last executing test programs: 4.29294478s ago: executing program 3 (id=805): sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010025d37000fedbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x10, 0xa}, {0x0, 0x8}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000000000001d00000008000300", @ANYRES32=r6, @ANYBLOB="38002f800c00020000000000000000000800010000000000200003801400038006000100000000008800020005000000080001"], 0x54}}, 0x44) 3.608617198s ago: executing program 3 (id=811): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000580)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@ipv6={0x86dd, @icmpv6={0xe, 0x6, "f22ada", 0x3c, 0x3a, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], @time_exceed={0x3, 0x1, 0x0, 0x1, '\x00', {0x2, 0x6, "40a619", 0x40, 0x2f, 0x0, @mcast1, @empty, [], "a6a8eb0c7eec07d28d8b29c5"}}}}}}}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x3, 0x80}, {0x94, 0x0, 0x0, 0xffffff81}, {0x6}]}, 0x10) 3.559720886s ago: executing program 3 (id=812): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={0x0, &(0x7f0000000500)=""/16, 0x3a, 0x10, 0x1}, 0x28) close(0x4) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000040)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x401}) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {0x2}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {0x0, 0xfffffffc}, {}, {0x2}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x200000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {0x0, 0x0, 0x80000000}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {0x0, 0x9}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x9}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x80000}, {0x9}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x5}, {0x0, 0x0, 0x0, 0x2000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x18, 0x2}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$packet(0x11, 0x2, 0x300) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000010000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$alg(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)="66f7", 0x2}, {&(0x7f0000000300)='l3', 0x2}], 0x2}], 0x1, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1, 0x11, r3, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2f, &(0x7f0000001700)={0xfffffff9, {{0x2, 0x4e21, @loopback}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e000100"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) recvmsg$can_j1939(r0, &(0x7f0000000240)={&(0x7f0000000080)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)=""/33, 0x21}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/193, 0xc1}], 0x3, &(0x7f0000000540)=""/182, 0xb6}, 0x0) 3.538014027s ago: executing program 2 (id=813): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FS_IOC_RESVSP(r1, 0x4030582b, &(0x7f00000001c0)={0x1100, 0x2, 0xffffffffffffffff, 0x9}) r2 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r2, &(0x7f00000000c0)="800009f3220800ce", 0x8, 0x800, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40000040) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r1, 0x4) 3.45419854s ago: executing program 1 (id=814): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001980)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x7, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x34, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 3.275425099s ago: executing program 1 (id=815): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906c594125a10053c8e288ac4445ff0e999d423cc250e31e8650d248e49ba5fb3be8db01db38acf5a4455630ecb10f753530ada6598a1ff4805370a5cebf05e199368871b2751c242633419d13a6b05a390d21ab1d44be1254385b3d882c646f9762bf3480e05e98c9cc655adb7caa279e66709794e3b93cda0b9a14794e6d020cc68ea70e71a083e1a2b375591203ce218e8d244cf32f5dd7af0ee1ed032d3b59e4d57136639d68b7577553393a9", 0xf1}, {&(0x7f0000000000)="ef7791000dc7777cb951ca638ea0e1b5d280548c882aa59a68cd17c0e7f23d6d", 0x20}], 0x2, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000003f40)=[{{0x0, 0x0, 0x0}, 0xeb8}, {{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000440)=""/28, 0x1c}, {&(0x7f00000022c0)=""/4096, 0x1000}], 0x2}, 0x2d}], 0x2, 0x2120, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000001850000007500000095"], 0x0}, 0x94) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, r2}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x20000400) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c}, &(0x7f0000000300)=0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@union={0x7, 0x3, 0x0, 0x5, 0x0, 0x3, [{0x3, 0x1, 0x8f5}, {0xf, 0x1, 0x32}, {0x9, 0x1, 0x8207}]}]}, {0x0, [0x2e, 0x5f]}}, &(0x7f0000000080)=""/23, 0x4c, 0x17, 0x1, 0x9}, 0x28) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x25, &(0x7f00000001c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x34, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000840)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r8}, 0x10) 3.194297625s ago: executing program 1 (id=816): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {}, {0x9, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x10}]}}]}, 0x3c}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000002c0)={@loopback, 0x0}, &(0x7f0000000300)=0x14) sendmsg$can_bcm(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x1d, r5}, 0x10, &(0x7f0000000400)={&(0x7f0000000380)={0x3, 0x110, 0xb4, {0x77359400}, {0x77359400}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x2, 0x0, 0x1, 0x1}, 0x2, 0x2, 0x0, 0x0, "dad06fbec1fe1a2a2ae05170439c668aa9a02dfa30e1b3e52dbaf1e3ac963f61fc84def29c858d24c9450c6e2256d860b166d0bf9d7fb66a9e9e950b6a747009"}}, 0x80}, 0x1, 0x0, 0x0, 0x28000804}, 0x800) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r8 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0) r9 = socket$kcm(0xa, 0x5, 0x0) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r7) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80300}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r10, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000801}, 0x10) r11 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x8916, &(0x7f0000000000)={r11}) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x8936, &(0x7f0000000000)={r11}) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x70bd2c, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 2.958938271s ago: executing program 1 (id=818): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in={{0x2, 0x4e24, @empty}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000180)={r6, 0x6, 0x7}, 0x8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000d80)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x8, 0x1000, 0x1, 0x9, 0xff, 0x3}}}}]}, 0x4c}}, 0x24044092) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd26, 0x25dfdbfb, {0x60, 0x0, 0x0, r7, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0x35, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x55}, 0xc010) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r8, 0x1, 0x2f, 0x0, 0x0) r9 = socket(0x1e, 0x4, 0x0) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@rand_addr=0x64010101, 0xa, 0x34, 0x14}]}, 0x38}}, 0x40400c0) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000000180)={0xfbfb, 0x7}, 0x4) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_xfrm(r9, 0x0, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r12}, 0x18) unshare(0x68040200) unshare(0x8000400) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000fd3f1400e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000001900"/28], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r13, &(0x7f0000000180)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000000c0)={r13, &(0x7f0000000180), 0x0}, 0x20) r14 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r14, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100), 0xc}], 0x492492492492856, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x100006}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000000}, 0x880) 2.674626547s ago: executing program 2 (id=823): r0 = socket$kcm(0x10, 0x2, 0x4) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={{r0}, 0x0, 0x2, 0x100000000}) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x1a, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0x9}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r1}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0x3}, {0x0, 0xf}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xfff3, 0xffe0}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xffff}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r7, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000006c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="280000001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="800002000a0002000180c20000010000675783ba66e25af5838949d040e505558bb14adf0088b9ac6fcf72fe34f0510e66aea0f627a4760a36b6fed26fbf53422b5c086ea490430f051c34"], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="50000000100001042abd70000000000000000000", @ANYRES32=r13, @ANYBLOB="824900000000000028003780090001007665746800000000100002"], 0x50}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x7, 0x7, 0x8, 0x9, {{0x2c, 0x4, 0x3, 0xb, 0xb0, 0x67, 0x0, 0x1, 0x2f, 0x0, @remote, @multicast2, {[@timestamp_prespec={0x44, 0x24, 0x93, 0x3, 0x2, [{@loopback, 0xa}, {@empty, 0xf}, {@empty, 0x6}, {@multicast1, 0x9}]}, @cipso={0x86, 0x31, 0xffffffffffffffff, [{0x4, 0x12, "549491b7a56878ca5a5bc54a81cd161a"}, {0x1, 0x6, "de590425"}, {0x7, 0x4, "b96d"}, {0x1, 0xf, "469a646f59626890ebea4cba77"}]}, @lsrr={0x83, 0xb, 0xbb, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @end, @ssrr={0x89, 0xb, 0x33, [@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x13, 0xf7, [@empty, @multicast1, @private=0xa010100, @broadcast]}, @ra={0x94, 0x4}, @generic={0x83, 0x5, "d18b15"}, @rr={0x7, 0x13, 0xc0, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast1]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x29, 0x5, 0xb3, 0x1, 0x0, @loopback, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}, 0x1, 0x10, 0xff, 0xff}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000001300)=ANY=[@ANYBLOB="50060000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fedbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="a801028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000000090038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000100000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400070000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r7, @ANYBLOB="080007000000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040000800000080007000000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400ffffffff080007000000000008000100", @ANYRES32=r9, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r1, @ANYBLOB="080007000000000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000e00000008000600", @ANYRES32=r15, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000600", @ANYRES32=r16, @ANYBLOB="3800010024000108765453fed0dedb70656572735f636f756e74000000000000000000000000000005000300030000c9436f89015449b0dee7bdb83fe0d81055b6f905816a5bde0e768c64dd8ceb79092f8ca642ced7941a7c218bca55d9b6913f02d8cd3047f33076e685a8f47beb8d8ba53c9a334a226f11c3664705b6d7401200000000000000000000000000006708892934ce089b1ad6258319ea5c16c506dced123de11bc14ce1e037fcbf5ae24a4e3fd5fef668288b313d12a4481ea907721d752747dd45e0a75c81cf305489d9cb5d8d11f173ff6224857b53fa6bc287c2d974", @ANYRES32=0x0, @ANYBLOB="0400028008000100", @ANYRES32=r17, @ANYBLOB="e40102803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r18, @ANYBLOB="400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400c90e000008000600", @ANYRES32=r17, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400020000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r19, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400f91d0000080007000000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000200000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000100000008000700fcffffff38000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040001000000"], 0x650}, 0x1, 0x0, 0x0, 0x80}, 0x24004810) 2.335989272s ago: executing program 4 (id=825): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="12000000040000000800000001"], 0x50) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="b0cf9d468414aeffae4518994996ebed1228f64dc84e2d5172c0ca9d06dd7d41f10836011534a5ae0460b1c32ecb3347c9d1b947604143af73e97d65bb3c04b8af12de6dfb43c00fb669380ef6529ae477744c360fbcb82e8c7c3188512cce3127bbbb342b2b96ecde18d42d70f419a7c496d02ced6d2dd829f44f54a899723102dfbda24687947df0118fb45809123036d5841008bc6f7134ae445188855012b666abea94c017ed9ff80a5891b208ada221cc3e8ccc4e6e6f69f2165a6a8fbb6eff2600dac9f9c2a5411284e13272a12381765de1fae54d33cdcab7b7ed62d6332b409cd148cb8dd5182d9090bc3c2c8dd4219132f206ff0767c904", 0xfc) r2 = accept(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x7}], 0x1, 0x0) recvmsg(r2, &(0x7f000000b680)={0x0, 0xffffffffffffffc3, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x15, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000020000001800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x8}, 0x94) 2.260703392s ago: executing program 4 (id=826): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) close(r3) syz_emit_ethernet(0x7a, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "156909", 0x44, 0x2f, 0x0, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0x6000}, {}, {}, {0xa888, 0x88be, 0x8000000, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, 0x2, {0x0, 0x7ff}}}}}}}}}, 0x0) write(r1, 0x0, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10) close(r5) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FICLONERANGE(r6, 0x4020940d, &(0x7f0000000f00)={{}, 0x3, 0x858, 0x32a}) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$rds(r7, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x5}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000000880)=""/4096, 0x1000}], 0x1}}], 0x48}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc0b0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069000c00000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) 1.631733744s ago: executing program 2 (id=828): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="18050000000000000000000007000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000a504000008000000850000009500000095000000000000003759ff87c1a6197e6345a6bd6ee2474e55f18a8a539c66088ce60099bc0368444b8087b5ddabb98bf0d702d6747118"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x14, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r2) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) close(r4) ioctl$SIOCRSSL2CALL(r5, 0x89e2, &(0x7f0000000380)=@bcast) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001500)={0x18, r3, 0x341, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8810}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e00"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r7 = socket(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x2, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r7, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x160, r9, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x53}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3b79}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb58}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xda}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf71}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf38}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x400}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7c}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "9c64bf79e6dd3a29edf62d83b407c61334c45b45"}}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x20000080}, 0xc001) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x6c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x6}, @IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xfc, r3, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20004818}, 0x4010) 1.375462358s ago: executing program 2 (id=830): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000380)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100090a0000002cbd7000fcdbdf25030006003c00400002004e23e0000001000000000000000003000500ff00000002004e206401010200000000000000000200130043"], 0x50}, 0x1, 0x7}, 0x0) (async) unshare(0x2c020400) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xa) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f00000002c0)) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000ffdbdf25020000000500020000"], 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x4000080) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), r4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r8 = socket(0x400000000010, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r10, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$unix(r10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r11, 0xff01, 0x0) (async) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0x6}, {0xffff, 0xffff}, {0x6, 0x3}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xf8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@getchain={0x24, 0x66, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r13, {0xe, 0xffe0}, {0x1, 0xfff1}, {0xffff, 0x1ffef}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x800) (async) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="22aa3925854e2bf09cfd474a0bb01d79f8eaad00489ec27569a7fea8b6507e09fb0e56baf3f4d961ca9cc7be0ce43186d6e2ecf6896e020b6669d792a36c83fd9c8f7841330bac1708508d74afe1de8034160727297eb1db07361fc5d07cbc2e48ec539f9c5aabe6219d708e2c561539150d534616a77aca0236e8eb0780de9602e238792a8a94597fb50fdab07e6aa63104a6141f5102d261731f6ecd7034f0e44087bc6615ca4405ff", @ANYRES16=r6, @ANYBLOB="080027bd7000fedbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r14 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r14, 0x107, 0x12, &(0x7f00000000c0)={0x7, 0x1000}, 0x4) (async) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8008f512, &(0x7f0000000140)) 1.195804879s ago: executing program 0 (id=831): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20001005, 0x0, 0x0, 0x0, 0xa8000}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xae}, {0x85, 0x0, 0x0, 0xc8}}]}, &(0x7f00000005c0)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0xa}, 0x61) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400125c875de029d7a8a09974e61476d0800b000100627269646765000004d6f4b29f4aa32c4b355332bb0ef5d600078008001f00070000007547e302834c411cf5189856ea874c7739361c2b29b404"], 0x3c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a05000000000000381200020000000900010073797a300000000014000380080001400000000008000240000000030900020073797a3000000000140000001100010000000000000000000000000aa819bf915f304502cf6e82861c7db8ca252333fb39bbd941bddecd4fcf81689e51b1f2773da34e7ea448496956b7a4ba6a5884b40d7d7c1827d2e3938262a75df90c74ba75ce5c021aacc0c19f6825e50afc0e6877"], 0x68}}, 0x800) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14}}, 0x70}}, 0x24040884) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYRESHEX=r2], 0x10c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000800000014100000", @ANYRES32, @ANYBLOB="000000018000000600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r6, 0x10000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000880), 0xde9, r7}, 0x38) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x21f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x5a, &(0x7f0000000400)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @timestamp={0x44, 0x14, 0x5, 0x3, 0x0, [0x0, 0x10000, 0xfffffffc, 0x0]}, @cipso={0x86, 0x6, 0xffffffffffffffff}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80}}}}}}, 0x0) sendmmsg(r3, &(0x7f00000002c0)=[{{&(0x7f0000000240)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0x3, @remote, 0x101}}, 0x80, &(0x7f0000000140)}}], 0x1, 0x0) 1.192479526s ago: executing program 4 (id=832): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x10, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x58001}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001840)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x8001}, @TCA_FLOW_KEYS={0x8, 0x1, 0xcdec}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x5f}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 1.153587525s ago: executing program 2 (id=833): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2e0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f91731dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001"], 0xe4}}, 0x20050800) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, r3, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6b}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0xc0d4) (async, rerun: 32) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) close(r1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], 0x0, 0x9}, 0x94) 1.123581944s ago: executing program 4 (id=834): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'caif0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r2, 0x1, 0x1000, 0x0, {0x2a}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x9, @mcast1, 0x6}}, {{0xa, 0x4, 0x0, @loopback, 0x8b2}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000700)=ANY=[@ANYBLOB="08000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000001"], 0x190) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'caif0\x00'}) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r2, 0x1, 0x1000, 0x0, {0x2a}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x9, @mcast1, 0x6}}, {{0xa, 0x4, 0x0, @loopback, 0x8b2}}}, 0x108) (async) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000700)=ANY=[@ANYBLOB="08000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000001"], 0x190) (async) 969.773277ms ago: executing program 4 (id=835): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) epoll_create1(0x80000) socket$inet_smc(0x2b, 0x1, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2, 0x420}], 0x1, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x40, 0xff, 0x0, 0x7}, {0x6, 0x60}]}) write$ppp(r1, &(0x7f0000000180)="5fa1", 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000280)={"daf2403c645b3238f11d8557881959fd", 0x0, 0x0, {0x5, 0x7f}, {0x9, 0x3}, 0x4, [0xd, 0xe1d1, 0x5, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x568f, 0x800, 0x9, 0x76b, 0x1, 0x18000000, 0x101, 0xfffffffffffffffe, 0x9]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r5, 0x702, 0x86, 0x0, &(0x7f00000005c0)="e460374470d8d408eb00c15286dd0b8ca48ad84cc955b40b1d491d53f1df8426d4dcb7310f0d8c1aa8448cee9cf09035ddea68c601d479eef314f3ab8e8da65f157df3cd50a5565aac9a9d8ca0d46ff7e187862c2c30f0e7e2fa32852a5e3021414b95ec1152457872bf4c9cf5b6ed87ea9844cd854c880408c816383a67c8c7beb0ff49bd07", 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$rds(0x15, 0x5, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r7, 0xffffffffffffffff}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x1d, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000060000000000000000000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b708000000000000dbaaf8fff1000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="1000000000000000b705000095b6ba375000"/32], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r9}, 0xc) bind$802154_dgram(r6, &(0x7f0000000000)={0x24, @short={0x2, 0x2, 0xaaa3}}, 0x14) setsockopt$WPAN_WANTLQI(r6, 0x0, 0x3, &(0x7f0000000040), 0x4) r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000004c0)=@generic={&(0x7f0000000440)='./file0\x00', 0x0, 0x8}, 0x18) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000540)=@o_path={&(0x7f0000000400)='./file0\x00', 0x0, 0x4008, r10}, 0x18) syz_init_net_socket$ax25(0x3, 0x5, 0xc3) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 968.537758ms ago: executing program 3 (id=836): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000885000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xdc0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000300)='5', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001"], 0x30}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r3, 0x21eae}}, 0x20}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r7 = socket(0x2, 0x3, 0x4) sendmmsg$inet(r7, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, 0x0}}], 0x2, 0x68840) ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}]}, 0x2c}}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) socket$unix(0x1, 0x2, 0x0) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYRES32, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000b6056dc4650dfef52c937906c77a4949a87ebd3f2ce0ee80078fbb78ba467707c9b603e8b469aaab06386183d4175b86db1f43a04b0f7589b121106fc0f3d8ab6dd5c48a38d3686d424209d520903676adc29ea729f0d84e5d8b635efde522f7e75c67ff273cd778b9fc8c55767f675252067979c90e7143636b4efae8f32120fe27d20e2fc607c9b8a30dd7eb63510e4e762180e691804025814439fe81b1", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) 966.495553ms ago: executing program 0 (id=837): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x800) (async) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000001980)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="f5057f9d35de9d9361aee318c6451b361f6ca5adcb9d461bc0677a3fcea26d5d68fb9e3e2c648c3c6e01a67822984606b3102fca1885787fff3c5ed5abcd2acfa7df1ecad5c92abf8162a280febab14d1f7a154d60ccf6f2801cf0c8a656747c909fc41bd41371bfc9584c3948da3ecb5ef05da786f1c984", 0x78}, {&(0x7f00000001c0)="90715e5f6c88e0e3f8072f353cb5d0de03", 0x11}, {&(0x7f0000000240)="114b05491b458366babaad9020345370b09e8eda79bb", 0x16}, {&(0x7f0000000280)="5944bb5706d4d2687e5f0dc60b5b408a424934ca7f1fe43384e8b9cd54b124f109920cc157eda83afe909767de20337bc1ee33c755b7b326978a8d8a76a761397c9adb2e956457d70d10662602f7c18a10aaefb3d873e430439427e70ae5975dd4850ba7577f8de88828407b677c58b35d5a43a4f7d8bccba4ee05588a8bb8a66d8cfe028dbdc41054da831d76722bbc28a9b7d12671ac30e2d1d1a0ec6ef1", 0x9f}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000000340)="acf33632a5275b56177592bef454d8ecbb50f49ac43cb3b310fe08e9a806721c9a10222e1f9182bbe20ed693a94a54fbf6e9c82525967c1f74c33ac6f2bf6fc95d35fb8830ad070ec37887dbd5d0bf41fb738f436b506039c70a50d30e62f0365383d386140537a94e038973cda55ab03dad41331234a2f743db42bd9e5d3c9db571f16bceab689bdbda51950ef7c73fe7ff440b74a087d2ec44a50ca1123f9e8c6c17277daa78ca858954efcf7562ed53a2f54888d884a699fedb5a083d9a4384158483d4", 0xc5}], 0x6, &(0x7f0000001600)=[@assoc={0x18, 0x117, 0x4, 0x8}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7fffffff}, @assoc={0x18, 0x117, 0x4, 0x8}, @iv={0x100, 0x117, 0x2, 0xe5, "38e301d8a96cc36ba15e3a75fdd6a575b72be12928a823ea89e35c7c79c1a9f63a530b4f3cafe3942260303a33840a6f7d3ae6831a9f4a8df0966d9295585f4ae459f67fc1f3a3171e345dbf11c70dd9684510f865f802c2bc50f27cc0710439742dad049d099e879783e3ffcbf2b34d8b5edef290302d00ca5430dc094acb144697706c56720aa10090867b00e672f2f112f19af724dbe51b636196bc8e08c014adc2e0fa42ebc5bd1f720ecda4f30853948789ccc3a220a912a28ae0abbc23b4c2a750d45f089e0b547291e2afd86084b779c36bad5371c2e53904451d58866b332fdf4b"}, @iv={0xe0, 0x117, 0x2, 0xc6, "4030faadf0129e1381c5a52a5a7cd5a63d3728db320de53fd8aa9387a3b4686dba09ad5ea0cc8edaf412a924a3cd75baba5a1a8e9190c27d96af89b727e2e743be13cebfbc3620e72b56920bb6673186728b1f18ff50be7be2c77ae5a14ee181cff356ab804c5436946b5c6f92988de3a3cb4d5ec7d63b0f5987c6a975b506b8b0f0592a2cf4276501fd268170420fc3208dc5ff20919ea683bd03054ee747a293884884b5f6051c09e15cad1f0a8209a9ea388ded1d8183142c31831db207eabcae2954562c"}, @assoc={0x18, 0x117, 0x4, 0x7ff}], 0x258, 0x20000010}, {0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001880)="f2da2cfd6a2bf9e6b1edd0e110a78848bb560c0956a295c73f373d60160ec6eb8bf70da4964c04a2d76181bb0ef75d9ffe8bb439fba091c608a4b7528512c6d01acae14fc2ebe243c9ed71ac71abefd211321b7eedf60ef97cd403bae27dea5a32fd28740eb896b523cc2bd346921a325e2f201641d735e37ee4ac472773e969bc627568fbde99a3576870c68f8e8f9a4702902b4b89e093db7875328d1a954405db55042e42de404a356d4bf33a3ab0ef51999f8f9c0c6dd3ecd5ea62b80d4c633053d6322350c7f9842b011ce06a401ea598753839011b", 0xd8}, {&(0x7f0000000540)}], 0x2, 0x0, 0x0, 0x8000}], 0x2, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/112, 0x70}, {&(0x7f0000000100)=""/144, 0x90}], 0x2}, 0x40) 891.843951ms ago: executing program 2 (id=838): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x9, 0x2d667067) bind$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e22}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) close(r3) write(r1, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000055000000000000950000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000400)=@security={'security\x00', 0xe, 0x4, 0x368, 0xffffffff, 0xd8, 0x1f8, 0xd8, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xff000000, 0xff000000, 0xffffffff, 0xffffffff], [0x0, 0xff, 0xff0000ff], 'pim6reg1\x00', 'netpci0\x00', {}, {}, 0x5e, 0x2, 0x4, 0xe762cda7cca00397}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0x1, 0x3}, {0x1, 0x3}, 0x9, 0x3}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x16}, @dev={0xfe, 0x80, '\x00', 0x14}, [0x0, 0x0, 0xffffffff, 0xff000000], [0xffffff00, 0xffffff00, 0xffffffff, 0xffffff], 'pimreg1\x00', 'vlan1\x00', {0xff}, {0xff}, 0x0, 0x4, 0x2, 0x52}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x42}, 'netpci0\x00', {0x89ca}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x4, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="1400000010003507d25a806f8c6394b52feea7fe73aab514ead2a2d520e6e20f335af56bb6ccc5d8d4c0f00dcc1e38ae34f027686c4b8678e4", 0x39}], 0x1}, 0x40814) recvmmsg(r9, &(0x7f0000001180)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r7}, 0x10) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000003c0)={0x0, @broadcast, @local}, &(0x7f0000000980)=0xc) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000d80)={@loopback, 0x0}, &(0x7f0000000dc0)=0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f80)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000c00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5c0, 0x0, 0x0, 0x0, 0x9aa0d0c9}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @alu={0x7, 0x1, 0x6, 0x2, 0x4, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0xd1}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @exit, @map_fd={0x18, 0x5}, @exit, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='syzkaller\x00', 0xf, 0x4, &(0x7f0000000b80)=""/4, 0x40f00, 0x58, '\x00', r12, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x285fb, 0xffffffffffffffff, 0x3, &(0x7f0000000f00)=[r5, 0xffffffffffffffff, r5, r10, r6, 0xffffffffffffffff, r10], &(0x7f0000000f40)=[{0x5, 0x9, 0x4, 0x2}, {0x3, 0x5, 0xf, 0x9}, {0x2, 0x2, 0x2, 0x6}], 0x10, 0x5}, 0x94) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r13 = socket$alg(0x26, 0x5, 0x0) bind$alg(r13, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r14 = accept4(r13, 0x0, 0x0, 0x800) sendmmsg$alg(r14, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f00000001c0)={0x1100, 0x2, 0xffffffffffffffff, 0x9}) 869.721205ms ago: executing program 0 (id=839): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getrule={0x1c, 0x22, 0x0, 0x70bd25, 0x25dfdbfe, {0xa, 0x80, 0x20, 0x81, 0x6, 0x0, 0x0, 0x5, 0x2}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x2404c004) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x150}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r1) bpf$BPF_GET_MAP_INFO(0xf, 0xfffffffffffffffd, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r2, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x24005800) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x13, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffb}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_fd={0x18, 0xa, 0x1, 0x0, r0}, @jmp={0x5, 0x1, 0xa, 0x4, 0x0, 0x10, 0xfffffffffffffff0}]}, &(0x7f0000000480)='syzkaller\x00', 0xfffffffb, 0x0, 0x0, 0x40f00, 0x5b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x3, 0xa, 0x300000}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000540)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, r0], &(0x7f0000000580)=[{0x5, 0x2, 0x9, 0xb}, {0x0, 0x1, 0x6, 0xb}, {0x0, 0x1, 0x0, 0x1}, {0x3, 0x1, 0x2, 0x37ef5523479a0c6e}, {0x0, 0x1, 0xa, 0x6}, {0x5, 0x3, 0xd, 0x3}, {0x1, 0x4, 0xd}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r4, 0x0, 0x87, 0x78, &(0x7f00000006c0)="d53b6cf3e484a3d852b897e6a955b0139fa772bccf857d1ec9a8af7eec62df4dffcaee85b670f8fea241458ebd5ff1cd0f41d4f774759dc9b3f3f0d92377b6d677f7c34f32f4a6a47de2fc7582e7680095d9a7f40fadea19b39712e7d62aa261d924207af6d28b6a532d2d67ff90b61a786123b154d1f63fa0cf8042154364217d289cb6b1cf7b", &(0x7f0000000780)=""/120, 0x2, 0x0, 0xa6, 0xe0, &(0x7f0000000800)="9e3b6c31bc88c5969e216af02ef575a0c1a5f7a8d7c7d7f1d736a558b817fbbb9528e0af429e4609e2d5b2ffad98a5e319d2ed08352f2d0af37be3c4c17afabebfea5085ac9ebc6999a65278524516ab7dc8d38c969860e38ed55dfddfaf13b3bd9dc1427076d54b8a840b3d63ab4f66930f6875f45e75f62340e9f292954b1c47e084e436b5d194bd8ebbe985d440f01a380f51fb1e8a30f356278492891920d302ce18d36b", &(0x7f00000008c0)="d42021095828d90b334c1f3812e740e2cb04c051953f93c155baaa34172572f1396fd3fbde7a225d60e06d4be788484759e9d3415107cb06a0e13c7d8766fcf53ccb492203f3ab137d102a50f9df215494c4ab0a5d490b7261ef4082245db969d65572e9132fb8b89de92c043f2d340a617ae3602e3fb65c84226ce38da4106de4800b14ae3aff1927a4c4290d597e0073c7bede1c0d956b3eae2f58abb3881bdf386f5e28b5d48bf42807edb35d373cd77b761a50ba14ebb2f014f0781595ccfebc633a93efbe9b8027bfdb934c4fb0e73ec9a21c9c4a12ad6e5946cb32ae96", 0x0, 0x0, 0x2}, 0x50) r5 = socket$inet6(0xa, 0x80000, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a80), r1) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x9c, r6, 0x200, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7fffffff}, {0x6, 0x11, 0x400}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x401}, {0x6, 0x11, 0x918d}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x101}, {0x6, 0x11, 0x3}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x50005}, 0x80c12211dfbaaa88) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c40), r1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000d00)={'ip6gre0\x00', &(0x7f0000000c80)={'ip6gre0\x00', 0x0, 0x29, 0x5, 0x7, 0x800, 0x40, @private2, @local, 0x8, 0x7, 0x6}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000d80)=0x14) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000dc0)=0x0, &(0x7f0000000e00)=0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000fc0)={'syztnl2\x00', &(0x7f0000000e40)={'tunl0\x00', 0x0, 0x700, 0x1, 0x1, 0x200, {{0x56, 0x4, 0x0, 0x37, 0x158, 0x67, 0x0, 0x7, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x24, 0x3f, 0x3, 0xe, [{@rand_addr=0x64010102}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x30}}, {@multicast2, 0xffffffc3}]}, @timestamp={0x44, 0xc, 0x43, 0x0, 0x2, [0x6, 0x2]}, @cipso={0x86, 0x67, 0x3, [{0x4, 0x11, "9b5b0b4774a6078d59083359f728ec"}, {0x6, 0xe, "6c9c3075ff51743eaddace2b"}, {0x2, 0xf, "5ae1b6998665c0349f903b4918"}, {0x1, 0x9, "e00e1c257ad247"}, {0x7, 0x10, "3f9b4a5159322800fac225e19fe1"}, {0x7, 0xe, "8ee449da85a6684b5bcc2c17"}, {0x5, 0x9, "03e1e9e8eb64be"}, {0x1, 0x3, "90"}]}, @timestamp_addr={0x44, 0x34, 0xaa, 0x1, 0x5, [{@private=0xa010101, 0x6}, {@broadcast, 0x2}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x200}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@rand_addr=0x64010101, 0x9}]}, @timestamp={0x44, 0x14, 0x4b, 0x0, 0x8, [0x400, 0xa, 0x5, 0x2]}, @timestamp_addr={0x44, 0x44, 0x8b, 0x1, 0x9, [{@rand_addr=0x64010100, 0x4}, {@empty, 0xf}, {@loopback}, {@broadcast, 0x40}, {@private=0xa010102, 0x19b7}, {@remote, 0x1}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x200}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @generic={0x83, 0x2}, @timestamp_prespec={0x44, 0x14, 0x8b, 0x3, 0x4, [{@broadcast, 0x2}, {@private=0xa010100, 0x8000}]}, @lsrr={0x83, 0xb, 0xf9, [@empty, @loopback]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000001080)={'syztnl2\x00', &(0x7f0000001000)={'gretap0\x00', 0x0, 0x7800, 0x7800, 0xfffffffa, 0x5, {{0xc, 0x4, 0x3, 0x17, 0x30, 0x66, 0x0, 0x6, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x15, 0x3, [{0x5, 0x4, "c965"}, {0x6, 0x7, "978345ad66"}, {0x5, 0x4, "05d9"}]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000001240)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001200)={&(0x7f00000010c0)={0x13c, r7, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x80}, 0x24004842) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r13, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x60, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x60}, 0x1, 0x0, 0x0, 0x24004844}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='io_uring_submit_sqe\x00', r4, 0x0, 0x9}, 0x18) r14 = syz_genetlink_get_family_id$gtp(&(0x7f0000001480), r1) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x10051000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x64, r14, 0x400, 0x70bd27, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FAMILY={0x5, 0xd, 0x29}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_MS_ADDR6={0x14, 0xc, @remote}, @GTPA_LINK={0x8, 0x1, r12}]}, 0x64}}, 0x4000) r15 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r15, &(0x7f00000018c0)={&(0x7f00000015c0)=@ll={0x11, 0x6, r8, 0x1, 0xb, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}, 0x80, &(0x7f0000001640), 0x0, &(0x7f0000001680)=[{0x88, 0xf, 0x2, "19d7125407d982a995ef5839df8e83eb7e80573c4a433fe176ec499c25386baba5225c9ec1272624a9265cd233ef129e49d6b8ae9ea719433ab8a35744883de722c6f08aa79d8afe906bc7bdda415edef4989bf54a93aabb938938c2bdb1f443267798b93fac279adbf64b0a9ee984677e01cb0d21"}, {0xb0, 0x3a, 0xfff, "08e13ef02f166e63987767c513bdf3b4f33f4be9e0e395805792b581657520ba2e9ce4df35501f6b7b7dba900a7035f471d8e121affa26f97cd4fb061d0729917e7a94b5f810a68108cb1acd4d306c216ce6f766111d781c833a98e971e6c4dfcd8852e5ad8c50502324b9166b672f757d7995b44fabd441e9caac30c3e8327b71098061abd64c4fb68250d6db155a6f500faecd0086b6683a50a1baec75"}, {0x10, 0x11, 0x5}, {0x80, 0x11, 0xfffffff7, "3934d9fcf40f9bcea3bc6d52e29a1b105048d11141eac3ff00fe778d64733e96cd45c75c351163fc40d5866907642191146f090afd08d744c73a862e41afcba1132c7b678d7836baee1971f531d48b0438f674df389a84342d57deda85cf96ac339a19ab1594eddbdc"}, {0x48, 0x108, 0x9, "01ce8bf30849b67a90965e3e534213cb71275723db2e60052c539beb2acd059fe169decf64e7aebd5180618e29c32eae43ba807c"}], 0x210}, 0x28e48b24f6d08c47) r16 = socket$kcm(0x29, 0x0, 0x0) recvmsg$kcm(r16, &(0x7f0000002d80)={&(0x7f0000001900)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000001980)=""/212, 0xd4}, {&(0x7f0000001a80)=""/196, 0xc4}, {&(0x7f0000001b80)=""/64, 0x40}, {&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000002bc0)=""/2, 0x2}], 0x5, &(0x7f0000002c80)=""/234, 0xea}, 0x0) 577.108125ms ago: executing program 0 (id=840): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0xffffffbfffff8000, 0x8) close(r5) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0xffffffffffffff17, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) r11 = socket(0x2b, 0x80801, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075"], 0x0}, 0x94) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r12, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r10, {0xffff, 0xfff2}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x6}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5, 0x51, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 311.75914ms ago: executing program 0 (id=841): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) (async) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x14e22, 0x3118, @rand_addr=' \x01\x00', 0x2}, 0x1c) (async) writev(0xffffffffffffffff, &(0x7f00000006c0), 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000380)={@none, 0x4}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async, rerun: 64) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) (async, rerun: 64) bind$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x1, 0x5c}, 0x6e) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket(0x40000000015, 0x5, 0x0) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, 0x0) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000280)={r4, r4, 0x1, 0x1, &(0x7f0000000000)="8d", 0x9, 0x3, 0xb57, 0x2, 0xc338, 0x2, 0x7, 'syz0\x00'}) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@fwd={0x5}]}, {0x0, [0x0, 0x2e, 0x0, 0x0]}}, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x10000}, 0x28) (async) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000080), 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)=0x4) (async) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x3) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) (async, rerun: 32) pwritev(r0, &(0x7f0000000180)=[{&(0x7f00000007c0)="00214717a70700", 0x7}], 0x1, 0x803, 0x0) (rerun: 32) 280.684323ms ago: executing program 1 (id=842): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB="020300082c000000000000000000000001000100000000001f0018000707ef00d56015c6be61ccd173eb7b2a75efe19f151d46e9e97e99bc59b6ebbbde73cfcfa9f7f91006a83981d5fa24aa0547413cb6f15b90496a3561ed8d0af310ec6d1d8de76d846376fe01218baafd50051704d1510836b2019fc43a60de6a8c11902a2384de46092d21a2936bad12f5f0ec2620688c0a3910f19eac0f2770170ebd62ef86ea4ea593e7b985fd06125ad9b1e8a95c33e37a7badd2b346fe1fc86ef14a4c62abcec76267539da5fbfbd66060f1c1d9bc263276cf65424c8dd5531753ea2f44104928190894d96d3960ca293a5c3f20cce854d42d9f4e202b36eecef0eb8131e87dd0e0784f962625b6c80b850002000100000000000000060b00000000080012000200ef00b86b6e000900000006003200cb0000000010980100000000fc0200000000000000000000000000017f00000100000000000000f000000000002b30f21b34aa147245dc9ebc52366bd55d25c74ebd88371bacffa13470cebc23c20da56519e259a90c079b679a0aa9ca711ac62dd4f8c4c38ac7caa179005aef82daf7d7773dbfefe9ee1c9523653a21cba83bb1a2412c17c37c69d6739d2c580f2767a22de0b2ed27bfb2d8b70384af85f0997584"], 0x160}, 0x1, 0x7}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f00000003c0)={'filter\x00', 0x0, [0x3, 0xa333, 0x2]}, &(0x7f0000000080)=0x44) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r2], 0x38}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x1, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000018c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) sendmsg$key(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="02020702060000002dbd7000ffdbdf2504000300b80f0000ff07000000000000fffffffff0ffff7f0300000000000000"], 0x30}}, 0x8810) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56d41, 0x2000, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xd}, {0xffe9}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_STAB={0x5c, 0x8, 0x0, 0x1, [{{0xfffffffffffffe2f, 0x1, {0xff, 0x5, 0xb48, 0x3, 0x0, 0x200, 0x9, 0x9}}, {0x16, 0x2, [0x1, 0x9, 0x3, 0x1, 0x4, 0xd530, 0x207, 0x8, 0x7]}}, {{0x1c, 0x1, {0x1, 0x6, 0x7fff, 0xffffffff, 0x2, 0x78, 0x8, 0x2}}, {0x8, 0x2, [0x9, 0x0]}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x3, 0x100000000008, 0x3ff, 0x2, 0x3, 0x100000001, 0x27e2, 0xd}, &(0x7f0000000100)={0x5, 0x6, 0x101, 0xb21b, 0x0, 0x8000000000000001, 0x10001, 0x1}, 0x0, &(0x7f0000000540), &(0x7f0000000280)={&(0x7f0000000240)={[0x6e3]}, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b402000000000000631108000000000005200000000000009500740000000080"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x25, '\x00', 0x0, @cgroup_skb}, 0x94) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000c09000a48000000060a0b040000000000000000020000001400048010000180080001006e617400040002800900010073797a30000000000900020073797a320000000005000740c5000000140000001100018300000000000000000000000a"], 0x70}, 0x1, 0x0, 0x0, 0x20004049}, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond0\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYRES64=r11, @ANYRES16=r10, @ANYRES64=r0], 0x18}, 0x1, 0x0, 0x0, 0x200c015}, 0x10) 243.857656ms ago: executing program 3 (id=843): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r4}, 0x10, &(0x7f0000000140)={&(0x7f0000000180)=@can={{0x0, 0x0, 0x1}, 0x8, 0x0, 0x4, 0x0, "9000"}, 0x10}, 0x2, 0x0, 0x0, 0x4}, 0x810) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0x0, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x0, @private0}, @in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f00000004c0)={r6, @in={{0x2, 0xfffe, @empty}}, 0x0, 0x80}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @dev={0xac, 0x14, 0x14, 0xf}}, 0x8) close(0x4) 147.652105ms ago: executing program 0 (id=844): r0 = socket$nl_rdma(0x10, 0x3, 0x14) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a3000000000090002"], 0xfc}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000000c0)={0x806, 0x0, 0x4, 0x7}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000000c0)={0x806, 0x0, 0x4, 0x7}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000052000100000000000000000002"], 0x20}}, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) (async) write$cgroup_int(r1, &(0x7f0000000200), 0x12) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB='l'], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0xfffffffe, 0x5, {0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x2, 0x4000}, [@RTA_OIF={0x8, 0x4, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080000}, 0x80) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580), &(0x7f00000004c0), 0x1000, r3}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580), &(0x7f00000004c0), 0x1000, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) socket$unix(0x1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="00003262697c3020887c4b", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="00003262697c3020887c4b", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088}, 0x94) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000891}, 0x200000c0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)={0x38, 0x140f, 0x2bdb2fde77614cad, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'srp\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0xc804}, 0x8000) r8 = socket$inet_udplite(0x2, 0x2, 0x88) write$tun(r1, &(0x7f0000000000)={@void, @val={0x2, 0x7, 0x5, 0x7, 0x5, 0x8000}, @arp=@generic={0x303, 0xf5, 0x6, 0xd, 0xa, @broadcast, "687018edf0e495fdd11179dcf8", @remote, "6f94ba30aa"}}, 0x30) (async) write$tun(r1, &(0x7f0000000000)={@void, @val={0x2, 0x7, 0x5, 0x7, 0x5, 0x8000}, @arp=@generic={0x303, 0xf5, 0x6, 0xd, 0xa, @broadcast, "687018edf0e495fdd11179dcf8", @remote, "6f94ba30aa"}}, 0x30) ioctl$sock_inet_SIOCGIFPFLAGS(r8, 0x8935, &(0x7f0000000340)={'nicvf0\x00'}) 59.916813ms ago: executing program 3 (id=845): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="6783bc330059b2b782a15c87d51216876b5358a472cb6a71759db27d3beb72", 0x1f}], 0x1, &(0x7f0000000680)=ANY=[], 0x150}, 0x40040) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000080)=""/248, 0xf8}], 0x1, 0x0, 0x18}, 0x10100) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r2, &(0x7f0000000500)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000900)={0x1488, r3, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TESTDATA={0x79, 0x45, "7a6d067e54db97dbd3f5b8fd0488917f03334e70e0d3baaa87e9d1b90e9e4d3e932b62cb3f2e5b25080f828e145f2976328d8db9f745508be2f98ce2b826a40f7f013964f18807fc8c235d23df0f2523daf0eb5c6b87e11a32854675ba2cc2703948f87a10c92b341109edd966aeceef6d68aa956a"}, @NL80211_ATTR_TESTDATA={0x78, 0x45, "41b4aeccddc73ee62b634f05c4b11a7b97f88e2bd19e669c31be6eedeb67962e7a2bdae75275232b8094f742f7ac7bb950127215cc82f4bee2e62acd71816d641c8a4bf306e7af7716987f5cdba97bd1cb2147b73fe344765d54ed731c5b4917ad2e3a211485751507328cfe771d3d11adcdf118"}, @NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0xc3, 0x45, "38221fa78e265c1da017d8c9a6022172aa97e9273212be16d8a1e789aad0f732ae5463138ad8d79cf7af2f59ae845227dc1f7ee4e2ec11e69b6bf419db9eadbcecfff829e67e524386ef9154bca19c5fe13a94a6d1eff43f4651b063e89eb404ff282a7a2038126717a082e2885c77e3909a6954fb3c344d07bb6fa3d16ec708e7fd07ca59f14c814b8db628126c6f449689af419ce165a308bdbeb31c90c5b5e1f1d8c1a38a5293f49ccbecf2db138e976578d511a6165e2b4c7918c95f59"}, @NL80211_ATTR_TESTDATA={0xcf, 0x45, "36b41c3555c844c4531f5346a4cafd18778e25505411a758e3c4d49f67e72baaa00ac90ed45cc984ee04972a57087217ce9e921f63b99fde1836b29a6e0fbca959946403e29202d3d5ef1f01ee77645800bc90c213e3a67e0b9b0b924199707298763c129277fcab03a9e68973236c67c92856d95e0f45ffa7855585c3dca3d5ac2cc4a110dbfa673d18024a704073c98bc0bafb9b55ffb4cab8c93101ebf347f5f5e6146ee491451c389f637792be27045fe80e6469104c7267462ff96e6c75f43cded3056a8c52421739"}, @NL80211_ATTR_TESTDATA={0xff, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0xde, 0x45, "d749c71f452afffe043901e76f8d093f7cf3a10606b7800db4b5bb60d360d758e54a7cf3b4bd9c06002ff1fa1901dc5561f3a5eb041e6b2f98cd4dcad3b0048b5af1e01333074083e9a965c0d3f4685855f67d3d84c64e373ad7e8d70cbf3178bc8273c3cf1a2f28e77d06673ba73ee7055addd7334bc0fceb9e8785938c04aba50e3d0474869988ca4525d4bbf7e16f40e146f2f6036f3c770c56a51c3ea6bbb974b842df1b10fccebc6ff2d481a6c0e944ba7b846cd75fccd281765813325e739ba8584364633b6a0260a270dfd3e6365aded44277ecf6fd3f"}]}, 0x1488}, 0x1, 0x0, 0x0, 0x84}, 0x20000800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 35.441407ms ago: executing program 1 (id=846): socket$inet_udp(0x2, 0x2, 0x0) (async) unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xf2e8a000) (async, rerun: 32) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 32) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002000010327bd7000ffdbdf2e02"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) (async) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r4, 0x0, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x58, r6, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "09163f887700981584f3903bd7"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "491142cc7a"}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "3d368ef9ad58aed05855c9f5027f21ba"}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0xc810) socket$tipc(0x1e, 0x5, 0x0) (async) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 4 (id=847): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read(r1, &(0x7f0000000080)=""/253, 0xfd) read(r1, 0x0, 0x0) write$rfkill(r0, &(0x7f0000000000)={0x0, 0x2, 0x1, 0x1, 0xff}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.94' (ED25519) to the list of known hosts. [ 85.964860][ T5812] cgroup: Unknown subsys name 'net' [ 86.098279][ T5812] cgroup: Unknown subsys name 'cpuset' [ 86.107593][ T5812] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 87.923169][ T5812] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.107685][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.131007][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.139557][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.150096][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.184503][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.206879][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.221612][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.232716][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.240627][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.242263][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.252679][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.264551][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.272647][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.279865][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.289037][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.295303][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.297914][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.311158][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.319385][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.321446][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.336633][ T5145] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.345950][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.348633][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.357433][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.371162][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.033476][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 93.102108][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 93.278213][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.285526][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.293071][ T5839] bridge_slave_0: entered allmulticast mode [ 93.301698][ T5839] bridge_slave_0: entered promiscuous mode [ 93.317389][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 93.366011][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.373264][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.380626][ T5839] bridge_slave_1: entered allmulticast mode [ 93.387924][ T5839] bridge_slave_1: entered promiscuous mode [ 93.462360][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 93.546154][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.553338][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.561257][ T5842] bridge_slave_0: entered allmulticast mode [ 93.568805][ T5842] bridge_slave_0: entered promiscuous mode [ 93.579724][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.624934][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.632313][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.639711][ T5842] bridge_slave_1: entered allmulticast mode [ 93.647279][ T5842] bridge_slave_1: entered promiscuous mode [ 93.658008][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.673404][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 93.814787][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.826973][ T5839] team0: Port device team_slave_0 added [ 93.832915][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.840333][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.847724][ T5835] bridge_slave_0: entered allmulticast mode [ 93.855639][ T5835] bridge_slave_0: entered promiscuous mode [ 93.878321][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.885604][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.892857][ T5826] bridge_slave_0: entered allmulticast mode [ 93.900476][ T5826] bridge_slave_0: entered promiscuous mode [ 93.910174][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.921705][ T5839] team0: Port device team_slave_1 added [ 93.932850][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.940563][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.947995][ T5835] bridge_slave_1: entered allmulticast mode [ 93.955610][ T5835] bridge_slave_1: entered promiscuous mode [ 93.969073][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.976423][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.983736][ T5826] bridge_slave_1: entered allmulticast mode [ 93.991587][ T5826] bridge_slave_1: entered promiscuous mode [ 94.073879][ T5842] team0: Port device team_slave_0 added [ 94.095077][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.102181][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.128834][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.178806][ T5842] team0: Port device team_slave_1 added [ 94.199506][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.206685][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.232749][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.247190][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.271972][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.302030][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.309085][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.335143][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.348894][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.373903][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.386330][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.393318][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.420635][ T5843] Bluetooth: hci0: command tx timeout [ 94.420643][ T5834] Bluetooth: hci3: command tx timeout [ 94.426717][ T5843] Bluetooth: hci1: command tx timeout [ 94.426860][ T5843] Bluetooth: hci4: command tx timeout [ 94.432425][ T5834] Bluetooth: hci2: command tx timeout [ 94.438208][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.473945][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.481235][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.488712][ T5825] bridge_slave_0: entered allmulticast mode [ 94.496029][ T5825] bridge_slave_0: entered promiscuous mode [ 94.550274][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.557692][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.565390][ T5825] bridge_slave_1: entered allmulticast mode [ 94.572725][ T5825] bridge_slave_1: entered promiscuous mode [ 94.596405][ T5826] team0: Port device team_slave_0 added [ 94.621921][ T5839] hsr_slave_0: entered promiscuous mode [ 94.628813][ T5839] hsr_slave_1: entered promiscuous mode [ 94.637708][ T5835] team0: Port device team_slave_0 added [ 94.659074][ T5826] team0: Port device team_slave_1 added [ 94.696886][ T5835] team0: Port device team_slave_1 added [ 94.742763][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.749896][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.776277][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.802573][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.832135][ T5842] hsr_slave_0: entered promiscuous mode [ 94.838879][ T5842] hsr_slave_1: entered promiscuous mode [ 94.845822][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 94.851687][ T5842] Cannot create hsr debugfs directory [ 94.858283][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.865577][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.892163][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.917305][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.955307][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.962346][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.988944][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.049185][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.056488][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.082706][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.115229][ T5825] team0: Port device team_slave_0 added [ 95.123866][ T5825] team0: Port device team_slave_1 added [ 95.254924][ T5826] hsr_slave_0: entered promiscuous mode [ 95.262137][ T5826] hsr_slave_1: entered promiscuous mode [ 95.269170][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 95.275072][ T5826] Cannot create hsr debugfs directory [ 95.281394][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.288618][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.314897][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.374855][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.381959][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.408169][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.424929][ T5835] hsr_slave_0: entered promiscuous mode [ 95.431479][ T5835] hsr_slave_1: entered promiscuous mode [ 95.438049][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 95.443800][ T5835] Cannot create hsr debugfs directory [ 95.616739][ T5825] hsr_slave_0: entered promiscuous mode [ 95.623194][ T5825] hsr_slave_1: entered promiscuous mode [ 95.630377][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 95.636478][ T5825] Cannot create hsr debugfs directory [ 95.854182][ T5839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.886886][ T5839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.898490][ T5839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.936537][ T5839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.086472][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.102346][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.113386][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.127181][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.222808][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.242239][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.262209][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.276077][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.378791][ T5825] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.418031][ T5825] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.428697][ T5825] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.441829][ T5825] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.469641][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.484634][ T5834] Bluetooth: hci2: command tx timeout [ 96.490124][ T5834] Bluetooth: hci4: command tx timeout [ 96.496339][ T52] Bluetooth: hci3: command tx timeout [ 96.496644][ T5843] Bluetooth: hci1: command tx timeout [ 96.501787][ T52] Bluetooth: hci0: command tx timeout [ 96.582663][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.596490][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.603554][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.615991][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.645946][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.666316][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.673690][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.685980][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.693146][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.722920][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.833043][ T5839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.855328][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.869579][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.913912][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.925876][ T1340] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.933231][ T1340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.958783][ T1340] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.965993][ T1340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.998550][ T1340] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.005813][ T1340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.027651][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.043558][ T1340] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.050856][ T1340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.126569][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.173749][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.180963][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.211341][ T1340] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.218547][ T1340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.260376][ T5842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.289481][ T982] cfg80211: failed to load regulatory.db [ 97.307373][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.400443][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.508539][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.537077][ T5825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.599090][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.606435][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.646128][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.653354][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.781037][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.879322][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.045115][ T5842] veth0_vlan: entered promiscuous mode [ 98.080277][ T5826] veth0_vlan: entered promiscuous mode [ 98.111062][ T5842] veth1_vlan: entered promiscuous mode [ 98.133447][ T5826] veth1_vlan: entered promiscuous mode [ 98.197761][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.226668][ T5839] veth0_vlan: entered promiscuous mode [ 98.252596][ T5839] veth1_vlan: entered promiscuous mode [ 98.273570][ T5842] veth0_macvtap: entered promiscuous mode [ 98.287266][ T5842] veth1_macvtap: entered promiscuous mode [ 98.315939][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.342138][ T5826] veth0_macvtap: entered promiscuous mode [ 98.367284][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.380127][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.391525][ T5826] veth1_macvtap: entered promiscuous mode [ 98.453758][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.465524][ T5839] veth0_macvtap: entered promiscuous mode [ 98.472489][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.497837][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.507598][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.529324][ T5835] veth0_vlan: entered promiscuous mode [ 98.539265][ T5839] veth1_macvtap: entered promiscuous mode [ 98.551005][ T5825] veth0_vlan: entered promiscuous mode [ 98.558683][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.568423][ T52] Bluetooth: hci0: command tx timeout [ 98.574204][ T5834] Bluetooth: hci4: command tx timeout [ 98.575054][ T5843] Bluetooth: hci3: command tx timeout [ 98.579652][ T5834] Bluetooth: hci2: command tx timeout [ 98.589711][ T52] Bluetooth: hci1: command tx timeout [ 98.599584][ T5835] veth1_vlan: entered promiscuous mode [ 98.620447][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.643634][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.678736][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.688710][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.701431][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.710877][ T5825] veth1_vlan: entered promiscuous mode [ 98.727416][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.760771][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.815060][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.824832][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.845521][ T5835] veth0_macvtap: entered promiscuous mode [ 98.855386][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.865239][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.897049][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.906350][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.925189][ T5835] veth1_macvtap: entered promiscuous mode [ 98.963192][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.968218][ T5825] veth0_macvtap: entered promiscuous mode [ 98.977870][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.032390][ T5825] veth1_macvtap: entered promiscuous mode [ 99.074382][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.076915][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.082341][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.103650][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.137297][ T5931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.148419][ T5931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.156845][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 99.179575][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.188963][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.210948][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.219829][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.259384][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.291498][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.310264][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.323237][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.363721][ T5945] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 99.444584][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.452663][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.460460][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.471068][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.481697][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.553912][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.644861][ T5947] netlink: 'syz.0.1': attribute type 4 has an invalid length. [ 99.708136][ T5931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.721791][ T5931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.738557][ T5949] policy can only be matched on NF_INET_PRE_ROUTING [ 99.738580][ T5949] unable to load match [ 99.797670][ T5949] Zero length message leads to an empty skb [ 99.827167][ T5949] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6'. [ 99.842482][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.876775][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.923207][ T5953] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.928857][ T5955] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6'. [ 99.931981][ T5953] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.940280][ T5955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6'. [ 99.959059][ T5955] netlink: 'syz.1.6': attribute type 1 has an invalid length. [ 100.044891][ T5953] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.059323][ T5953] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.193160][ T5949] geneve1: mtu greater than device maximum [ 100.200982][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.211703][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.241947][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.252942][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.286406][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.297245][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.305810][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.319477][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.630029][ T5967] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.654401][ T52] Bluetooth: hci1: command tx timeout [ 100.654845][ T5834] Bluetooth: hci3: command tx timeout [ 100.659895][ T52] Bluetooth: hci4: command tx timeout [ 100.668452][ T5843] Bluetooth: hci2: command tx timeout [ 100.671144][ T52] Bluetooth: hci0: command tx timeout [ 100.929873][ T5978] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.168567][ T5987] Bluetooth: MGMT ver 1.23 [ 101.370688][ T5992] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13'. [ 101.385341][ T5992] hsr_slave_0: left promiscuous mode [ 101.393664][ T5992] hsr_slave_1: left promiscuous mode [ 102.083987][ T6015] netlink: 144 bytes leftover after parsing attributes in process `syz.1.21'. [ 102.415267][ T6029] netlink: 'syz.1.25': attribute type 13 has an invalid length. [ 102.483377][ T6030] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 102.802937][ T6039] tipc: Started in network mode [ 102.821426][ T6039] tipc: Node identity 3e4b0299301c, cluster identity 4711 [ 102.873650][ T6039] tipc: Enabled bearer , priority 0 [ 102.943309][ T6039] tipc: Resetting bearer [ 103.029668][ T6040] syzkaller0: entered promiscuous mode [ 103.044315][ T6040] syzkaller0: entered allmulticast mode [ 103.127922][ T6036] tipc: Resetting bearer [ 103.150690][ T6036] tipc: Disabling bearer [ 103.344376][ T6049] syzkaller0: entered promiscuous mode [ 103.350183][ T6049] syzkaller0: entered allmulticast mode [ 103.366578][ T6051] warning: `syz.4.32' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 103.734741][ T6066] netlink: 204 bytes leftover after parsing attributes in process `syz.2.36'. [ 104.061601][ T6080] netlink: 'syz.4.38': attribute type 1 has an invalid length. [ 104.219505][ T6084] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 104.238427][ T6084] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 104.303555][ T6084] bond1: (slave vcan1): making interface the new active one [ 104.332374][ T6084] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 104.396168][ T6093] netlink: 'syz.2.40': attribute type 4 has an invalid length. [ 104.456954][ T6093] netlink: 224 bytes leftover after parsing attributes in process `syz.2.40'. [ 104.602012][ T6095] tipc: Started in network mode [ 104.607407][ T6095] tipc: Node identity def20facd5e8, cluster identity 4711 [ 104.616000][ T6095] tipc: Enabled bearer , priority 0 [ 104.640203][ T6095] syzkaller0: entered promiscuous mode [ 104.659896][ T6095] syzkaller0: entered allmulticast mode [ 104.703506][ T6103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.44'. [ 104.742521][ T6096] tipc: Resetting bearer [ 104.773305][ T6099] syzkaller1: entered promiscuous mode [ 104.773891][ T6103] netlink: 12 bytes leftover after parsing attributes in process `syz.1.44'. [ 104.779722][ T6099] syzkaller1: entered allmulticast mode [ 105.342695][ T6094] tipc: Resetting bearer [ 105.429697][ T6094] tipc: Disabling bearer [ 105.518165][ T6137] netlink: 28 bytes leftover after parsing attributes in process `syz.4.52'. [ 105.569723][ T6141] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.53'. [ 105.600870][ T6141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.53'. [ 105.763607][ T6148] netlink: 40 bytes leftover after parsing attributes in process `syz.2.51'. [ 105.777872][ T6149] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 105.794949][ T6148] netlink: 260 bytes leftover after parsing attributes in process `syz.2.51'. [ 105.859264][ T6152] netlink: 'syz.2.51': attribute type 12 has an invalid length. [ 105.996831][ T6151] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 106.357246][ T6169] netlink: 24 bytes leftover after parsing attributes in process `syz.3.61'. [ 106.448466][ T6169] bond1: entered promiscuous mode [ 106.474827][ T6169] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.897289][ T6169] bond1 (unregistering): Released all slaves [ 107.436980][ T6208] netlink: 11 bytes leftover after parsing attributes in process `syz.0.70'. [ 107.505642][ T6212] netlink: 'syz.3.71': attribute type 1 has an invalid length. [ 107.589467][ T6219] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.72'. [ 107.645916][ T6219] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 108.152610][ T6245] bridge0: entered allmulticast mode [ 108.921390][ T6252] syz.3.81: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 108.955144][ T6252] CPU: 0 UID: 0 PID: 6252 Comm: syz.3.81 Not tainted syzkaller #0 PREEMPT(full) [ 108.955175][ T6252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 108.955195][ T6252] Call Trace: [ 108.955203][ T6252] [ 108.955212][ T6252] dump_stack_lvl+0x189/0x250 [ 108.955256][ T6252] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.955284][ T6252] ? __pfx__printk+0x10/0x10 [ 108.955306][ T6252] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 108.955341][ T6252] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 108.955372][ T6252] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 108.955404][ T6252] warn_alloc+0x214/0x310 [ 108.955443][ T6252] ? __pfx_warn_alloc+0x10/0x10 [ 108.955485][ T6252] ? __get_vm_area_node+0x28f/0x300 [ 108.955514][ T6252] ? packet_set_ring+0x6f3/0x2120 [ 108.955541][ T6252] __vmalloc_node_range_noprof+0x690/0x12d0 [ 108.955605][ T6252] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 108.955637][ T6252] ? alloc_pages_mpol+0x3cd/0x4a0 [ 108.955661][ T6252] ? packet_set_ring+0x6f3/0x2120 [ 108.955682][ T6252] vzalloc_noprof+0xb2/0xf0 [ 108.955712][ T6252] ? packet_set_ring+0x6f3/0x2120 [ 108.955735][ T6252] packet_set_ring+0x6f3/0x2120 [ 108.955782][ T6252] ? __pfx_packet_set_ring+0x10/0x10 [ 108.955826][ T6252] ? _copy_from_user+0x94/0xb0 [ 108.955857][ T6252] packet_setsockopt+0xc5a/0x12c0 [ 108.955889][ T6252] ? __pfx_packet_setsockopt+0x10/0x10 [ 108.955912][ T6252] ? file_init_path+0x3b/0x590 [ 108.955950][ T6252] ? aa_sk_perm+0x81e/0x950 [ 108.955985][ T6252] ? __pfx_aa_sk_perm+0x10/0x10 [ 108.956016][ T6252] ? aa_sock_opt_perm+0xff/0x1b0 [ 108.956051][ T6252] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 108.956071][ T6252] ? __pfx_packet_setsockopt+0x10/0x10 [ 108.956095][ T6252] do_sock_setsockopt+0x17c/0x1b0 [ 108.956124][ T6252] __x64_sys_setsockopt+0x13f/0x1b0 [ 108.956153][ T6252] do_syscall_64+0xfa/0xfa0 [ 108.956171][ T6252] ? lockdep_hardirqs_on+0x9c/0x150 [ 108.956192][ T6252] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.956212][ T6252] ? clear_bhb_loop+0x60/0xb0 [ 108.956237][ T6252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.956257][ T6252] RIP: 0033:0x7f631a58f6c9 [ 108.956286][ T6252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.956302][ T6252] RSP: 002b:00007f631b44d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 108.956330][ T6252] RAX: ffffffffffffffda RBX: 00007f631a7e5fa0 RCX: 00007f631a58f6c9 [ 108.956344][ T6252] RDX: 000000000000000d RSI: 0000000000000107 RDI: 0000000000000004 [ 108.956356][ T6252] RBP: 00007f631a611f91 R08: 000000000000001c R09: 0000000000000000 [ 108.956369][ T6252] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.956381][ T6252] R13: 00007f631a7e6038 R14: 00007f631a7e5fa0 R15: 00007ffcb96171f8 [ 108.956417][ T6252] [ 108.956430][ T6252] Mem-Info: [ 109.274139][ T6252] active_anon:9922 inactive_anon:0 isolated_anon:0 [ 109.274139][ T6252] active_file:2825 inactive_file:39878 isolated_file:0 [ 109.274139][ T6252] unevictable:3840 dirty:499 writeback:0 [ 109.274139][ T6252] slab_reclaimable:10490 slab_unreclaimable:95284 [ 109.274139][ T6252] mapped:36730 shmem:8998 pagetables:1170 [ 109.274139][ T6252] sec_pagetables:0 bounce:0 [ 109.274139][ T6252] kernel_misc_reclaimable:0 [ 109.274139][ T6252] free:1302093 free_pcp:13085 free_cma:0 [ 109.408524][ T6277] bridge_slave_1: left allmulticast mode [ 109.430135][ T6252] Node 0 active_anon:41188kB inactive_anon:0kB active_file:11300kB inactive_file:159308kB unevictable:13824kB isolated(anon):0kB isolated(file):0kB mapped:148320kB dirty:1984kB writeback:0kB shmem:35756kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12100kB pagetables:4448kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 109.456967][ T6277] bridge_slave_1: left promiscuous mode [ 109.485309][ T6277] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.516987][ T6252] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 109.650314][ T6252] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 109.754121][ T6252] lowmem_reserve[]: 0 2504 2505 2505 2505 [ 109.760299][ T6252] Node 0 DMA32 free:1325892kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44488kB inactive_anon:0kB active_file:11300kB inactive_file:159308kB unevictable:13824kB writepending:1884kB zspages:0kB present:3129332kB managed:2565108kB mlocked:12288kB bounce:0kB free_pcp:93620kB local_pcp:47504kB free_cma:0kB [ 109.804607][ T6252] lowmem_reserve[]: 0 0 0 0 0 [ 109.818200][ T6252] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 109.859792][ T6285] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 109.934428][ T6252] lowmem_reserve[]: 0 0 0 0 0 [ 109.939258][ T6252] Node 1 Normal free:3896560kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:12kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17184kB local_pcp:6912kB free_cma:0kB [ 110.058323][ T6252] lowmem_reserve[]: 0 0 0 0 0 [ 110.063142][ T6252] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 110.174152][ T6252] Node 0 DMA32: 713*4kB (UME) 490*8kB (UME) 91*16kB (UME) 76*32kB (UME) 35*64kB (UME) 22*128kB (UME) 20*256kB (UME) 10*512kB (UM) 8*1024kB (UME) 5*2048kB (UM) 317*4096kB (UM) = 1342820kB [ 110.214611][ T6290] netlink: 'syz.1.89': attribute type 10 has an invalid length. [ 110.235696][ T6252] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 110.293103][ T6290] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 110.302524][ T6252] Node 1 Normal: 168*4kB (UM) 38*8kB (UME) 38*16kB (UME) 60*32kB (UME) 21*64kB (UME) 6*128kB (UME) 5*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 948*4096kB (M) = 3896560kB [ 110.337322][ T6252] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 110.385017][ T6252] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 110.422916][ T6252] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 110.469854][ T6252] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 110.502963][ T6252] 49699 total pagecache pages [ 110.520855][ T6303] netlink: 'syz.0.92': attribute type 1 has an invalid length. [ 110.534185][ T6252] 0 pages in swap cache [ 110.538421][ T6252] Free swap = 124996kB [ 110.541930][ T6303] netlink: 14436 bytes leftover after parsing attributes in process `syz.0.92'. [ 110.542600][ T6252] Total swap = 124996kB [ 110.594964][ T6252] 2097051 pages RAM [ 110.607533][ T6252] 0 pages HighMem/MovableOnly [ 110.615012][ T6252] 424132 pages reserved [ 110.619261][ T6252] 0 pages cma reserved [ 110.853179][ T6314] netlink: 36 bytes leftover after parsing attributes in process `syz.2.95'. [ 110.953964][ T6320] netlink: 12 bytes leftover after parsing attributes in process `syz.4.96'. [ 111.249729][ T6333] netlink: 208 bytes leftover after parsing attributes in process `syz.3.100'. [ 111.259594][ T6333] netlink: 112 bytes leftover after parsing attributes in process `syz.3.100'. [ 111.413592][ T6342] netlink: 'syz.1.102': attribute type 15 has an invalid length. [ 111.421582][ T6342] netlink: 24 bytes leftover after parsing attributes in process `syz.1.102'. [ 111.454280][ T6344] netlink: 'syz.3.103': attribute type 1 has an invalid length. [ 111.486356][ T6341] netlink: 12 bytes leftover after parsing attributes in process `syz.2.104'. [ 111.821732][ T6358] netlink: 104 bytes leftover after parsing attributes in process `syz.3.108'. [ 111.913840][ T6366] netlink: 32 bytes leftover after parsing attributes in process `syz.2.110'. [ 112.049530][ T6366] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.057364][ T6366] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.175346][ T6366] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 112.191927][ T6366] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 112.193717][ T6379] sctp: [Deprecated]: syz.0.115 (pid 6379) Use of int in max_burst socket option. [ 112.193717][ T6379] Use struct sctp_assoc_value instead [ 112.216435][ T6366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.230359][ T6366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.493270][ T6377] dvmrp1: tun_chr_ioctl cmd 1074025680 [ 112.524688][ T37] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.562109][ T37] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.605546][ T37] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.668245][ T37] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.061100][ T6407] netlink: 10 bytes leftover after parsing attributes in process `syz.4.121'. [ 113.242738][ T6411] netlink: 'syz.4.123': attribute type 10 has an invalid length. [ 113.263000][ T6410] netlink: 'syz.4.123': attribute type 10 has an invalid length. [ 113.279084][ T6411] netlink: 'syz.4.123': attribute type 10 has an invalid length. [ 113.321160][ T6416] macsec1: entered allmulticast mode [ 113.326762][ T6416] macsec0: entered allmulticast mode [ 113.398406][ T6418] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 113.515408][ T6426] syzkaller1: entered promiscuous mode [ 113.525094][ T6426] syzkaller1: entered allmulticast mode [ 113.832789][ T6442] netlink: 'syz.0.130': attribute type 1 has an invalid length. [ 114.006873][ T6444] bridge0: left allmulticast mode [ 115.280649][ T6481] syzkaller1: entered promiscuous mode [ 115.296206][ T6481] syzkaller1: entered allmulticast mode [ 115.461818][ T6469] xt_hashlimit: size too large, truncated to 1048576 [ 115.468900][ T6469] xt_hashlimit: max too large, truncated to 1048576 [ 115.563726][ T6469] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 115.649664][ T6497] tipc: Started in network mode [ 115.654696][ T6497] tipc: Node identity , cluster identity 4711 [ 115.660892][ T6497] tipc: Failed to obtain node identity [ 115.666565][ T6497] tipc: Enabling of bearer rejected, failed to enable media [ 115.761118][ T6494] syzkaller0: entered promiscuous mode [ 115.777150][ T6494] syzkaller0: entered allmulticast mode [ 115.874659][ T6501] __nla_validate_parse: 71 callbacks suppressed [ 115.874680][ T6501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.146'. [ 116.141657][ T6512] netlink: 12 bytes leftover after parsing attributes in process `syz.0.147'. [ 117.530851][ T6530] netlink: 40 bytes leftover after parsing attributes in process `syz.1.153'. [ 117.593706][ T6536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.155'. [ 117.713341][ T6538] netlink: 20 bytes leftover after parsing attributes in process `syz.0.152'. [ 117.726097][ T6542] netlink: 28 bytes leftover after parsing attributes in process `syz.2.157'. [ 117.857138][ T6550] ip6t_rpfilter: unknown options [ 117.996245][ T6551] Driver unsupported XDP return value 0 on prog (id 50) dev N/A, expect packet loss! [ 118.189367][ T6562] netlink: 'syz.4.162': attribute type 10 has an invalid length. [ 118.250011][ T6565] netlink: 'syz.4.162': attribute type 10 has an invalid length. [ 118.340612][ T6562] team0: Port device dummy0 added [ 118.350753][ T6564] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 118.365211][ T6564] dvmrp1: linktype set to 774 [ 118.391896][ T6565] team0: Port device dummy0 removed [ 118.408931][ T6565] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 118.599593][ T6575] netlink: 'syz.4.165': attribute type 2 has an invalid length. [ 118.607515][ T6575] netlink: 119 bytes leftover after parsing attributes in process `syz.4.165'. [ 118.626055][ T6569] pim6reg: entered allmulticast mode [ 118.824878][ T6582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.168'. [ 118.990020][ T6577] syzkaller0: entered promiscuous mode [ 119.023065][ T6577] syzkaller0: entered allmulticast mode [ 119.031761][ T6585] batadv_slave_1: entered promiscuous mode [ 119.035093][ T6588] netlink: 68 bytes leftover after parsing attributes in process `syz.4.170'. [ 119.040519][ T6585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.169'. [ 119.059545][ T6577] netlink: 'syz.0.166': attribute type 1 has an invalid length. [ 119.105127][ T6577] bond1: entered promiscuous mode [ 119.110401][ T6577] bond1: entered allmulticast mode [ 119.116947][ T6577] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.330382][ T6577] bond1 (unregistering): Released all slaves [ 119.471835][ T6585] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.502554][ T6585] batadv_slave_1 (unregistering): left promiscuous mode [ 119.509706][ T6585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.589369][ T6601] syzkaller1: entered promiscuous mode [ 119.595093][ T6601] syzkaller1: entered allmulticast mode [ 121.259956][ T6648] __nla_validate_parse: 1 callbacks suppressed [ 121.259975][ T6648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.184'. [ 121.284299][ T6649] netlink: 'syz.1.184': attribute type 1 has an invalid length. [ 121.314181][ T6649] netlink: 224 bytes leftover after parsing attributes in process `syz.1.184'. [ 121.345354][ T6649] workqueue: Failed to create a rescuer kthread for wq "phy2": -EINTR [ 121.395037][ T6661] netlink: 20 bytes leftover after parsing attributes in process `syz.3.187'. [ 121.503137][ T6668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.187'. [ 121.515443][ T6661] erspan0: entered promiscuous mode [ 121.533181][ T6661] erspan0: left promiscuous mode [ 121.734762][ T6675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.191'. [ 121.936478][ T6688] tipc: Started in network mode [ 121.951964][ T6688] tipc: Node identity 92cdb56efd6c, cluster identity 4711 [ 121.970635][ T6688] tipc: Enabled bearer , priority 0 [ 122.020355][ T6692] ip6tnl1: entered promiscuous mode [ 122.071561][ T6692] ip6tnl1: entered allmulticast mode [ 122.117845][ T6692] team0: Device ip6tnl1 is of different type [ 122.215930][ T6705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.196'. [ 122.774589][ T6723] netlink: 24 bytes leftover after parsing attributes in process `syz.1.203'. [ 123.027594][ T6734] netlink: 16 bytes leftover after parsing attributes in process `syz.1.203'. [ 123.136783][ T5894] tipc: Node number set to 1872868718 [ 124.463129][ T6824] netlink: 'syz.0.214': attribute type 15 has an invalid length. [ 124.894762][ T6845] netlink: 60 bytes leftover after parsing attributes in process `syz.4.219'. [ 124.917774][ T6843] sctp: [Deprecated]: syz.3.218 (pid 6843) Use of int in max_burst socket option. [ 124.917774][ T6843] Use struct sctp_assoc_value instead [ 125.246319][ T6862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.224'. [ 125.284932][ T6861] bridge1: entered allmulticast mode [ 125.940056][ T6888] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 125.949715][ T6888] team0: Port device batadv1 added [ 125.971679][ T6891] syzkaller0: entered promiscuous mode [ 125.977326][ T6891] syzkaller0: entered allmulticast mode [ 126.159661][ T6896] syzkaller1: entered promiscuous mode [ 126.166279][ T6896] syzkaller1: entered allmulticast mode [ 126.181959][ T6899] netlink: 'syz.0.234': attribute type 21 has an invalid length. [ 126.248978][ T6899] netlink: 'syz.0.234': attribute type 4 has an invalid length. [ 126.284131][ T6899] __nla_validate_parse: 7 callbacks suppressed [ 126.284149][ T6899] netlink: 3 bytes leftover after parsing attributes in process `syz.0.234'. [ 126.390426][ T6904] netlink: 200 bytes leftover after parsing attributes in process `syz.0.237'. [ 126.423644][ T6903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.237'. [ 126.798240][ T6907] netlink: 'syz.4.238': attribute type 13 has an invalid length. [ 127.186774][ T6910] svc: failed to register nfsdv3 RPC service (errno 111). [ 127.219547][ T6907] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.302406][ T6910] svc: failed to register nfsaclv3 RPC service (errno 111). [ 127.304338][ T6932] netlink: 52 bytes leftover after parsing attributes in process `syz.1.242'. [ 127.646277][ T6907] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.702365][ T6907] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.343279][ T6789] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.357693][ T6789] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.376000][ T6789] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.413000][ T6789] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.511301][ T6960] netlink: 72 bytes leftover after parsing attributes in process `syz.1.244'. [ 128.536986][ T6960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.244'. [ 128.576224][ T6960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.244'. [ 129.321265][ T6987] netlink: 'syz.0.251': attribute type 1 has an invalid length. [ 129.351115][ T6987] netlink: 248 bytes leftover after parsing attributes in process `syz.0.251'. [ 129.375565][ T6987] ieee802154 phy0 wpan0: encryption failed: -22 [ 129.538724][ T6991] tipc: Enabled bearer , priority 0 [ 129.579751][ T6985] syzkaller0: entered promiscuous mode [ 129.586518][ T6985] syzkaller0: entered allmulticast mode [ 129.853506][ T7003] netlink: 16 bytes leftover after parsing attributes in process `syz.3.255'. [ 129.908474][ T6984] tipc: Resetting bearer [ 129.965578][ T6984] tipc: Disabling bearer [ 130.290547][ T7016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.258'. [ 130.619341][ T7021] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 131.056087][ T7034] Bluetooth: MGMT ver 1.23 [ 132.727642][ T7072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.274'. [ 133.542864][ T7087] netlink: 60 bytes leftover after parsing attributes in process `syz.4.278'. [ 133.552919][ T7087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.278'. [ 133.561859][ T7087] netlink: 32 bytes leftover after parsing attributes in process `syz.4.278'. [ 133.986499][ T7094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.280'. [ 134.064295][ T7094] netlink: 16 bytes leftover after parsing attributes in process `syz.4.280'. [ 134.893168][ T6891] Set syz1 is full, maxelem 65536 reached [ 135.078433][ T7105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.284'. [ 135.087630][ T7105] netlink: 'syz.2.284': attribute type 21 has an invalid length. [ 136.273936][ T7129] netlink: 60 bytes leftover after parsing attributes in process `syz.4.288'. [ 136.292702][ T7128] netlink: 'syz.3.289': attribute type 1 has an invalid length. [ 136.298009][ T7129] netlink: 'syz.4.288': attribute type 13 has an invalid length. [ 136.320557][ T7129] netlink: 'syz.4.288': attribute type 17 has an invalid length. [ 136.345660][ T7129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.288'. [ 136.568386][ T7137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.291'. [ 136.822994][ T7138] bridge1: entered allmulticast mode [ 137.025316][ T7153] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.153782][ T7159] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 137.221470][ T7159] team1: entered promiscuous mode [ 137.230640][ T7159] team1: entered allmulticast mode [ 138.222606][ T7219] __nla_validate_parse: 1 callbacks suppressed [ 138.222627][ T7219] netlink: 20 bytes leftover after parsing attributes in process `syz.0.312'. [ 138.255449][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.262018][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.278974][ T7226] netlink: 20 bytes leftover after parsing attributes in process `syz.0.312'. [ 138.557749][ T7233] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 139.006746][ T7245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.320'. [ 139.037598][ T7250] netlink: 28 bytes leftover after parsing attributes in process `syz.2.321'. [ 139.084587][ T7250] netlink: 20 bytes leftover after parsing attributes in process `syz.2.321'. [ 139.097770][ T7246] netlink: 'syz.0.320': attribute type 11 has an invalid length. [ 139.129333][ T7250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.321'. [ 139.299936][ T7265] netlink: 24 bytes leftover after parsing attributes in process `syz.0.327'. [ 139.404229][ T7268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.326'. [ 139.445337][ T7268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.326'. [ 139.474871][ T7268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.326'. [ 139.998836][ T30] audit: type=1800 audit(1763303966.453:2): pid=7292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.333" name="memory.events" dev="tmpfs" ino=335 res=0 errno=0 [ 140.211418][ T7300] netlink: 'syz.3.334': attribute type 13 has an invalid length. [ 140.279187][ T7300] netlink: 'syz.3.334': attribute type 17 has an invalid length. [ 140.287608][ T7300] netlink: 'syz.3.334': attribute type 27 has an invalid length. [ 140.401149][ T7302] bridge_slave_1: left allmulticast mode [ 140.409848][ T7302] bridge_slave_1: left promiscuous mode [ 140.429440][ T7302] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.461330][ T7302] bridge_slave_0: left allmulticast mode [ 140.471570][ T7302] bridge_slave_0: left promiscuous mode [ 140.478258][ T7302] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.478279][ T7311] netlink: 'syz.1.337': attribute type 4 has an invalid length. [ 140.542493][ T7313] block nbd0: not configured, cannot reconfigure [ 141.030940][ T7325] syzkaller0: entered promiscuous mode [ 141.040712][ T7328] raw_sendmsg: syz.2.341 forgot to set AF_INET. Fix it! [ 141.053894][ T7325] syzkaller0: entered allmulticast mode [ 141.065913][ T7330] netlink: 'syz.1.343': attribute type 1 has an invalid length. [ 141.098197][ T7325] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1500) ! [ 141.498242][ T7353] xt_TCPMSS: Only works on TCP SYN packets [ 142.114789][ T7380] ieee802154 phy0 wpan0: encryption failed: -90 [ 142.208105][ T7383] tipc: Enabling of bearer rejected, failed to enable media [ 142.243540][ T7384] vxcan1: entered promiscuous mode [ 142.249421][ T7384] vxcan1: entered allmulticast mode [ 142.654687][ T7410] bond1: option mode: unable to set because the bond device has slaves [ 142.773722][ T7412] bond1: option arp_interval: invalid value (18446744073709551615) [ 142.782175][ T7412] bond1: option arp_interval: allowed values 0 - 2147483647 [ 142.809894][ T7412] bond1 (unregistering): Released all slaves [ 142.831620][ T7425] sctp: [Deprecated]: syz.3.367 (pid 7425) Use of int in max_burst socket option. [ 142.831620][ T7425] Use struct sctp_assoc_value instead [ 143.021314][ T7430] tipc: Enabling of bearer rejected, failed to enable media [ 143.844713][ T6782] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.883746][ T6782] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.907360][ T6782] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.982867][ T6782] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.738127][ T7497] netlink: zone id is out of range [ 144.743358][ T7497] netlink: zone id is out of range [ 144.779071][ T7497] netlink: get zone limit has 8 unknown bytes [ 144.796366][ T7499] netlink: 'syz.1.388': attribute type 30 has an invalid length. [ 144.820472][ T7496] __nla_validate_parse: 40 callbacks suppressed [ 144.820495][ T7496] netlink: 40 bytes leftover after parsing attributes in process `syz.0.387'. [ 144.844363][ T7499] netlink: 16 bytes leftover after parsing attributes in process `syz.1.388'. [ 144.914710][ T7499] bond1: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 144.989433][ T7499] bond1 (unregistering): Released all slaves [ 145.078039][ T7511] netlink: 60 bytes leftover after parsing attributes in process `syz.4.390'. [ 145.088180][ T7511] unsupported nlmsg_type 40 [ 145.096662][ T7511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.390'. [ 145.269156][ T7513] netlink: 'syz.1.391': attribute type 2 has an invalid length. [ 145.310960][ T7513] netlink: 119 bytes leftover after parsing attributes in process `syz.1.391'. [ 145.358015][ T7526] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 145.620585][ T7539] netlink: 20 bytes leftover after parsing attributes in process `syz.2.395'. [ 146.071673][ T7560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.401'. [ 146.121328][ T7563] netlink: 'syz.0.402': attribute type 13 has an invalid length. [ 146.136993][ T7563] netlink: 'syz.0.402': attribute type 17 has an invalid length. [ 146.369989][ T7563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.396325][ T7563] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.412097][ T7563] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 146.557463][ T7555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.572859][ T7560] syz.1.401 (7560) used greatest stack depth: 17832 bytes left [ 146.603701][ T7576] sctp: [Deprecated]: syz.2.406 (pid 7576) Use of struct sctp_assoc_value in delayed_ack socket option. [ 146.603701][ T7576] Use struct sctp_sack_info instead [ 146.640153][ T7563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.778339][ T7582] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.948578][ T7595] netlink: 24 bytes leftover after parsing attributes in process `syz.1.414'. [ 146.982700][ T7597] tipc: Started in network mode [ 146.988144][ T7597] tipc: Node identity ac14142f, cluster identity 4711 [ 147.006321][ T7597] tipc: New replicast peer: 0.0.0.0 [ 147.012134][ T7597] tipc: Enabled bearer , priority 10 [ 147.055480][ T7601] tipc: New replicast peer: 172.30.1.3 [ 147.071218][ T7603] batadv_slave_1: entered promiscuous mode [ 147.103048][ T7602] batadv_slave_1: left promiscuous mode [ 147.146800][ T7595] netlink: 40 bytes leftover after parsing attributes in process `syz.1.414'. [ 147.186172][ T7595] netlink: 60 bytes leftover after parsing attributes in process `syz.1.414'. [ 147.271510][ T7611] tipc: Enabled bearer , priority 0 [ 147.285316][ T7611] syzkaller0: entered promiscuous mode [ 147.294112][ T7611] syzkaller0: entered allmulticast mode [ 147.487201][ T7624] tipc: Resetting bearer [ 147.557507][ T7611] macvlan0: entered allmulticast mode [ 147.563331][ T7611] veth1_vlan: entered allmulticast mode [ 147.697621][ T7610] tipc: Resetting bearer [ 147.752821][ T7610] tipc: Disabling bearer [ 148.136641][ T7647] bond2: option lacp_active: invalid value (8) [ 148.183559][ T7647] bond2 (unregistering): Released all slaves [ 148.211681][ T6946] tipc: Node number set to 2886997039 [ 148.802622][ T7685] ip6_vti0 speed is unknown, defaulting to 1000 [ 148.876189][ T7685] ip6_vti0 speed is unknown, defaulting to 1000 [ 148.884818][ T7685] ip6_vti0 speed is unknown, defaulting to 1000 [ 148.969381][ T5834] Bluetooth: hci3: command tx timeout [ 149.194765][ T7705] netlink: 'syz.3.444': attribute type 1 has an invalid length. [ 149.550005][ T7685] infiniband syz2: set down [ 149.576730][ T24] ip6_vti0 speed is unknown, defaulting to 1000 [ 149.594828][ T7685] infiniband syz2: added ip6_vti0 [ 149.605752][ T7685] syz2: rxe_create_cq: returned err = -12 [ 149.618385][ T7685] infiniband syz2: Couldn't create ib_mad CQ [ 149.649775][ T7685] infiniband syz2: Couldn't open port 1 [ 149.720413][ T7685] RDS/IB: syz2: added [ 149.737461][ T7685] smc: adding ib device syz2 with port count 1 [ 149.765400][ T7729] ip6_vti0 speed is unknown, defaulting to 1000 [ 149.806931][ T7685] smc: ib device syz2 port 1 has no pnetid [ 149.838061][ T7734] __nla_validate_parse: 7 callbacks suppressed [ 149.838082][ T7734] netlink: 28 bytes leftover after parsing attributes in process `syz.4.450'. [ 149.856720][ T6946] ip6_vti0 speed is unknown, defaulting to 1000 [ 149.874048][ T7734] tipc: New replicast peer: 255.255.255.255 [ 149.888971][ T7734] tipc: Enabled bearer , priority 10 [ 149.906728][ T7734] netlink: 'syz.4.450': attribute type 11 has an invalid length. [ 149.924721][ T7734] netlink: 'syz.4.450': attribute type 11 has an invalid length. [ 149.941138][ T7734] netlink: 224 bytes leftover after parsing attributes in process `syz.4.450'. [ 149.955580][ T7737] openvswitch: netlink: Duplicate or invalid key (type 0). [ 149.966148][ T7737] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.075059][ T7738] bridge2: entered promiscuous mode [ 150.086257][ T7738] bridge2: entered allmulticast mode [ 150.587281][ T7685] ip6_vti0 speed is unknown, defaulting to 1000 [ 150.898105][ T6947] tipc: Node number set to 240583321 [ 150.906864][ T7757] No such timeout policy "syz1" [ 151.056589][ T7685] ip6_vti0 speed is unknown, defaulting to 1000 [ 151.190671][ T7763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.457'. [ 151.226289][ T7763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.457'. [ 151.254674][ T7763] netlink: 'syz.0.457': attribute type 5 has an invalid length. [ 151.272593][ T7763] netlink: 20 bytes leftover after parsing attributes in process `syz.0.457'. [ 151.412217][ T30] audit: type=1804 audit(1763303977.863:3): pid=7775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.461" name="/newroot/110/cgroup.controllers" dev="tmpfs" ino=583 res=1 errno=0 [ 151.424247][ T7776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.460'. [ 151.478622][ T30] audit: type=1800 audit(1763303977.863:4): pid=7775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.461" name="cgroup.controllers" dev="tmpfs" ino=583 res=0 errno=0 [ 151.501290][ T7776] tipc: Enabling of bearer rejected, failed to enable media [ 151.590292][ T7783] ieee802154 phy0 wpan0: encryption failed: -90 [ 151.633508][ T7685] ip6_vti0 speed is unknown, defaulting to 1000 [ 152.157622][ T7801] netlink: 12 bytes leftover after parsing attributes in process `syz.3.467'. [ 152.213414][ T7685] ip6_vti0 speed is unknown, defaulting to 1000 [ 152.332285][ T7805] netlink: 96 bytes leftover after parsing attributes in process `syz.1.469'. [ 152.360458][ T6946] IPVS: starting estimator thread 0... [ 152.382560][ T7807] netlink: 6 bytes leftover after parsing attributes in process `syz.3.470'. [ 152.455383][ T7809] IPVS: using max 29 ests per chain, 69600 per kthread [ 152.571582][ T7818] batadv_slave_1: entered promiscuous mode [ 152.581113][ T7818] batman_adv: batadv0: Adding interface: macvlan2 [ 152.587900][ T7818] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.614779][ T7818] batman_adv: batadv0: Interface activated: macvlan2 [ 152.683322][ T7685] ip6_vti0 speed is unknown, defaulting to 1000 [ 152.916279][ T7826] netlink: 'syz.0.475': attribute type 3 has an invalid length. [ 152.968188][ T7685] ip6_vti0 speed is unknown, defaulting to 1000 [ 153.025646][ T7827] sch_tbf: burst 1447 is lower than device macvtap0 mtu (1514) ! [ 153.165754][ T7833] netlink: 28 bytes leftover after parsing attributes in process `syz.0.478'. [ 153.238195][ T7837] netlink: 'syz.0.478': attribute type 13 has an invalid length. [ 153.262178][ T7837] netlink: 'syz.0.478': attribute type 17 has an invalid length. [ 153.310980][ T7837] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 153.664608][ T7833] ip6_vti0 speed is unknown, defaulting to 1000 [ 153.691879][ T7832] sit0: entered promiscuous mode [ 153.714448][ T7832] netlink: 'syz.3.477': attribute type 1 has an invalid length. [ 154.021996][ T7830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.141410][ T7871] netlink: 'syz.1.489': attribute type 1 has an invalid length. [ 154.153402][ T7868] tipc: Enabled bearer , priority 0 [ 154.165153][ T7868] syzkaller0: entered promiscuous mode [ 154.180934][ T7868] syzkaller0: entered allmulticast mode [ 154.204933][ T7868] tipc: Resetting bearer [ 154.224534][ T7866] tipc: Resetting bearer [ 154.271291][ T7866] tipc: Disabling bearer [ 154.575034][ T7885] netlink: 'syz.2.492': attribute type 11 has an invalid length. [ 154.859099][ T7897] netlink: 'syz.2.495': attribute type 6 has an invalid length. [ 154.872115][ T7898] tipc: Can't bind to reserved service type 1 [ 154.930862][ T7897] __nla_validate_parse: 2 callbacks suppressed [ 154.930883][ T7897] netlink: 12 bytes leftover after parsing attributes in process `syz.2.495'. [ 155.326953][ T7924] netlink: 68 bytes leftover after parsing attributes in process `syz.2.503'. [ 155.410104][ T7930] netlink: 40 bytes leftover after parsing attributes in process `syz.4.505'. [ 155.519547][ T7932] netlink: 'syz.4.505': attribute type 13 has an invalid length. [ 155.531225][ T7932] netlink: 'syz.4.505': attribute type 17 has an invalid length. [ 155.666204][ T7932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.678816][ T7932] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.706185][ T7932] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 155.802812][ T7930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.865124][ T7938] ip6_vti0 speed is unknown, defaulting to 1000 [ 155.871559][ T7932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.152204][ T7947] netlink: 36 bytes leftover after parsing attributes in process `syz.1.508'. [ 156.306809][ T7964] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 156.355828][ T7966] tipc: Enabling of bearer rejected, failed to enable media [ 156.379779][ T7966] netlink: 'syz.1.513': attribute type 1 has an invalid length. [ 156.481070][ T7964] ip6_vti0 speed is unknown, defaulting to 1000 [ 156.525597][ T7966] netlink: 20 bytes leftover after parsing attributes in process `syz.1.513'. [ 156.656614][ T7977] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 156.669865][ T7977] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 156.751489][ T7966] bond1: (slave bridge2): Enslaving as an active interface with a down link [ 156.793640][ T7982] bond1: (slave bridge3): Enslaving as an active interface with a down link [ 156.815476][ T7983] macvlan2: entered promiscuous mode [ 156.821036][ T7983] macvlan2: entered allmulticast mode [ 156.827439][ T7983] bond1: entered promiscuous mode [ 156.833317][ T7983] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 156.842555][ T7983] bond1: left promiscuous mode [ 156.903441][ T7978] ip6_vti0 speed is unknown, defaulting to 1000 [ 157.000550][ T7985] netlink: 28 bytes leftover after parsing attributes in process `syz.1.516'. [ 157.010568][ T7985] netlink: 28 bytes leftover after parsing attributes in process `syz.1.516'. [ 157.043601][ T7985] tipc: Enabling of bearer rejected, already enabled [ 157.068452][ T7985] netlink: 'syz.1.516': attribute type 11 has an invalid length. [ 157.215047][ T7988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.517'. [ 157.325074][ T7995] netlink: 52 bytes leftover after parsing attributes in process `syz.3.518'. [ 157.336697][ T7988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.517'. [ 157.883120][ T8017] netlink: 'syz.0.524': attribute type 33 has an invalid length. [ 157.950455][ T8017] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 158.603512][ T8038] ip6_vti0 speed is unknown, defaulting to 1000 [ 158.901229][ T8049] netlink: get zone limit has 4 unknown bytes [ 159.007043][ T8054] block nbd0: not configured, cannot reconfigure [ 159.181851][ T8051] bond2: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 159.225299][ T8051] bond2 (unregistering): Released all slaves [ 159.681714][ T8082] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 159.751663][ T8075] bridge_slave_1: left allmulticast mode [ 159.757619][ T8075] bridge_slave_1: left promiscuous mode [ 159.763610][ T8075] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.776624][ T8075] bridge_slave_0: left allmulticast mode [ 159.782445][ T8075] bridge_slave_0: left promiscuous mode [ 159.788753][ T8075] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.031716][ T8064] syzkaller1: entered promiscuous mode [ 160.048124][ T8064] syzkaller1: entered allmulticast mode [ 160.209827][ T8108] netlink: 'syz.3.543': attribute type 2 has an invalid length. [ 160.217909][ T8108] __nla_validate_parse: 9 callbacks suppressed [ 160.217927][ T8108] netlink: 156 bytes leftover after parsing attributes in process `syz.3.543'. [ 160.253511][ T8098] netlink: 64 bytes leftover after parsing attributes in process `syz.0.541'. [ 160.300305][ T8098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.541'. [ 160.373115][ T8114] ip6_vti0 speed is unknown, defaulting to 1000 [ 160.408684][ T8116] netlink: 48 bytes leftover after parsing attributes in process `syz.1.544'. [ 160.709351][ T8120] ip6_vti0 speed is unknown, defaulting to 1000 [ 160.962875][ T8131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.550'. [ 161.412142][ T8155] netlink: 52 bytes leftover after parsing attributes in process `syz.1.555'. [ 161.591774][ T8152] netlink: 284 bytes leftover after parsing attributes in process `syz.1.555'. [ 161.840203][ T8161] bond2: invalid ARP target 0.0.0.0 specified for addition [ 161.850343][ T8161] bond2: option arp_ip_target: invalid value (0) [ 161.861126][ T8161] bond2 (unregistering): Released all slaves [ 161.882423][ T8169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.558'. [ 161.895783][ T8154] ip6_vti0 speed is unknown, defaulting to 1000 [ 162.044191][ T8177] netlink: 28 bytes leftover after parsing attributes in process `syz.3.559'. [ 162.788669][ T8186] netlink: 4456 bytes leftover after parsing attributes in process `syz.4.563'. [ 163.022425][ T8203] C: renamed from lo [ 163.032833][ T8203] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 163.087614][ T8204] bridge0: entered promiscuous mode [ 163.172777][ T8212] netlink: 'syz.3.570': attribute type 11 has an invalid length. [ 163.523140][ T8232] vcan0: tx drop: invalid sa for name 0x4000000000000000 [ 163.634368][ T8244] x_tables: unsorted underflow at hook 2 [ 163.808006][ T8248] ip6_vti0 speed is unknown, defaulting to 1000 [ 164.927097][ T8299] netlink: 'syz.4.589': attribute type 13 has an invalid length. [ 164.935292][ T8299] netlink: 'syz.4.589': attribute type 17 has an invalid length. [ 165.353213][ T8264] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.468075][ T8264] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 165.501144][ T8264] bridge1: left allmulticast mode [ 165.523624][ T8264] bridge0: left promiscuous mode [ 165.581157][ T8299] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 165.598664][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.618756][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.658196][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.674116][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.695551][ T8271] ip6_vti0 speed is unknown, defaulting to 1000 [ 165.892565][ T8311] netlink: 'syz.2.591': attribute type 3 has an invalid length. [ 165.922784][ T8311] netlink: 'syz.2.591': attribute type 3 has an invalid length. [ 166.502146][ T8331] __nla_validate_parse: 7 callbacks suppressed [ 166.502165][ T8331] netlink: 32 bytes leftover after parsing attributes in process `syz.2.594'. [ 166.524348][ T8331] netem: unknown loss type 13 [ 166.539622][ T8331] netem: change failed [ 166.961199][ T8340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.597'. [ 167.004189][ T8340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.597'. [ 167.152545][ T8346] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 167.422326][ T8363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.603'. [ 167.465468][ T8366] xt_CT: You must specify a L4 protocol and not use inversions on it [ 167.570895][ T8372] IPVS: set_ctl: invalid protocol: 229 0.0.0.0:20001 [ 167.611193][ T8372] netlink: 12 bytes leftover after parsing attributes in process `syz.4.605'. [ 167.634687][ T8378] ip6_vti0 speed is unknown, defaulting to 1000 [ 167.928403][ T8391] netlink: 12 bytes leftover after parsing attributes in process `syz.3.607'. [ 167.967030][ T8388] ip6_vti0 speed is unknown, defaulting to 1000 [ 168.520148][ T8403] netlink: 60 bytes leftover after parsing attributes in process `syz.1.610'. [ 168.578097][ T8403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.610'. [ 168.615337][ T8407] netlink: 'syz.4.611': attribute type 3 has an invalid length. [ 168.628568][ T8403] netlink: 32 bytes leftover after parsing attributes in process `syz.1.610'. [ 168.665452][ T8407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.611'. [ 168.934435][ T8419] netlink: 'syz.1.614': attribute type 4 has an invalid length. [ 168.942320][ T8419] netlink: 'syz.1.614': attribute type 1 has an invalid length. [ 169.723253][ T8453] ip6_vti0 speed is unknown, defaulting to 1000 [ 171.856338][ T6782] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.880796][ T6782] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.239472][ T8562] bond2: entered promiscuous mode [ 172.252950][ T8562] 8021q: adding VLAN 0 to HW filter on device bond2 [ 172.253044][ T8571] Cannot find set identified by id 65534 to match [ 172.483187][ T8584] __nla_validate_parse: 9 callbacks suppressed [ 172.483209][ T8584] netlink: 76 bytes leftover after parsing attributes in process `syz.1.645'. [ 172.563799][ T8584] netlink: 40 bytes leftover after parsing attributes in process `syz.1.645'. [ 172.574148][ T8584] netlink: 40 bytes leftover after parsing attributes in process `syz.1.645'. [ 172.817322][ T8598] netlink: 4 bytes leftover after parsing attributes in process `syz.4.648'. [ 172.876930][ T8600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.648'. [ 172.979799][ T8604] netlink: 100 bytes leftover after parsing attributes in process `syz.4.648'. [ 173.022747][ T8604] netlink: 100 bytes leftover after parsing attributes in process `syz.4.648'. [ 173.071874][ T8600] netlink: 24 bytes leftover after parsing attributes in process `syz.4.648'. [ 173.145711][ T8617] netlink: 28 bytes leftover after parsing attributes in process `syz.0.652'. [ 173.525318][ T8639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.659'. [ 173.594458][ T8639] veth1_to_hsr: entered promiscuous mode [ 173.600399][ T8639] macvtap1: entered promiscuous mode [ 173.614481][ T8639] macvtap1: entered allmulticast mode [ 173.631171][ T8639] veth1_to_hsr: entered allmulticast mode [ 173.965045][ T8662] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 174.471691][ T8699] netlink: 'syz.1.671': attribute type 1 has an invalid length. [ 174.595985][ T8699] 8021q: adding VLAN 0 to HW filter on device bond2 [ 174.718769][ T8706] 8021q: adding VLAN 0 to HW filter on device bond2 [ 174.748462][ T8706] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 174.749394][ T8718] netlink: 'syz.4.674': attribute type 20 has an invalid length. [ 174.768219][ T8706] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 174.825828][ T8710] veth5: entered promiscuous mode [ 174.836845][ T8710] bond2: (slave veth5): Enslaving as an active interface with a down link [ 174.857534][ T8714] vlan2: entered promiscuous mode [ 174.862724][ T8714] geneve1: entered promiscuous mode [ 174.868377][ T8714] vlan2: entered allmulticast mode [ 174.873710][ T8714] geneve1: entered allmulticast mode [ 174.882024][ T6797] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.894375][ T6797] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.126516][ T8740] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 175.191621][ T8739] ip6_vti0 speed is unknown, defaulting to 1000 [ 175.729395][ T8766] netlink: 'syz.3.686': attribute type 1 has an invalid length. [ 175.890328][ T8765] ip6_vti0 speed is unknown, defaulting to 1000 [ 176.104455][ T8782] netlink: 'syz.3.692': attribute type 1 has an invalid length. [ 176.142440][ T8782] 8021q: adding VLAN 0 to HW filter on device bond2 [ 176.172863][ T8782] bond2: (slave dummy0): making interface the new active one [ 176.186057][ T8782] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 176.773498][ T8808] bond3: option arp_interval: invalid value (18446744073488075330) [ 176.781621][ T8808] bond3: option arp_interval: allowed values 0 - 2147483647 [ 176.819944][ T8808] bond3 (unregistering): Released all slaves [ 177.258264][ T8826] ip6_vti0 speed is unknown, defaulting to 1000 [ 177.747858][ T8838] pimreg1: tun_chr_ioctl cmd 1074025677 [ 177.754680][ T8838] pimreg1: linktype set to 776 [ 177.770837][ T8838] __nla_validate_parse: 5 callbacks suppressed [ 177.770859][ T8838] netlink: 16 bytes leftover after parsing attributes in process `syz.0.705'. [ 177.804316][ T8838] netlink: 16 bytes leftover after parsing attributes in process `syz.0.705'. [ 177.822414][ T8841] netlink: 'syz.0.705': attribute type 7 has an invalid length. [ 177.853131][ T8838] ip6gretap2: entered promiscuous mode [ 177.861993][ T8838] ip6gretap2: entered allmulticast mode [ 178.115432][ T8843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.706'. [ 178.172309][ T8843] netlink: 36 bytes leftover after parsing attributes in process `syz.0.706'. [ 178.430098][ T8849] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.482501][ T8850] netlink: 'syz.1.707': attribute type 39 has an invalid length. [ 178.708643][ T8856] openvswitch: netlink: Message has 16 unknown bytes. [ 178.879241][ T8861] wg1 speed is unknown, defaulting to 1000 [ 178.957479][ T8861] wg1 speed is unknown, defaulting to 1000 [ 178.984766][ T8861] wg1 speed is unknown, defaulting to 1000 [ 178.997633][ T8861] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 179.018822][ T8861] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 179.115821][ T8861] wg1 speed is unknown, defaulting to 1000 [ 179.129207][ T8861] wg1 speed is unknown, defaulting to 1000 [ 179.137764][ T8861] wg1 speed is unknown, defaulting to 1000 [ 179.156619][ T8861] wg1 speed is unknown, defaulting to 1000 [ 179.165100][ T8861] wg1 speed is unknown, defaulting to 1000 [ 180.499622][ T8912] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 180.778872][ T8926] netlink: 136 bytes leftover after parsing attributes in process `syz.0.728'. [ 180.782541][ T8934] netlink: 16 bytes leftover after parsing attributes in process `syz.4.730'. [ 180.818888][ T8934] sch_fq: defrate 0 ignored. [ 180.825450][ T8926] netlink: 19 bytes leftover after parsing attributes in process `syz.0.728'. [ 180.881842][ T8936] ip6_vti0 speed is unknown, defaulting to 1000 [ 180.957025][ T8940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.731'. [ 180.991582][ T8943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.733'. [ 181.045734][ T8946] netlink: 'syz.4.733': attribute type 1 has an invalid length. [ 181.110401][ T8943] : entered promiscuous mode [ 181.148427][ T8946] bond3: entered promiscuous mode [ 181.156546][ T8951] netlink: 24 bytes leftover after parsing attributes in process `syz.0.734'. [ 181.157873][ T8946] 8021q: adding VLAN 0 to HW filter on device bond3 [ 181.513902][ T8966] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 181.555148][ T8966] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 181.637654][ T8936] wg1 speed is unknown, defaulting to 1000 [ 182.337059][ T982] IPVS: starting estimator thread 0... [ 182.424218][ T9002] IPVS: using max 27 ests per chain, 64800 per kthread [ 182.464888][ T9009] ip6_vti0 speed is unknown, defaulting to 1000 [ 182.719174][ T9009] wg1 speed is unknown, defaulting to 1000 [ 182.789819][ T9016] syzkaller0: entered promiscuous mode [ 182.819429][ T9016] syzkaller0: entered allmulticast mode [ 182.897878][ T9019] __nla_validate_parse: 4 callbacks suppressed [ 182.897898][ T9019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.753'. [ 183.139224][ T9036] trusted_key: syz.4.757 sent an empty control message without MSG_MORE. [ 183.186387][ T9034] netlink: 'syz.4.757': attribute type 1 has an invalid length. [ 183.212970][ T9034] netlink: 'syz.4.757': attribute type 2 has an invalid length. [ 183.226457][ T9039] netlink: 'syz.0.758': attribute type 3 has an invalid length. [ 183.234380][ T9039] netlink: 3 bytes leftover after parsing attributes in process `syz.0.758'. [ 183.243502][ T9036] netlink: 'syz.4.757': attribute type 1 has an invalid length. [ 183.263872][ T9036] netlink: 'syz.4.757': attribute type 2 has an invalid length. [ 183.453571][ T9043] ieee802154 phy0 wpan0: encryption failed: -22 [ 183.524394][ T9043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.760'. [ 183.563641][ T9043] tipc: New replicast peer: 255.255.255.255 [ 183.574432][ T9043] tipc: Enabled bearer , priority 10 [ 183.582227][ T9043] netlink: 'syz.0.760': attribute type 1 has an invalid length. [ 183.589983][ T9043] netlink: 224 bytes leftover after parsing attributes in process `syz.0.760'. [ 183.820494][ T9050] bond1: option lacp_rate: invalid value (255) [ 183.849962][ T9050] bond1 (unregistering): Released all slaves [ 183.855752][ T9064] netlink: 24 bytes leftover after parsing attributes in process `syz.3.765'. [ 184.450812][ T9085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.770'. [ 184.678565][ T9093] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 184.853359][ T982] tipc: Node number set to 186257324 [ 184.887099][ T9093] bond0: (slave dummy0): Releasing backup interface [ 184.914660][ T9093] bridge_slave_0: left allmulticast mode [ 184.920393][ T9093] bridge_slave_0: left promiscuous mode [ 184.936213][ T9093] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.952581][ T9093] bond0: (slave bond_slave_0): Releasing backup interface [ 184.962795][ T9093] bond0: (slave bond_slave_1): Releasing backup interface [ 184.977053][ T9093] team0: Port device team_slave_0 removed [ 184.987695][ T9102] netlink: 'syz.4.772': attribute type 10 has an invalid length. [ 184.996776][ T9093] team0: Port device team_slave_1 removed [ 185.004655][ T9093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.017160][ T9093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.027030][ T9093] bond1: (slave vcan1): Releasing backup interface [ 185.057136][ T9102] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 185.076865][ T9102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.089549][ T9102] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 185.105089][ T9094] syzkaller0: entered promiscuous mode [ 185.111049][ T9094] syzkaller0: entered allmulticast mode [ 185.161871][ T9099] ip6_vti0 speed is unknown, defaulting to 1000 [ 185.162743][ T9104] netlink: 28 bytes leftover after parsing attributes in process `syz.0.775'. [ 185.468684][ T9111] geneve2: entered promiscuous mode [ 185.667204][ T9099] wg1 speed is unknown, defaulting to 1000 [ 185.667223][ T6791] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.699161][ T9127] netlink: 'syz.0.780': attribute type 16 has an invalid length. [ 185.789308][ T9135] netlink: 884 bytes leftover after parsing attributes in process `syz.2.782'. [ 186.025443][ T9139] netlink: 12 bytes leftover after parsing attributes in process `syz.2.784'. [ 187.654109][ T6791] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.670757][ T6791] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.690651][ T6791] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.738999][ T9139] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 187.745075][ T9140] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 187.861617][ T9158] netlink: 'syz.4.788': attribute type 10 has an invalid length. [ 187.874385][ T9155] netlink: 'syz.4.788': attribute type 10 has an invalid length. [ 187.883119][ T9158] netlink: 40 bytes leftover after parsing attributes in process `syz.4.788'. [ 187.907592][ T9155] team0: Port device geneve0 added [ 188.156701][ T9168] bond3: option arp_validate: invalid value (18446744073491447809) [ 188.190100][ T9185] netlink: 'syz.4.795': attribute type 1 has an invalid length. [ 188.209096][ T9168] bond3 (unregistering): Released all slaves [ 188.353121][ T9185] 8021q: adding VLAN 0 to HW filter on device bond4 [ 188.358889][ T9192] __nla_validate_parse: 1 callbacks suppressed [ 188.358911][ T9192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.795'. [ 188.388528][ T9190] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 188.400815][ T9190] bond4: (slave batadv1): making interface the new active one [ 188.410341][ T9190] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 188.567370][ T9192] bond4 (unregistering): (slave batadv1): Releasing active interface [ 188.578098][ T9192] bond4 (unregistering): Released all slaves [ 188.602334][ T9198] netlink: 'syz.3.796': attribute type 3 has an invalid length. [ 188.624303][ T9188] ip6_vti0 speed is unknown, defaulting to 1000 [ 188.934318][ T9188] wg1 speed is unknown, defaulting to 1000 [ 189.147192][ T9225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.802'. [ 189.166365][ T9225] netlink: 20 bytes leftover after parsing attributes in process `syz.1.802'. [ 189.204903][ T9225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.802'. [ 189.216615][ T9225] netlink: 20 bytes leftover after parsing attributes in process `syz.1.802'. [ 189.262126][ T6791] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.271914][ T6791] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.293698][ T6791] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.351969][ T9226] ip6_vti0 speed is unknown, defaulting to 1000 [ 189.360122][ T6791] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.556712][ T9240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.807'. [ 189.588639][ T9226] wg1 speed is unknown, defaulting to 1000 [ 189.594476][ T9242] sctp: [Deprecated]: syz.1.808 (pid 9242) Use of int in max_burst socket option deprecated. [ 189.594476][ T9242] Use struct sctp_assoc_value instead [ 189.853138][ T9246] netlink: 40 bytes leftover after parsing attributes in process `syz.1.809'. [ 189.902084][ T9246] netlink: 36 bytes leftover after parsing attributes in process `syz.1.809'. [ 189.996844][ T9247] bridge5: entered allmulticast mode [ 190.177592][ T9262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.814'. [ 190.239275][ T9258] ip6_vti0 speed is unknown, defaulting to 1000 [ 190.271897][ T9256] netlink: 68 bytes leftover after parsing attributes in process `syz.3.812'. [ 190.845603][ T9258] wg1 speed is unknown, defaulting to 1000 [ 191.048983][ T9276] ip6_vti0 speed is unknown, defaulting to 1000 [ 191.263746][ T9287] bond3: option packets_per_slave: invalid value (1048582) [ 191.322718][ T9287] bond3: option packets_per_slave: allowed values 0 - 65535 [ 191.353284][ T9287] bond3 (unregistering): Released all slaves [ 191.490814][ T9304] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 191.804388][ T9301] pimreg: entered allmulticast mode [ 191.814853][ T9305] macvlan0: entered promiscuous mode [ 191.820669][ T9305] netlink: 'syz.2.823': attribute type 1 has an invalid length. [ 191.829455][ T9305] netlink: 'syz.2.823': attribute type 2 has an invalid length. [ 191.839024][ T9276] wg1 speed is unknown, defaulting to 1000 [ 191.839249][ T9301] pimreg: left allmulticast mode [ 192.723531][ T9345] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 192.762219][ T9345] bond2: (slave dummy0): Releasing active interface [ 192.786755][ T9345] bridge_slave_0: left allmulticast mode [ 192.793428][ T9345] bridge_slave_0: left promiscuous mode [ 192.799761][ T9345] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.832996][ T9345] bridge_slave_1: left allmulticast mode [ 192.845976][ T9345] bridge_slave_1: left promiscuous mode [ 192.852189][ T9345] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.879556][ T9345] bond0: (slave bond_slave_0): Releasing backup interface [ 192.906224][ T9345] bond0: (slave bond_slave_1): Releasing backup interface [ 192.910497][ T9359] netlink: 'syz.3.836': attribute type 10 has an invalid length. [ 192.951645][ T9345] team0: Port device team_slave_0 removed [ 192.997349][ T9345] team0: Port device team_slave_1 removed [ 193.016017][ T9345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.033876][ T9345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.052141][ T9345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.063953][ T9345] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.076179][ T9345] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 193.121286][ T9359] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 193.141654][ T9359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.160769][ T9359] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 193.528813][ T6791] tipc: Subscription rejected, illegal request [ 193.556708][ T9379] __nla_validate_parse: 4 callbacks suppressed [ 193.556730][ T9379] netlink: 96 bytes leftover after parsing attributes in process `syz.3.845'. [ 193.688462][ T9389] ================================================================== [ 193.696592][ T9389] BUG: KASAN: slab-out-of-bounds in ieee80211_add_virtual_monitor+0xa52/0xd00 [ 193.705509][ T9389] Read of size 1 at addr ffff888057a1bd50 by task syz.4.847/9389 [ 193.713259][ T9389] [ 193.715639][ T9389] CPU: 0 UID: 0 PID: 9389 Comm: syz.4.847 Not tainted syzkaller #0 PREEMPT(full) [ 193.715667][ T9389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 193.715680][ T9389] Call Trace: [ 193.715689][ T9389] [ 193.715698][ T9389] dump_stack_lvl+0x189/0x250 [ 193.715734][ T9389] ? __virt_addr_valid+0x1c8/0x5c0 [ 193.715762][ T9389] ? rcu_is_watching+0x15/0xb0 [ 193.715785][ T9389] ? __kasan_check_byte+0x12/0x40 [ 193.715805][ T9389] ? __pfx_dump_stack_lvl+0x10/0x10 [ 193.715831][ T9389] ? rcu_is_watching+0x15/0xb0 [ 193.715854][ T9389] ? lock_release+0x4b/0x3e0 [ 193.715877][ T9389] ? __virt_addr_valid+0x1c8/0x5c0 [ 193.715904][ T9389] ? __virt_addr_valid+0x4a5/0x5c0 [ 193.715934][ T9389] print_report+0xca/0x240 [ 193.715958][ T9389] ? ieee80211_add_virtual_monitor+0xa52/0xd00 [ 193.715989][ T9389] kasan_report+0x118/0x150 [ 193.716010][ T9389] ? ieee80211_add_virtual_monitor+0xa52/0xd00 [ 193.716046][ T9389] ieee80211_add_virtual_monitor+0xa52/0xd00 [ 193.716082][ T9389] ieee80211_do_stop+0x1786/0x1f60 [ 193.716113][ T9389] ? __lock_acquire+0xab9/0xd20 [ 193.716140][ T9389] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 193.716169][ T9389] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 193.716204][ T9389] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 193.716235][ T9389] ? lockdep_hardirqs_on+0x9c/0x150 [ 193.716260][ T9389] ? wiphy_work_cancel+0x1eb/0x3c0 [ 193.716282][ T9389] ieee80211_stop+0x1b1/0x240 [ 193.716300][ T9389] ? __pfx_ieee80211_stop+0x10/0x10 [ 193.716327][ T9389] __dev_close_many+0x364/0x6f0 [ 193.716363][ T9389] ? __pfx___dev_close_many+0x10/0x10 [ 193.716394][ T9389] ? __mutex_trylock_common+0x153/0x260 [ 193.716424][ T9389] netif_close_many+0x225/0x410 [ 193.716458][ T9389] ? __pfx_netif_close_many+0x10/0x10 [ 193.716487][ T9389] ? __mutex_lock+0x335/0x1350 [ 193.716506][ T9389] ? __lock_acquire+0xab9/0xd20 [ 193.716531][ T9389] netif_close+0x158/0x210 [ 193.716560][ T9389] ? __pfx_netif_close+0x10/0x10 [ 193.716592][ T9389] ? __pfx___mutex_lock+0x10/0x10 [ 193.716616][ T9389] dev_close+0x10a/0x220 [ 193.716639][ T9389] cfg80211_shutdown_all_interfaces+0xd4/0x220 [ 193.716672][ T9389] ? __pfx_cfg80211_rfkill_set_block+0x10/0x10 [ 193.716704][ T9389] cfg80211_rfkill_set_block+0x2d/0x50 [ 193.716734][ T9389] rfkill_set_block+0x1d2/0x440 [ 193.716757][ T9389] rfkill_fop_write+0x44b/0x570 [ 193.716782][ T9389] ? __pfx_rfkill_fop_write+0x10/0x10 [ 193.716804][ T9389] ? security_kernfs_init_security+0x280/0x290 [ 193.716831][ T9389] ? rw_verify_area+0x255/0x4d0 [ 193.716857][ T9389] ? __lock_acquire+0xab9/0xd20 [ 193.716875][ T9389] ? __pfx_rfkill_fop_write+0x10/0x10 [ 193.716899][ T9389] vfs_write+0x27e/0xb30 [ 193.716933][ T9389] ? __pfx_vfs_write+0x10/0x10 [ 193.716962][ T9389] ? __fget_files+0x2a/0x420 [ 193.716983][ T9389] ? __fget_files+0x2a/0x420 [ 193.717001][ T9389] ? __fget_files+0x3a0/0x420 [ 193.717018][ T9389] ? __fget_files+0x2a/0x420 [ 193.717042][ T9389] ksys_write+0x145/0x250 [ 193.717072][ T9389] ? __pfx_ksys_write+0x10/0x10 [ 193.717102][ T9389] ? do_syscall_64+0xbe/0xfa0 [ 193.717124][ T9389] do_syscall_64+0xfa/0xfa0 [ 193.717143][ T9389] ? lockdep_hardirqs_on+0x9c/0x150 [ 193.717162][ T9389] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.717182][ T9389] ? clear_bhb_loop+0x60/0xb0 [ 193.717204][ T9389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.717224][ T9389] RIP: 0033:0x7fc8d2d8f6c9 [ 193.717254][ T9389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.717271][ T9389] RSP: 002b:00007fc8d3c58038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 193.717300][ T9389] RAX: ffffffffffffffda RBX: 00007fc8d2fe5fa0 RCX: 00007fc8d2d8f6c9 [ 193.717321][ T9389] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 193.717334][ T9389] RBP: 00007fc8d2e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 193.717347][ T9389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.717358][ T9389] R13: 00007fc8d2fe6038 R14: 00007fc8d2fe5fa0 R15: 00007fff7699b4a8 [ 193.717384][ T9389] [ 193.717391][ T9389] [ 194.114850][ T9389] The buggy address belongs to the physical page: [ 194.121377][ T9389] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57a18 [ 194.130143][ T9389] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 194.138642][ T9389] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 194.146201][ T9389] page_type: f8(unknown) [ 194.150450][ T9389] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 194.159036][ T9389] raw: 0000000000000000 0000000000000000 00000000f8000000 0000000000000000 [ 194.167624][ T9389] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 194.176302][ T9389] head: 0000000000000000 0000000000000000 00000000f8000000 0000000000000000 [ 194.184983][ T9389] head: 00fff00000000002 ffffea00015e8601 00000000ffffffff 00000000ffffffff [ 194.193652][ T9389] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 194.202391][ T9389] page dumped because: kasan: bad access detected [ 194.208818][ T9389] page_owner tracks the page as allocated [ 194.214528][ T9389] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x446dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP), pid 5839, tgid 5839 (syz-executor), ts 99374543199, free_ts 30448607371 [ 194.236153][ T9389] post_alloc_hook+0x240/0x2a0 [ 194.240950][ T9389] get_page_from_freelist+0x2365/0x2440 [ 194.246504][ T9389] __alloc_frozen_pages_noprof+0x181/0x370 [ 194.252325][ T9389] alloc_pages_mpol+0x232/0x4a0 [ 194.257176][ T9389] ___kmalloc_large_node+0x5f/0x1b0 [ 194.262384][ T9389] __kmalloc_large_node_noprof+0x18/0x90 [ 194.268059][ T9389] __kvmalloc_node_noprof+0x6e/0x910 [ 194.273444][ T9389] alloc_netdev_mqs+0xa6/0x11b0 [ 194.278307][ T9389] ieee80211_if_add+0x46c/0x1390 [ 194.283343][ T9389] ieee80211_register_hw+0x35a5/0x40d0 [ 194.288983][ T9389] mac80211_hwsim_new_radio+0x2f9a/0x5260 [ 194.294716][ T9389] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 194.299828][ T9389] genl_family_rcv_msg_doit+0x215/0x300 [ 194.305386][ T9389] genl_rcv_msg+0x60e/0x790 [ 194.309898][ T9389] netlink_rcv_skb+0x208/0x470 [ 194.314667][ T9389] genl_rcv+0x28/0x40 [ 194.318658][ T9389] page last free pid 1 tgid 1 stack trace: [ 194.324459][ T9389] __free_frozen_pages+0xbc4/0xd30 [ 194.329579][ T9389] free_contig_range+0x1bd/0x4a0 [ 194.334521][ T9389] destroy_args+0x69/0x660 [ 194.338953][ T9389] debug_vm_pgtable+0x39f/0x3b0 [ 194.343804][ T9389] do_one_initcall+0x236/0x820 [ 194.348579][ T9389] do_initcall_level+0x104/0x190 [ 194.353533][ T9389] do_initcalls+0x59/0xa0 [ 194.357892][ T9389] kernel_init_freeable+0x334/0x4b0 [ 194.363104][ T9389] kernel_init+0x1d/0x1d0 [ 194.367440][ T9389] ret_from_fork+0x4bc/0x870 [ 194.372043][ T9389] ret_from_fork_asm+0x1a/0x30 [ 194.376806][ T9389] [ 194.379129][ T9389] Memory state around the buggy address: [ 194.384768][ T9389] ffff888057a1bc00: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 194.392829][ T9389] ffff888057a1bc80: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 194.400891][ T9389] >ffff888057a1bd00: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 194.408956][ T9389] ^ [ 194.415630][ T9389] ffff888057a1bd80: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 194.423697][ T9389] ffff888057a1be00: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 194.431760][ T9389] ================================================================== [ 194.504137][ T9389] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 194.511432][ T9389] CPU: 1 UID: 0 PID: 9389 Comm: syz.4.847 Not tainted syzkaller #0 PREEMPT(full) [ 194.520666][ T9389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 194.530753][ T9389] Call Trace: [ 194.534068][ T9389] [ 194.537046][ T9389] dump_stack_lvl+0x99/0x250 [ 194.541692][ T9389] ? __asan_memcpy+0x40/0x70 [ 194.546327][ T9389] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.551572][ T9389] ? __pfx__printk+0x10/0x10 [ 194.556205][ T9389] vpanic+0x237/0x6d0 [ 194.560236][ T9389] ? __pfx_vpanic+0x10/0x10 [ 194.564795][ T9389] ? preempt_schedule_common+0x83/0xd0 [ 194.570312][ T9389] ? preempt_schedule+0xae/0xc0 [ 194.575222][ T9389] panic+0xb9/0xc0 [ 194.578994][ T9389] ? __pfx_panic+0x10/0x10 [ 194.583448][ T9389] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 194.589820][ T9389] ? ieee80211_add_virtual_monitor+0xa52/0xd00 [ 194.596000][ T9389] check_panic_on_warn+0x89/0xb0 [ 194.600959][ T9389] ? ieee80211_add_virtual_monitor+0xa52/0xd00 [ 194.607130][ T9389] end_report+0x78/0x160 [ 194.611379][ T9389] kasan_report+0x129/0x150 [ 194.615892][ T9389] ? ieee80211_add_virtual_monitor+0xa52/0xd00 [ 194.622069][ T9389] ieee80211_add_virtual_monitor+0xa52/0xd00 [ 194.628073][ T9389] ieee80211_do_stop+0x1786/0x1f60 [ 194.633206][ T9389] ? __lock_acquire+0xab9/0xd20 [ 194.638077][ T9389] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 194.643469][ T9389] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 194.649065][ T9389] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 194.654995][ T9389] ? lockdep_hardirqs_on+0x9c/0x150 [ 194.660231][ T9389] ? wiphy_work_cancel+0x1eb/0x3c0 [ 194.665366][ T9389] ieee80211_stop+0x1b1/0x240 [ 194.670117][ T9389] ? __pfx_ieee80211_stop+0x10/0x10 [ 194.675334][ T9389] __dev_close_many+0x364/0x6f0 [ 194.680226][ T9389] ? __pfx___dev_close_many+0x10/0x10 [ 194.685634][ T9389] ? __mutex_trylock_common+0x153/0x260 [ 194.691213][ T9389] netif_close_many+0x225/0x410 [ 194.696098][ T9389] ? __pfx_netif_close_many+0x10/0x10 [ 194.701492][ T9389] ? __mutex_lock+0x335/0x1350 [ 194.706266][ T9389] ? __lock_acquire+0xab9/0xd20 [ 194.711129][ T9389] netif_close+0x158/0x210 [ 194.715581][ T9389] ? __pfx_netif_close+0x10/0x10 [ 194.720545][ T9389] ? __pfx___mutex_lock+0x10/0x10 [ 194.725591][ T9389] dev_close+0x10a/0x220 [ 194.729857][ T9389] cfg80211_shutdown_all_interfaces+0xd4/0x220 [ 194.736068][ T9389] ? __pfx_cfg80211_rfkill_set_block+0x10/0x10 [ 194.742254][ T9389] cfg80211_rfkill_set_block+0x2d/0x50 [ 194.747755][ T9389] rfkill_set_block+0x1d2/0x440 [ 194.752620][ T9389] rfkill_fop_write+0x44b/0x570 [ 194.757505][ T9389] ? __pfx_rfkill_fop_write+0x10/0x10 [ 194.762907][ T9389] ? security_kernfs_init_security+0x280/0x290 [ 194.769098][ T9389] ? rw_verify_area+0x255/0x4d0 [ 194.773978][ T9389] ? __lock_acquire+0xab9/0xd20 [ 194.778847][ T9389] ? __pfx_rfkill_fop_write+0x10/0x10 [ 194.784243][ T9389] vfs_write+0x27e/0xb30 [ 194.788520][ T9389] ? __pfx_vfs_write+0x10/0x10 [ 194.793342][ T9389] ? __fget_files+0x2a/0x420 [ 194.797960][ T9389] ? __fget_files+0x2a/0x420 [ 194.802576][ T9389] ? __fget_files+0x3a0/0x420 [ 194.807262][ T9389] ? __fget_files+0x2a/0x420 [ 194.811872][ T9389] ksys_write+0x145/0x250 [ 194.816222][ T9389] ? __pfx_ksys_write+0x10/0x10 [ 194.821098][ T9389] ? do_syscall_64+0xbe/0xfa0 [ 194.825785][ T9389] do_syscall_64+0xfa/0xfa0 [ 194.830295][ T9389] ? lockdep_hardirqs_on+0x9c/0x150 [ 194.835498][ T9389] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.841580][ T9389] ? clear_bhb_loop+0x60/0xb0 [ 194.846269][ T9389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.852178][ T9389] RIP: 0033:0x7fc8d2d8f6c9 [ 194.856607][ T9389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.876224][ T9389] RSP: 002b:00007fc8d3c58038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 194.884653][ T9389] RAX: ffffffffffffffda RBX: 00007fc8d2fe5fa0 RCX: 00007fc8d2d8f6c9 [ 194.892633][ T9389] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 194.900626][ T9389] RBP: 00007fc8d2e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 194.908605][ T9389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.916582][ T9389] R13: 00007fc8d2fe6038 R14: 00007fc8d2fe5fa0 R15: 00007fff7699b4a8 [ 194.924583][ T9389] [ 194.927966][ T9389] Kernel Offset: disabled [ 194.932293][ T9389] Rebooting in 86400 seconds..