ 316.824998][T13246] netlink: 'syz.1.1921': attribute type 1 has an invalid length. [ 317.012615][T13253] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1921'. [ 317.030187][T13250] bond5: (slave gretap2): making interface the new active one [ 317.055774][T13250] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 317.110003][T13246] vlan3: entered allmulticast mode [ 317.141035][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.159811][T13246] bond5: entered allmulticast mode [ 317.206862][T13246] gretap2: entered allmulticast mode [ 317.221905][T13246] bond5: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 317.435112][T13252] lo speed is unknown, defaulting to 1000 [ 317.727226][T13261] netlink: 'syz.1.1924': attribute type 1 has an invalid length. [ 317.746064][T13261] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1924'. [ 318.467452][T13279] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 318.487011][T13276] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.801544][T13276] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.103221][T13276] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.352938][T13276] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.632289][T13295] lo speed is unknown, defaulting to 1000 [ 319.709706][ T1340] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.776534][ T1340] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.822552][ T1340] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.892577][ T1340] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.335089][T13314] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1939'. [ 320.491412][T13317] warn_alloc: 1 callbacks suppressed [ 320.491432][T13317] syz.4.1940: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 320.588215][T13317] CPU: 1 UID: 0 PID: 13317 Comm: syz.4.1940 Not tainted 6.16.0-rc6-syzkaller-01562-gd61f6cb6f6ef #0 PREEMPT(full) [ 320.588246][T13317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 320.588259][T13317] Call Trace: [ 320.588268][T13317] [ 320.588277][T13317] dump_stack_lvl+0x189/0x250 [ 320.588339][T13317] ? __pfx_dump_stack_lvl+0x10/0x10 [ 320.588366][T13317] ? __pfx__printk+0x10/0x10 [ 320.588395][T13317] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 320.588439][T13317] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 320.588468][T13317] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 320.588499][T13317] warn_alloc+0x214/0x310 [ 320.588522][T13317] ? stack_depot_save_flags+0x40/0x900 [ 320.588547][T13317] ? __pfx_warn_alloc+0x10/0x10 [ 320.588569][T13317] ? kasan_save_track+0x4f/0x80 [ 320.588596][T13317] ? xskq_create+0x56/0x170 [ 320.588623][T13317] ? xsk_init_queue+0xb0/0x110 [ 320.588648][T13317] ? xsk_setsockopt+0x4dc/0x8d0 [ 320.588672][T13317] ? do_sock_setsockopt+0x17c/0x1b0 [ 320.588692][T13317] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 320.588711][T13317] ? do_syscall_64+0xfa/0x3b0 [ 320.588729][T13317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.588758][T13317] __vmalloc_node_range_noprof+0x125/0x12f0 [ 320.588842][T13317] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 320.588880][T13317] ? __kasan_kmalloc+0x93/0xb0 [ 320.588912][T13317] vmalloc_user_noprof+0xad/0xf0 [ 320.588943][T13317] ? xskq_create+0xbf/0x170 [ 320.588973][T13317] xskq_create+0xbf/0x170 [ 320.589007][T13317] xsk_init_queue+0xb0/0x110 [ 320.589040][T13317] xsk_setsockopt+0x4dc/0x8d0 [ 320.589073][T13317] ? __pfx_xsk_setsockopt+0x10/0x10 [ 320.589102][T13317] ? __pfx_aa_sk_perm+0x10/0x10 [ 320.589141][T13317] ? aa_sock_opt_perm+0x74/0x110 [ 320.589165][T13317] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 320.589188][T13317] ? __pfx_xsk_setsockopt+0x10/0x10 [ 320.589218][T13317] do_sock_setsockopt+0x17c/0x1b0 [ 320.589248][T13317] __x64_sys_setsockopt+0x13f/0x1b0 [ 320.589278][T13317] do_syscall_64+0xfa/0x3b0 [ 320.589296][T13317] ? lockdep_hardirqs_on+0x9c/0x150 [ 320.589335][T13317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.589357][T13317] ? clear_bhb_loop+0x60/0xb0 [ 320.589384][T13317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.589406][T13317] RIP: 0033:0x7f2f34b8e929 [ 320.589426][T13317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.589445][T13317] RSP: 002b:00007f2f35992038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 320.589467][T13317] RAX: ffffffffffffffda RBX: 00007f2f34db5fa0 RCX: 00007f2f34b8e929 [ 320.589482][T13317] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 320.589495][T13317] RBP: 00007f2f34c10ca1 R08: 0000000000000004 R09: 0000000000000000 [ 320.589508][T13317] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.589521][T13317] R13: 0000000000000000 R14: 00007f2f34db5fa0 R15: 00007ffec9bcce28 [ 320.589554][T13317] [ 320.919660][T13317] Mem-Info: [ 320.922838][T13317] active_anon:5642 inactive_anon:0 isolated_anon:0 [ 320.922838][T13317] active_file:1885 inactive_file:39931 isolated_file:0 [ 320.922838][T13317] unevictable:768 dirty:230 writeback:0 [ 320.922838][T13317] slab_reclaimable:11883 slab_unreclaimable:224782 [ 320.922838][T13317] mapped:45984 shmem:1371 pagetables:1390 [ 320.922838][T13317] sec_pagetables:0 bounce:0 [ 320.922838][T13317] kernel_misc_reclaimable:0 [ 320.922838][T13317] free:1117911 free_pcp:32765 free_cma:0 [ 321.013064][T13330] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1942'. [ 321.111035][T13317] Node 0 active_anon:22568kB inactive_anon:0kB active_file:7540kB inactive_file:159524kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:190036kB dirty:920kB writeback:0kB shmem:3948kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:14908kB pagetables:5328kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 321.257460][T13317] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 321.347186][T13317] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 321.391147][T13337] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1943'. [ 321.401648][T13337] netlink: 'syz.1.1943': attribute type 6 has an invalid length. [ 321.413616][T13303] lo speed is unknown, defaulting to 1000 [ 321.421888][T13337] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1943'. [ 321.448774][T13317] lowmem_reserve[]: 0 2498 2499 2499 2499 [ 321.464973][T13317] Node 0 DMA32 free:577544kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22624kB inactive_anon:0kB active_file:7540kB inactive_file:157944kB unevictable:1536kB writepending:916kB present:3129332kB managed:2558352kB mlocked:0kB bounce:0kB free_pcp:115892kB local_pcp:94576kB free_cma:0kB [ 321.538765][T13317] lowmem_reserve[]: 0 0 1 1 1 [ 321.543556][T13317] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 321.600337][T13317] lowmem_reserve[]: 0 0 0 0 0 [ 321.608228][T13330] bridge_slave_1: left allmulticast mode [ 321.614394][T13330] bridge_slave_1: left promiscuous mode [ 321.616105][T13317] Node 1 Normal free:3901648kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:15724kB local_pcp:9316kB free_cma:0kB [ 321.633178][T13330] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.684124][T13317] lowmem_reserve[]: 0 0 0 0 0 [ 321.694229][T13317] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 321.722432][T13317] Node 0 DMA32: 930*4kB (UM) 329*8kB (UME) 290*16kB (UME) 206*32kB (UME) 152*64kB (UM) 269*128kB (UME) 158*256kB (UME) 9*512kB (U) 2*1024kB (UM) 3*2048kB (M) 116*4096kB (M) = 590128kB [ 321.743515][T13330] bridge_slave_0: left allmulticast mode [ 321.765142][T13317] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 321.768608][T13330] bridge_slave_0: left promiscuous mode [ 321.796702][T13317] Node 1 Normal: 188*4kB (UE) 42*8kB (UME) 33*16kB (UME) 118*32kB (UME) 35*64kB (UME) 8*128kB (UME) 3*256kB (UM) 4*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 948*4096kB (M) = 3901648kB [ 321.816800][T13330] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.878891][T13317] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 321.898892][T13317] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 321.914362][T13317] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 321.936370][T13317] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 321.967584][T13317] 43184 total pagecache pages [ 321.983799][T13317] 0 pages in swap cache [ 321.997040][T13317] Free swap = 124996kB [ 322.010434][T13317] Total swap = 124996kB [ 322.025440][T13317] 2097051 pages RAM [ 322.037230][T13317] 0 pages HighMem/MovableOnly [ 322.053422][T13317] 425421 pages reserved [ 322.067567][T13317] 0 pages cma reserved [ 322.405647][T13345] openvswitch: netlink: Port -1156311892 exceeds max allowable 65535 [ 323.042712][T13364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1951'. [ 323.089022][T13364] netlink: 'syz.1.1951': attribute type 1 has an invalid length. [ 323.106409][T13364] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1951'. [ 323.116784][T13365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1951'. [ 323.498414][T13372] netlink: 248 bytes leftover after parsing attributes in process `syz.6.1954'. [ 323.588196][T13374] netlink: 732 bytes leftover after parsing attributes in process `syz.5.1953'. [ 323.599158][T13374] netlink: 732 bytes leftover after parsing attributes in process `syz.5.1953'. [ 323.891013][T13380] lo speed is unknown, defaulting to 1000 [ 324.012404][T13385] syzkaller0: entered promiscuous mode [ 324.028228][T13385] syzkaller0: entered allmulticast mode [ 324.783649][T13401] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 325.373756][T13417] netlink: 'syz.5.1964': attribute type 10 has an invalid length. [ 325.427543][T13420] __nla_validate_parse: 2 callbacks suppressed [ 325.427563][T13420] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1964'. [ 325.479889][T13420] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1964'. [ 327.249169][T13430] netlink: 'syz.7.1968': attribute type 1 has an invalid length. [ 327.267230][T13430] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1968'. [ 327.481301][T13441] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1969'. [ 327.542385][T13435] lo speed is unknown, defaulting to 1000 [ 328.521763][T13466] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1975'. [ 330.055945][T13494] netlink: 'syz.1.1981': attribute type 4 has an invalid length. [ 330.306066][T13514] netlink: 'syz.5.1987': attribute type 11 has an invalid length. [ 330.334046][T13518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1988'. [ 330.368861][T13518] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1988'. [ 330.573106][T13534] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 330.583428][ T8856] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.603926][T13528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1988'. [ 330.666996][T13531] lo speed is unknown, defaulting to 1000 [ 330.672952][ T8856] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.707746][ T8856] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.125182][T13548] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 331.165075][T13549] netlink: 'syz.5.1994': attribute type 1 has an invalid length. [ 331.183687][T13549] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1994'. [ 331.184410][ T8856] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.278230][T13549] xt_CT: No such helper "snmp" [ 331.630640][T13556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1996'. [ 331.675318][T13543] lo speed is unknown, defaulting to 1000 [ 331.843559][T13561] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1997'. [ 333.022832][T13592] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2004'. [ 333.042176][T13586] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 334.184819][T13613] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2008'. [ 334.253902][T13603] netlink: 1041 bytes leftover after parsing attributes in process `syz.6.2008'. [ 334.754574][T13625] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 334.784146][T13625] lo speed is unknown, defaulting to 1000 [ 335.049241][T13635] block nbd0: server does not support multiple connections per device. [ 335.072925][T13635] block nbd0: shutting down sockets [ 335.345062][T13642] netlink: 'syz.4.2016': attribute type 13 has an invalid length. [ 335.374356][T13642] netlink: 'syz.4.2016': attribute type 17 has an invalid length. [ 335.538893][T13642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.577352][T13642] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.640465][T13645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.674123][T13642] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 335.843009][T13641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.900965][ T30] audit: type=1800 audit(1752833783.343:6): pid=13649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2017" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=195 res=0 errno=0 [ 335.960511][T13642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.481153][T13657] netlink: 'syz.1.2019': attribute type 1 has an invalid length. [ 337.187839][T13666] lo speed is unknown, defaulting to 1000 [ 337.524532][T13674] wireguard0: entered promiscuous mode [ 337.538794][T13674] wireguard0: entered allmulticast mode [ 338.853727][T13701] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2031'. [ 340.409941][T13733] netlink: 666 bytes leftover after parsing attributes in process `syz.1.2041'. [ 340.466171][T13735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2041'. [ 340.579999][T13735] bridge0: port 1(macvlan4) entered blocking state [ 340.586692][T13735] bridge0: port 1(macvlan4) entered disabled state [ 340.653013][T13735] macvlan4: entered allmulticast mode [ 340.658459][T13735] bridge0: entered allmulticast mode [ 340.686121][T13735] macvlan4: left allmulticast mode [ 340.712703][T13735] bridge0: left allmulticast mode [ 340.723301][T13753] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2045'. [ 340.748694][T13753] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2045'. [ 341.087810][T13757] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2046'. [ 341.456380][T13755] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.648039][T13760] 8021q: VLANs not supported on vxcan0 [ 341.705386][ T8774] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0 [ 341.808920][ T8774] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0 [ 341.880625][ T8774] hid-generic 0005:16BF:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 342.151437][T13755] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.226923][T13787] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2052'. [ 342.248846][T13787] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2052'. [ 342.278300][T13787] netlink: 'syz.1.2052': attribute type 4 has an invalid length. [ 342.511122][T13755] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.559900][T13809] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2056'. [ 342.591191][T13809] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2056'. [ 342.742334][T13755] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.323662][ T1340] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.470453][ T12] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.572122][ T12] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.638186][ T12] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.692579][T13828] lo speed is unknown, defaulting to 1000 [ 343.940403][T13847] __nla_validate_parse: 1 callbacks suppressed [ 343.940423][T13847] netlink: 212088 bytes leftover after parsing attributes in process `syz.7.2063'. [ 343.990456][T13846] netlink: 212088 bytes leftover after parsing attributes in process `syz.7.2063'. [ 344.200493][T13858] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2065'. [ 344.623290][T13864] netlink: 300 bytes leftover after parsing attributes in process `syz.6.2067'. [ 344.662377][T13838] lo speed is unknown, defaulting to 1000 [ 344.983597][T13878] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2069'. [ 345.019781][T13878] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2069'. [ 345.244790][T13883] syz_tun: entered allmulticast mode [ 345.383401][T13884] 8021q: adding VLAN 0 to HW filter on device bond1 [ 345.437962][T13884] bond0: (slave bond1): Enslaving as an active interface with an up link [ 345.914267][T13904] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2077'. [ 346.034317][T13903] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2078'. [ 346.070334][T13903] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 346.147474][T13907] netlink: 1036 bytes leftover after parsing attributes in process `syz.5.2079'. [ 346.427762][T13911] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 346.533965][T13917] netlink: 'syz.6.2082': attribute type 13 has an invalid length. [ 346.542214][T13917] netlink: 'syz.6.2082': attribute type 17 has an invalid length. [ 347.097153][T13939] Cannot find del_set index 0 as target [ 347.186226][T13917] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 347.224444][T13922] wireguard0: entered promiscuous mode [ 347.231012][T13922] wireguard0: entered allmulticast mode [ 347.494177][T13923] lo speed is unknown, defaulting to 1000 [ 378.564372][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.760146][ T5168] Bluetooth: hci5: command 0x0405 tx timeout [ 421.608809][ T5853] Bluetooth: hci6: command 0x0406 tx timeout [ 429.119349][ T31] INFO: task syz.3.1749:12517 blocked for more than 143 seconds. [ 429.127704][ T31] Not tainted 6.16.0-rc6-syzkaller-01562-gd61f6cb6f6ef #0 [ 429.135462][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.144299][ T31] task:syz.3.1749 state:D stack:25448 pid:12517 tgid:12515 ppid:5848 task_flags:0x400140 flags:0x00004004 [ 429.156344][ T31] Call Trace: [ 429.159706][ T31] [ 429.162665][ T31] __schedule+0x16f5/0x4d00 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 429.167291][ T31] ? __lock_acquire+0xab9/0xd20 [ 429.172203][ T31] ? schedule+0x165/0x360 [ 429.176581][ T31] ? __pfx___schedule+0x10/0x10 [ 429.181701][ T31] ? schedule+0x91/0x360 [ 429.186273][ T31] schedule+0x165/0x360 [ 429.190542][ T31] schedule_preempt_disabled+0x13/0x30 [ 429.196041][ T31] __mutex_lock+0x724/0xe80 [ 429.279126][ T31] ? __mutex_lock+0x51b/0xe80 [ 429.283890][ T31] ? nfsd_nl_rpc_status_get_dumpit+0xd9/0x1280 [ 429.331439][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 429.336585][ T31] ? stack_trace_save+0x9c/0xe0 [ 429.353651][ T31] nfsd_nl_rpc_status_get_dumpit+0xd9/0x1280 [ 429.360874][ T31] ? kasan_save_track+0x4f/0x80 [ 429.365873][ T31] ? kasan_save_track+0x3e/0x80 [ 429.383894][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 429.399114][ T31] ? __kmalloc_node_track_caller_noprof+0x271/0x4e0 [ 429.405864][ T31] ? kmalloc_reserve+0x136/0x290 [ 429.419287][ T31] ? __alloc_skb+0x142/0x2d0 [ 429.423940][ T31] ? netlink_dump+0x1b1/0xe60 [ 429.435808][ T31] ? genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 429.443025][ T31] ? genl_rcv_msg+0x5da/0x790 [ 429.447746][ T31] ? netlink_rcv_skb+0x205/0x470 [ 429.458629][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 429.465405][ T31] ? __sock_sendmsg+0x219/0x270 [ 429.476849][ T31] ? ____sys_sendmsg+0x505/0x830 [ 429.482693][ T31] ? ___sys_sendmsg+0x21f/0x2a0 [ 429.487585][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 429.497368][ T31] ? do_syscall_64+0xfa/0x3b0 [ 429.503333][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.514132][ T31] ? rcu_is_watching+0x15/0xb0 [ 429.521223][ T31] ? trace_kmalloc+0x1f/0xd0 [ 429.525953][ T31] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 429.538591][ T31] ? __build_skb_around+0x257/0x3e0 [ 429.543846][ T31] genl_dumpit+0x108/0x1b0 [ 429.548340][ T31] netlink_dump+0x6db/0xe60 [ 429.560006][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 429.565121][ T31] ? genl_start+0x499/0x6c0 [ 429.573858][ T31] __netlink_dump_start+0x5cb/0x7e0 [ 429.592672][ T31] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 429.608808][ T31] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 429.615181][ T31] ? genl_get_cmd+0x496/0x910 [ 429.638696][ T31] ? __pfx_genl_start+0x10/0x10 [ 429.643619][ T31] ? __pfx_genl_dumpit+0x10/0x10 [ 429.658691][ T31] ? __pfx_genl_done+0x10/0x10 [ 429.663572][ T31] genl_rcv_msg+0x5da/0x790 [ 429.668120][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 429.688521][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 429.693613][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 429.718504][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 429.724042][ T31] netlink_rcv_skb+0x205/0x470 [ 429.740042][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 429.745143][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 429.761652][ T31] ? down_read+0x1ad/0x2e0 [ 429.766145][ T31] genl_rcv+0x28/0x40 [ 429.770579][ T31] netlink_unicast+0x75c/0x8e0 [ 429.775401][ T31] netlink_sendmsg+0x805/0xb30 [ 429.788623][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.793990][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 429.808954][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 429.814332][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.820852][ T31] __sock_sendmsg+0x219/0x270 [ 429.825590][ T31] ____sys_sendmsg+0x505/0x830 [ 429.830801][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 429.836209][ T31] ? import_iovec+0x74/0xa0 [ 429.841949][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 429.846716][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 429.852098][ T31] ? __fget_files+0x2a/0x420 [ 429.856706][ T31] ? __fget_files+0x3a0/0x420 [ 429.861731][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 429.866709][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 429.872389][ T31] ? rcu_is_watching+0x15/0xb0 [ 429.877187][ T31] ? do_syscall_64+0xbe/0x3b0 [ 429.881902][ T31] do_syscall_64+0xfa/0x3b0 [ 429.886411][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 429.892089][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.898187][ T31] ? clear_bhb_loop+0x60/0xb0 [ 429.902981][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.909048][ T31] RIP: 0033:0x7f3d6cf8e929 [ 429.913501][ T31] RSP: 002b:00007f3d6ddaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 429.922699][ T31] RAX: ffffffffffffffda RBX: 00007f3d6d1b5fa0 RCX: 00007f3d6cf8e929 [ 429.930865][ T31] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000007 [ 429.938925][ T31] RBP: 00007f3d6d010ca1 R08: 0000000000000000 R09: 0000000000000000 [ 429.947617][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.955889][ T31] R13: 0000000000000000 R14: 00007f3d6d1b5fa0 R15: 00007ffe06600af8 [ 429.963938][ T31] [ 429.967022][ T31] [ 429.967022][ T31] Showing all locks held in the system: [ 429.974974][ T31] 1 lock held by khungtaskd/31: [ 429.980186][ T31] #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 429.990155][ T31] 2 locks held by getty/5608: [ 429.994850][ T31] #0: ffff888033dd00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 430.006258][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 430.016753][ T31] 1 lock held by ipvs-e:1:0/7051: [ 430.022981][ T31] #0: ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 430.033211][ T31] 3 locks held by kworker/1:8/8773: [ 430.038406][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 430.050876][ T31] #1: ffffc90003fefbc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 430.061289][ T31] #2: ffffffff8e144bf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 430.072262][ T31] 2 locks held by syz.2.1334/10976: [ 430.077460][ T31] #0: ffffffff8f583cb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 430.085912][ T31] #1: ffffffff8e41b808 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 430.096170][ T31] 1 lock held by syz-executor/11522: [ 430.101514][ T31] #0: ffffffff8e144bf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 430.112685][ T31] 3 locks held by syz.3.1749/12517: [ 430.117883][ T31] #0: ffffffff8f583cb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 430.126124][ T31] #1: ffff88802c3c16d0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 430.136653][ T31] #2: ffffffff8e41b808 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xd9/0x1280 [ 430.147569][ T31] 2 locks held by syz.0.1783/12704: [ 430.153411][ T31] #0: ffffffff8f583cb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 430.161841][ T31] #1: ffffffff8e41b808 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 430.172377][ T31] [ 430.198786][ T31] ============================================= [ 430.198786][ T31] [ 430.207351][ T31] NMI backtrace for cpu 0 [ 430.207373][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-01562-gd61f6cb6f6ef #0 PREEMPT(full) [ 430.207396][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 430.207407][ T31] Call Trace: [ 430.207415][ T31] [ 430.207424][ T31] dump_stack_lvl+0x189/0x250 [ 430.207451][ T31] ? __wake_up_klogd+0xd9/0x110 [ 430.207481][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.207504][ T31] ? __pfx__printk+0x10/0x10 [ 430.207544][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 430.207573][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 430.207595][ T31] ? _printk+0xcf/0x120 [ 430.207625][ T31] ? __pfx__printk+0x10/0x10 [ 430.207653][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 430.207674][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 430.207703][ T31] watchdog+0xfee/0x1030 [ 430.207723][ T31] ? watchdog+0x1de/0x1030 [ 430.207750][ T31] kthread+0x70e/0x8a0 [ 430.207780][ T31] ? __pfx_watchdog+0x10/0x10 [ 430.207796][ T31] ? __pfx_kthread+0x10/0x10 [ 430.207825][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 430.207851][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 430.207878][ T31] ? __pfx_kthread+0x10/0x10 [ 430.207911][ T31] ret_from_fork+0x3fc/0x770 [ 430.207934][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 430.207961][ T31] ? __switch_to_asm+0x39/0x70 [ 430.207985][ T31] ? __switch_to_asm+0x33/0x70 [ 430.208008][ T31] ? __pfx_kthread+0x10/0x10 [ 430.208035][ T31] ret_from_fork_asm+0x1a/0x30 [ 430.208077][ T31] [ 430.208084][ T31] Sending NMI from CPU 0 to CPUs 1: [ 430.369672][ C1] NMI backtrace for cpu 1 [ 430.369688][ C1] CPU: 1 UID: 0 PID: 2982 Comm: kworker/u8:8 Not tainted 6.16.0-rc6-syzkaller-01562-gd61f6cb6f6ef #0 PREEMPT(full) [ 430.369709][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 430.369721][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 430.369746][ C1] RIP: 0010:memset_orig+0x75/0xb0 [ 430.369766][ C1] Code: 89 47 30 48 89 47 38 48 8d 7f 40 75 d8 0f 1f 84 00 00 00 00 00 89 d1 83 e1 38 74 14 c1 e9 03 66 0f 1f 44 00 00 ff c9 48 89 07 <48> 8d 7f 08 75 f5 83 e2 07 74 0a ff ca 88 07 48 8d 7f 01 75 f6 4c [ 430.369780][ C1] RSP: 0018:ffffc9000b577430 EFLAGS: 00000246 [ 430.369794][ C1] RAX: 0000000000000000 RBX: ffffc9000b577540 RCX: 0000000000000000 [ 430.369805][ C1] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc9000b577560 [ 430.369816][ C1] RBP: dffffc0000000000 R08: ffffc9000b577567 R09: 0000000000000000 [ 430.369828][ C1] R10: ffffc9000b577558 R11: fffff520016aeead R12: ffffc9000b5778f0 [ 430.369840][ C1] R13: ffffc9000b577558 R14: ffffc9000b577508 R15: ffffc9000b577550 [ 430.369853][ C1] FS: 0000000000000000(0000) GS:ffff888125d16000(0000) knlGS:0000000000000000 [ 430.369866][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 430.369878][ C1] CR2: 00007f2f358e7d60 CR3: 000000000df38000 CR4: 00000000003526f0 [ 430.369893][ C1] Call Trace: [ 430.369900][ C1] [ 430.369906][ C1] unwind_next_frame+0xc98/0x2390 [ 430.369930][ C1] ? unwind_next_frame+0xa5/0x2390 [ 430.369949][ C1] ? kfree+0x18e/0x440 [ 430.369972][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 430.369995][ C1] arch_stack_walk+0x11c/0x150 [ 430.370019][ C1] ? skb_release_data+0x62d/0x7c0 [ 430.370040][ C1] stack_trace_save+0x9c/0xe0 [ 430.370062][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 430.370083][ C1] ? chacha_block_generic+0x53/0xc80 [ 430.370107][ C1] ? __lock_acquire+0xab9/0xd20 [ 430.370125][ C1] kasan_save_track+0x3e/0x80 [ 430.370150][ C1] ? kasan_save_track+0x3e/0x80 [ 430.370169][ C1] ? kasan_save_free_info+0x46/0x50 [ 430.370186][ C1] ? __kasan_slab_free+0x62/0x70 [ 430.370206][ C1] ? kfree+0x18e/0x440 [ 430.370254][ C1] kasan_save_free_info+0x46/0x50 [ 430.370270][ C1] __kasan_slab_free+0x62/0x70 [ 430.370291][ C1] ? skb_release_data+0x62d/0x7c0 [ 430.370308][ C1] kfree+0x18e/0x440 [ 430.370330][ C1] skb_release_data+0x62d/0x7c0 [ 430.370354][ C1] consume_skb+0x9e/0xf0 [ 430.370371][ C1] nsim_dev_trap_report_work+0x7cf/0xb80 [ 430.370401][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 430.370421][ C1] process_scheduled_works+0xae1/0x17b0 [ 430.370455][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 430.370483][ C1] worker_thread+0x8a0/0xda0 [ 430.370517][ C1] kthread+0x70e/0x8a0 [ 430.370541][ C1] ? __pfx_worker_thread+0x10/0x10 [ 430.370572][ C1] ? __pfx_kthread+0x10/0x10 [ 430.370595][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 430.370617][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 430.370641][ C1] ? __pfx_kthread+0x10/0x10 [ 430.370663][ C1] ret_from_fork+0x3fc/0x770 [ 430.370682][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 430.370702][ C1] ? __switch_to_asm+0x39/0x70 [ 430.370741][ C1] ? __switch_to_asm+0x33/0x70 [ 430.370762][ C1] ? __pfx_kthread+0x10/0x10 [ 430.370804][ C1] ret_from_fork_asm+0x1a/0x30 [ 430.370835][ C1] [ 430.703213][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 430.710144][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-01562-gd61f6cb6f6ef #0 PREEMPT(full) [ 430.721965][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 430.732036][ T31] Call Trace: [ 430.735321][ T31] [ 430.738258][ T31] dump_stack_lvl+0x99/0x250 [ 430.742858][ T31] ? __asan_memcpy+0x40/0x70 [ 430.747462][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.752666][ T31] ? __pfx__printk+0x10/0x10 [ 430.757277][ T31] panic+0x2db/0x790 [ 430.761178][ T31] ? __pfx_panic+0x10/0x10 [ 430.765599][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 430.771425][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 430.776815][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 430.782998][ T31] watchdog+0x102d/0x1030 [ 430.787331][ T31] ? watchdog+0x1de/0x1030 [ 430.791757][ T31] kthread+0x70e/0x8a0 [ 430.795847][ T31] ? __pfx_watchdog+0x10/0x10 [ 430.800532][ T31] ? __pfx_kthread+0x10/0x10 [ 430.805146][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 430.810366][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 430.815581][ T31] ? __pfx_kthread+0x10/0x10 [ 430.820191][ T31] ret_from_fork+0x3fc/0x770 [ 430.824799][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 430.829932][ T31] ? __switch_to_asm+0x39/0x70 [ 430.834735][ T31] ? __switch_to_asm+0x33/0x70 [ 430.839531][ T31] ? __pfx_kthread+0x10/0x10 [ 430.844138][ T31] ret_from_fork_asm+0x1a/0x30 [ 430.848926][ T31] [ 430.852266][ T31] Kernel Offset: disabled [ 430.856679][ T31] Rebooting in 86400 seconds..