last executing test programs: 2m26.7157616s ago: executing program 1 (id=2594): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r1 = epoll_create1(0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000080)=[{0x5, 0xbb, 0x2, 0x4}, {0x0, 0x95, 0x8, 0x10000}, {0xbe, 0xa, 0xa, 0x6}]}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x10000000}) recvmmsg(r0, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001740)=""/4071, 0xfe7}, {&(0x7f00000012c0)=""/165, 0xa5}, {&(0x7f0000001380)=""/127, 0x7f}, {&(0x7f0000001440)=""/131, 0x89}, {&(0x7f0000000000)=""/48, 0x30}], 0x5}, 0x4}], 0x45, 0x12000, 0x0) 2m26.628412894s ago: executing program 1 (id=2596): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES8=0x0, @ANYBLOB="ae1e020000000000"], 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r4, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0x5, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_blackhole]}, 0x38}, 0x1, 0x0, 0x0, 0x4044080}, 0x2000040) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 2m26.52167107s ago: executing program 1 (id=2598): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[@ANYBLOB="cc000000210001000000000004000000ff010000000000000000000000000001fc020000000000000000000000000000000000fffffffd000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ff0200000000000000000000000000010a010100000000000000000000000000fc0100000000000000000000000000010a0101000000004900000000000000003c000000000000000a000a002c0013"], 0xcc}}, 0x0) 2m26.497430366s ago: executing program 1 (id=2599): syz_emit_ethernet(0xe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @local, @void, {@mpls_mc}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000140)={0x10000042, 0x0, 0x2}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10, 0x0}, 0x48004) bind$rds(r0, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="000026d5f47f000000000000010000000000020000000000140000000000000000000000020000000000000000000000140000000000000000000000020000000000000000000000110000000000000000000000010000000000000000000000110000000000000002000000010000000000000000000000000000000000000000000000070000008300000000960000206a77bdd1a004129054e7704a000002"], 0xf}, 0x0) 2m26.378306338s ago: executing program 1 (id=2600): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b28, &(0x7f0000000000)={'wlan0\x00'}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000000c0)={0x38, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x38}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000380)={'ip6tnl0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e23, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x1}}}}}}}, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r5) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_int(r7, &(0x7f00000005c0)='memory.max\x00', 0x2, 0x0) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r1, 0x300, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1c}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x57}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3f}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4005001}, 0x55) r8 = accept4$inet(r7, &(0x7f0000000240)={0x2, 0x0, @local}, &(0x7f0000000600)=0x10, 0x800) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r8}, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0700000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000e000000000000"], 0x48) r9 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r9, &(0x7f0000000540)=[{&(0x7f0000001680)='0', 0x1}, {&(0x7f00000007c0)="89c718f606d7", 0x6}], 0x2) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x20, 0x301}, 0x1c}}, 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000500)) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) syz_emit_ethernet(0x6e, &(0x7f0000000140)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0xff, @loopback, @loopback, [], "1e520b4c951ee12e"}}}}}}}, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r12, @ANYBLOB="0200e60a0a000200aa"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) 2m26.354370029s ago: executing program 1 (id=2601): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, 0x0) (async) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') unshare(0x6a040000) (async) unshare(0x6a040000) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x80003, 0x0) (async) r2 = socket(0x10, 0x80003, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "000000000f000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) unshare(0x6020400) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26, 0x0, 0x2}, 0x28) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_buf(r5, 0x0, 0x4, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) (async) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f00000006c0)=""/245, 0xf5}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') (async) r8 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="dc187267a7c94bbd401d316ded4d00000000000000003104000008000300", @ANYRES32=r7, @ANYBLOB="0800db00", @ANYRES32=r8, @ANYBLOB], 0x24}}, 0x0) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(r9, 0x1, 0xd, 0x0, 0x0) connect$bt_l2cap(r9, 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000080)={@loopback={0xff00000000000000, 0x777fe6a4b23f}, 0x0, 0x0, 0xff, 0x12, 0x9, 0x24, 0x5}, 0x20) 2m25.709711662s ago: executing program 32 (id=2338): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="f07ca2a5ddef2d495ba3c21a71e6da3785230a40f3a5dfedbc1ec673e7334f395602b4da2aa2612d9bb0601c6a07014f12b5d7fcb2bf9321a7720d5d35edc88f5d6efa0a01b86e07ba3951267ec41fd398895774152bbf131785011d5e329f623e4a54cab4978df5fff95c923dad73bbae58", @ANYRES32=r0, @ANYRES32=r0], 0x48) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000b40)={'dummy0\x00'}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) shutdown(r3, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000080)=0x59cc, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1200000008000000080000000080000000000000", @ANYRES16=r0, @ANYBLOB="0000000000000000000000000000000000000000688158bb77c17055e0780c766aadb6d2ffbac2100ae3e4", @ANYRES32=0x0, @ANYRES32], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095", @ANYRES64, @ANYRES8=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20fe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r5, @ANYBLOB="d393ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000010000000200000000"], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r1, 0xfffffdea, &(0x7f0000000540)}, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYRESHEX=0x0, @ANYRES32=0x0, @ANYBLOB="8021000000800400140003006e657464657673696d3000000000cfe41a3977fa0e7b8678c38eecdbc3e2f309a2996ac63a3283d47b1e0b30b2d3a06dcf7b8012af069b8c3940775822a53b8d766a9bd54f82bc65ae1b691392887bc83a80"], 0x4c}, 0x1, 0x0, 0x0, 0x24048044}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a30000000000900010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c0001800a00010071756575650000001c000280060002400ffe009b06000140faff"], 0xcc}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x2c, 0x20, 0x301, 0x0, 0x25dfdbfb, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_FLOW={0x8}]}, 0x2c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)={0x28, 0x1404, 0x1, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044814}, 0x8044) r10 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r10, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendmsg$inet(r10, &(0x7f0000000040)={&(0x7f0000000140)={0x2, 0xffff, @private=0xa010102}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)="08001efdff00f180", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x400c880) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x20, r11, 0xe985e4df3848afb5, 0x20, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x20}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 2m21.151202071s ago: executing program 33 (id=2424): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$inet_smc(0x2b, 0x1, 0x0) (async) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt(r4, 0xfffffffd, 0x6, &(0x7f0000000080)=""/3, &(0x7f0000000040)=0x3) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x3}, {0xffff, 0xffff}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x20004000) sendmsg$tipc(r1, &(0x7f00000004c0)={&(0x7f00000002c0)=@name={0x1e, 0x2, 0x7fbfe83c88943735, {{0x1, 0x4}, 0x2}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000300)="25c65c7fda5bd3b5c77320a8344b051aa4df902650c199a0b86d8b8f954a0c3d5ba23ee004e0d4c7c8d5e9e69d8dfc56fefabcd4120eee3b98dbbe2995c94ce2eac3415288f3ff49690e012860477e6a9f164975bd0eab78deab708015f470598494f2ac726016cfc0", 0x69}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000000400)="a19da5a04e57932fcf8af0968586ecf63260df94baa3a2871993a9f83400418d73b770177801084ee48c30be4f3adfc63fc1c7d8787068fa6eacc4fcb4426ac7c6e6c3bdf5d1e810c3cadc89e8f2273063ff5f424d9cbe74feb96db690c5b07e3ffbe37e", 0x64}], 0x3, &(0x7f0000000580)="0cbd7bef1bcf4a286a6ede8e40dd7018e6262dc9b097f794ea13391234f2484bdbd22d9e53ae42f9f1eeb0a0d50e948b352f9c8fa0b908501bd1ab91c6b56ecedeba25796706d252cd77a74801efc51c2fb1db2b01d805a4b26ee08f26851fb93c0b89326b48fdf9ba3c94483c005a7f7a160e315fe3ff0a61f380d85a63443e9bfea9be662c", 0x86, 0x810}, 0x804) socket(0x10, 0x803, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, 0x0, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x34, &(0x7f0000009000), 0x4) (async) setsockopt$sock_attach_bpf(r6, 0x1, 0x34, &(0x7f0000009000), 0x4) socket$nl_route(0x10, 0x3, 0x0) unshare(0x62040200) (async) unshare(0x62040200) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r7, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000006c0)={@broadcast, @random="8eff80ec0031", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @cipso={0x86, 0x3c, 0x0, [{0x0, 0x10, "9e0cec69d2dae06de9173b3f60c8"}, {0x0, 0x2}, {0x0, 0xb, "3033a70f1c0f9d1bfd"}, {0x0, 0xa, "3aba454f6dc54cc6"}, {0x0, 0xb, "debbd3e9f1fdeefc2c"}, {0x0, 0x4, "91ec"}]}]}}}}}}}, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, 0x0, 0x0) (async) setsockopt$sock_int(r7, 0x1, 0x8, 0x0, 0x0) sendto$inet(r7, &(0x7f0000000580), 0x0, 0x10008095, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}, 0x80) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtfilter={0x4c, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb, 0xc}, {}, {0x2, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff3, 0x4}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x800) (async) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtfilter={0x4c, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb, 0xc}, {}, {0x2, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff3, 0x4}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x800) 2m13.109207989s ago: executing program 34 (id=2567): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000100)={'erspan0\x00', 0x0, 0x20, 0x40, 0x7, 0x4, {{0xc, 0x4, 0x3, 0x1, 0x30, 0x64, 0x0, 0x4, 0x29, 0x0, @remote, @empty, {[@generic={0x82, 0x2}, @cipso={0x86, 0xb, 0xffffffffffffffff, [{0x1, 0x5, "90c955"}]}, @timestamp={0x44, 0x8, 0x59, 0x0, 0x8, [0x8001]}, @ra={0x94, 0x4}]}}}}}) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0x20000008, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x4, 0x3, 0x8, 0x3ff, 0x0, @local, @private0, 0x40, 0xf, 0x1, 0x8}}) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@mpls_newroute={0x78, 0x18, 0x400, 0x70bd2a, 0x25dfdbfe, {0x1c, 0x14, 0x80, 0x6, 0xfc, 0x3, 0xfd, 0xa, 0x3200}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_OIF={0x8, 0x4, r4}, @RTA_MULTIPATH={0xc, 0x9, {0x8, 0x2a, 0x60, r5}}, @RTA_VIA={0x14, 0x12, {0x1a, "1157710e0defa052620e77c68271"}}, @RTA_TTL_PROPAGATE={0x5}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x81}, @RTA_MULTIPATH={0xc, 0x9, {0xa9, 0x30, 0x1, r6}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x9}, @RTA_DST={0x8, 0x1, {0x7ff, 0x0, 0x1}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x4000) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c"], 0x0) (async) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 1m19.444126914s ago: executing program 35 (id=2601): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, 0x0) (async) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') unshare(0x6a040000) (async) unshare(0x6a040000) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x80003, 0x0) (async) r2 = socket(0x10, 0x80003, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "000000000f000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) unshare(0x6020400) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26, 0x0, 0x2}, 0x28) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_buf(r5, 0x0, 0x4, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) (async) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f00000006c0)=""/245, 0xf5}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') (async) r8 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="dc187267a7c94bbd401d316ded4d00000000000000003104000008000300", @ANYRES32=r7, @ANYBLOB="0800db00", @ANYRES32=r8, @ANYBLOB], 0x24}}, 0x0) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(r9, 0x1, 0xd, 0x0, 0x0) connect$bt_l2cap(r9, 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000080)={@loopback={0xff00000000000000, 0x777fe6a4b23f}, 0x0, 0x0, 0xff, 0x12, 0x9, 0x24, 0x5}, 0x20) 1m6.330422544s ago: executing program 7 (id=2859): socket(0x2, 0x400000000002, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) unshare(0x24020400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r1, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB], &(0x7f0000000540)='syzkaller\x00', 0x5, 0xdb, &(0x7f0000003e40)=""/219, 0x41000, 0x74, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 1m6.255887844s ago: executing program 7 (id=2860): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r0, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002004000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa1eaffffff000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 1m6.10201474s ago: executing program 7 (id=2864): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) unshare(0x20000400) ioctl$PPPIOCSMRU1(r0, 0x40047452, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000200000000f", @ANYRES16=r1], 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 1m5.48948064s ago: executing program 7 (id=2878): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) write$cgroup_int(r2, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef) r3 = socket(0x23, 0x5, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x10000008}) write$ppp(r2, &(0x7f0000001fc0)="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", 0x1000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x7, 0x8, 0x6, 0x6, {{0x2e, 0x4, 0x0, 0x8, 0xb8, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@timestamp_addr={0x44, 0x1c, 0x12, 0x1, 0x8, [{@remote, 0x5}, {@empty, 0x6}, {@rand_addr=0x64010102, 0x3}]}, @noop, @cipso={0x86, 0x76, 0x3, [{0x1, 0x4, '${'}, {0x5, 0x8, "805aa9f05bd2"}, {0x5, 0xd, "165d5cf79a24630d72719d"}, {0x5, 0x11, "a53ff54895b9d85065bf7a19cfc9b0"}, {0x7, 0x10, "499a4f97d356591df27f8e182d15"}, {0x5, 0xb, "8f91f87a5406c907e3"}, {0x7, 0xa, "46177238e15cf570"}, {0x5, 0x5, "dbe456"}, {0x2, 0xa, "1eb89f3e5ad8405c"}, {0x6, 0x12, "1d44a09577ccccdf3059929c66a09b1a"}]}, @end, @timestamp_addr={0x44, 0xc, 0xf0, 0x1, 0x0, [{@broadcast}]}, @end]}}}}}) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@private1, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e22, 0x5, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x2, r5, 0xffffffffffffffff}, {0xf6b, 0x1fc0000, 0x9d, 0x5, 0xbf5, 0x5, 0x5, 0xffffffffffffff00}, {0x7, 0x3a6b, 0x0, 0x6}, 0x4, 0x6e6bb9, 0x2, 0x1, 0x2}, {{@in=@remote, 0x4d5, 0x3c}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3507, 0x4, 0x0, 0x5, 0x0, 0xffff, 0x2}}, 0xe8) 1m4.478412725s ago: executing program 7 (id=2895): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000}}, &(0x7f0000000000)='syzkaller\x00', 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40908, 0x8a0}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4084) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)='%pI4 \x00'}, 0x20) socketpair(0x5, 0x800, 0x49, &(0x7f00000002c0)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000200)="ca7ae12e02d255c1032f683eb1d834217647bcf20a56eeb692384669acc37c99642cabff048137bb50b9d0773ea8767c7634aab63e279c3c8a6960fa8ab69293dc0a0fd38821cfcb9d58ecd7b587101ea23093770e4bfa5dbe0f1ca6b1c2d1b2d534d817a356ea3f3198b58905f13bf446811a65cd980d50e7534bf8c05d2a78fb28a9", &(0x7f0000000300)=@tcp6=r3, 0x2}, 0x20) 1m4.301634273s ago: executing program 7 (id=2902): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000002c0)={0x10000018}) syz_genetlink_get_family_id$fou(&(0x7f0000000340), r1) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv4_newrule={0x68, 0x20, 0x10, 0x70bd2d, 0x25dfdbfe, {0x2, 0x80, 0x14, 0x29, 0x9, 0x0, 0x0, 0x1, 0x10002}, [@FRA_DST={0x8, 0x1, @loopback}, @FRA_FLOW={0x8, 0xb, 0x3}, @FRA_DST={0x8, 0x1, @broadcast}, @FRA_FLOW={0x8, 0xb, 0x565c}, @FRA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x4}, @FRA_FLOW={0x8, 0xb, 0xf}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x400}, @FRA_FLOW={0x8, 0xb, 0x9}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') unshare(0x6a040000) r3 = socket$netlink(0x10, 0x3, 0x4) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) write(r3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000100040000000000000007000000", @ANYRES32=r4, @ANYBLOB="5d5b0000000000001c001a8018000a8014000700"], 0x50}}, 0x0) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) accept4(r0, 0x0, 0x0, 0x80800) (async) epoll_create1(0x80000) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000002c0)={0x10000018}) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000340), r1) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv4_newrule={0x68, 0x20, 0x10, 0x70bd2d, 0x25dfdbfe, {0x2, 0x80, 0x14, 0x29, 0x9, 0x0, 0x0, 0x1, 0x10002}, [@FRA_DST={0x8, 0x1, @loopback}, @FRA_FLOW={0x8, 0xb, 0x3}, @FRA_DST={0x8, 0x1, @broadcast}, @FRA_FLOW={0x8, 0xb, 0x565c}, @FRA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x4}, @FRA_FLOW={0x8, 0xb, 0xf}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x400}, @FRA_FLOW={0x8, 0xb, 0x9}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') (async) unshare(0x6a040000) (async) socket$netlink(0x10, 0x3, 0x4) (async) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) (async) write(r3, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000100040000000000000007000000", @ANYRES32=r4, @ANYBLOB="5d5b0000000000001c001a8018000a8014000700"], 0x50}}, 0x0) (async) 1m1.641001505s ago: executing program 6 (id=2939): unshare(0x20000400) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) close(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x30}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="000000550c000000ff0400000000001a88eb0f03", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5}, 0x10) syz_emit_ethernet(0xcf, &(0x7f0000000a40)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "80fec9", 0x0, 0x3a, 0x1, @empty, @private1, {[@fragment={0x0, 0x0, 0x4, 0x1, 0x0, 0x8, 0x64}, @dstopts={0x89, 0x0, '\x00', [@ra={0x5, 0x2, 0x401}, @enc_lim={0x4, 0x1, 0x8}, @calipso={0x7, 0x0, {0x1, 0x0, 0x8, 0x7a1, [0x6, 0x3, 0x4, 0x9, 0x2727, 0x2, 0x7, 0x8]}}, @jumbo={0xc2, 0x4, 0x8000}]}, @dstopts={0x84, 0x0, '\x00', [@pad1, @calipso={0x7, 0x0, {0x2, 0x0, 0x1, 0x7, [0x0, 0x0, 0x3, 0xffffffff, 0x2]}}, @ra={0x5, 0x2, 0x8}, @enc_lim]}, @fragment={0x3c, 0x0, 0xb, 0x1, 0x0, 0xe, 0x64}, @dstopts={0x2b, 0x0, '\x00', [@padn={0x1, 0x0, [0x0]}, @jumbo, @pad1]}, @hopopts={0x32, 0x0, '\x00', [@ra={0x5, 0x2, 0x9}, @hao={0xc9, 0x0, @mcast2}, @padn={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x0, {0x1, 0x0, 0xf0, 0x80, [0x2, 0x7f, 0x1, 0x7]}}]}, @routing={0x2e, 0x0, 0x2, 0x4, 0x0, [@private0, @mcast2, @local, @empty]}], @echo_request={0x80, 0x0, 0x0, 0x3, 0x7, "5ac8ac26303926420b32ae246cb95fa9b3769419b6bbf23cd9b3e9120b0e3ac996e2c6beab0e4320345fb3df9537df05923087b71b49b6b636b44fd79475b31ba3eb286a7c772137807f101f8f459325197870a398fc9e2c9e94bcc2ef84bcce353d507a81558eb82ad4bc58508e2b96daba108ccf48ba06612251b2bf9d2adeff9b040ac3129cadbfeb4abbd2044f3aa207bcfb281635fcbada7f34f2129d5eb6dd5d0415cf54cc5208335a6c28cec84dd7a34bce2603b6062499fe77b872918a28ec95f2ae5273a509b81e3f54f1599e83dbc5358768630f82c9ed"}}}}}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r7, 0x1, 0x11, 0x0, &(0x7f00000005c0)=0xfe) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) (async) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)={0x114, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x34}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}, {0x0}], 0x2}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000780)={0x44, 0x4, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r10}, 0x10) r11 = socket$rds(0x15, 0x5, 0x0) connect$rds(r11, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c00018006000600060600000800028004007280080007"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 1m1.556164124s ago: executing program 6 (id=2942): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}, 0x1, 0x0, 0x0, 0xa000000}, 0x0) 1m1.510834159s ago: executing program 6 (id=2944): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x141080, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x14, 0x1e, 0x101, 0x0, 0x0, "", [@nested={0x4, 0x12}]}, 0x14}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000000000000000000300000000030000000300000000000101010000000000000800000000010000000100000506000000010000000200000000000000005f"], &(0x7f0000001540)=""/4096, 0x58, 0x1000, 0xa}, 0x28) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x7, 0x6, 0x8c}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r5}, &(0x7f00000007c0), &(0x7f0000000800)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4, {0xa, 0x9}, {}, {0xc, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_XOR={0x8, 0x7, 0x5}, @TCA_FLOW_MASK={0x8, 0x6, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18934}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x200008c2) 1m1.329953993s ago: executing program 6 (id=2949): connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) (async) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) (rerun: 32) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000021c0)={0x1484, r3, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xd8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xd}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x370}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xcd}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x86}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xc2}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xf3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14a0}], @NL80211_ATTR_CSA_IES={0x13f0, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_BEACON_TAIL={0x2ef, 0xf, [@link_id={0x65, 0x12, {@from_mac=@device_b, @broadcast, @broadcast}}, @measure_req={0x26, 0xd4, {0x68, 0x9, 0x2e, "8222afd0483fb3d4dadb85d3472dae101b51607af8c7b681518dba589cf4d7858095f302f16f71a24ff9e88bb4b7effc43e210c212f329d730f42598196a3ab0e04066682ed8025db78beb0134f706018edf977f5841f750c10bc6d5f8cfab20f5167c3fede33be703f5e182ff49c25f220b0faa877474c8ee868d611d8442ab09b3f47967aacb80c8a895a76935d6e5a7948a4f7ab932edfdbcbccdbac4cb6ba9d1bd5a51c75214f5d897fa2f8c4ca55300add25083bb90f831a89348d5c437334876623de116a52f2b7105c0ee3e845d"}}, @peer_mgmt={0x75, 0x8, {0x0, 0x6f, @val=0x1ff, @val=0x11, @void}}, @fast_bss_trans={0x37, 0x10e, {0x8, 0x7, "26b3da63158169b6d953e846ae81f3ea", "bd426a9c7e318cd6399fbe9cb4dd0f88b3d2e0234a0a9883479a7e5bcc4584cb", "9d324688ec911b7818363d3348c2615688adb6f9d58d4a4f747e028bef20b351", [{0x3, 0x22, "36c9b6acf18d7417acc541883d804448523e0a167afd2c4b22cea96839bccd0605ad"}, {0x1, 0x16, "90984f7eb92ce91083a1766a995b78b215151d66c0ad"}, {0x1, 0x18, "4a797a6d43a36a5923d9d0ad424c0c677eb39eb34aef8926"}, {0x2, 0x27, "0db3e880b325fc4de07f68d32580ff085cb9428dbe67be23d1fa2ce240575c5b924fee82e2ef4e"}, {0x4, 0x15, "487a29c27598d8be894b1aef5fc1b954b6297ba87e"}, {0x3, 0x1c, "1d573a1056a460d24461ebca6ebbe76c2970a8dadb85599e1c8f4b16"}, {0x4, 0x6, "25c6ad6d3ac0"}]}}, @peer_mgmt={0x75, 0x4, {0x1, 0x3ff, @void, @void, @void}}, @random={0x47, 0xa7, "d1fe52076cdf63469215f8d8e03c29c38bac6dff1eba9471f861224882bdf4a9147ab516c364909008d28428b2bab96a0d2976ecd04f6cf712049e174a156dc23bde42a7c970e40067a1aff24248268e38bae69811bd0c954641eeea7efd61136dfb99d1ee9f554cdfe73efc1692f5938a661975b58b4be89cce15a7719290283452f10e9e8b2d19dffd132a16561a592cb3aca955b8fc432b212e3acad5c7ce167545aa0e0c07"}, @cf={0x4, 0x6, {0x8, 0x3, 0x10, 0x5}}, @preq={0x82, 0x2b, {{0x0, 0x1, 0x1, 0x0, 0x1}, 0xd, 0x80, 0x4, @device_b, 0x9, @value=@broadcast, 0x3, 0x401, 0x1, [{{0x1}, @broadcast, 0x1}]}}, @erp={0x2a, 0x1, {0x0, 0x1}}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0xe, 0xba, [0x0, 0xfff9, 0x80, 0x5, 0x1]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x8, 0xfff, 0x7]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x4, 0xe, 0x5]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0xffff, 0xffff, 0x1, 0x6]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x18, 0xbb, [0x8, 0x2, 0xb88b, 0x4, 0x8, 0x3ff, 0x2, 0xa, 0x3, 0x1d]}, @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x119, 0x80, [@cf={0x4, 0x6, {0xd2, 0x80, 0x80, 0xff7a}}, @peer_mgmt={0x75, 0x6, {0x0, 0xe, @val=0x5, @void, @void}}, @rann={0x7e, 0x15, {{0x0, 0x40}, 0x3, 0x3, @device_b, 0x3, 0x7, 0x667b}}, @tim={0x5, 0xe4, {0x23, 0xf4, 0x10, "74310bc0b9a15078a464bff5684f0d4d2eb1387065f313e1e6407ab1d06e7bb7a4b6f2581058356c0f80fec4998c9c1c1d817ffb56c9878d18533c6ece32ed9c1806d0bf39b8d5448236c1c6356d44dee9753505ec4f505ed6f14b92b2e3d5e2726dd86f6fc93980052f983249343acc081bfad8e04c46f9c83ac92e487af57a6e16038d91df4e9964b2ef89d6cb11d378aa1ee9438698428a3e7c1ddf3a918db3f10ecb10e1dedd4f9b80a00af6199708f24dc974f5e3ce7de69c1ae8ef60246d366482372a4fd9555afeb9c4c362d25cc509b04ef99310b6e5649dbeb8813af0"}}, @gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_FTM_RESPONDER={0x108, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x103, 0x2, "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"}]}, @NL80211_ATTR_PROBE_RESP={0x549, 0x91, "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"}, @NL80211_ATTR_FTM_RESPONDER={0x1f0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x58, 0x3, "a081ac78c2d21e3bcd5bb4ffa6471fbf681d510d30fb01bb800e4a32e8843d0d189c29f15f8ae6f664cd63c443c2c700d302d428f2390b82a093b1027a90d9e91f5c0271513c33099cfb72ef24b97cfbd77a2a27"}, @NL80211_FTM_RESP_ATTR_LCI={0x9b, 0x2, "d423781ca9c39dc6a8dc880e8686768ec5b4e7ef29f60f405a1a9a155b0a0dfe9a6d495852769a4204b707c9fdd900b6485a4204c8a1fcca9d091698765e02d79f7f9175bc8fa11f886f3c9f561b5beab4a8f1f8bac1b00af037579adadcadbc8a1743520584c5ae0f8d077e6c426ea965f8e74d449376c3530dbf1765ca5c87c7d0a9a32886c97219210f10f6f32cd7cdf06cc146617f"}, @NL80211_FTM_RESP_ATTR_LCI={0xf8, 0x2, "d7af44a15877d24cf530f5cf3d5e476354df6c0c904d4eb8910b9376c7dc9ecfccd437517d813c61080a4f0e050839f78f8de7d1145a36712d87c4fc9f837ab6cede112111f3d361fcd0a51bc941ebecd38776598cc4e6c58d3769307dd91650953d2336dea31f2f39a72fd421288f91ae8bcb18be6753cf5920dbccc4fdd2e3b8694a678e00284cb2cbf75d85c18b7c13e02c287d62e144d3c085341a334e45fde3fe3346b795c905dd2fa1b556dec74536c926c554d2ff07c5dff973bc12288281feebf59bfa58e2a5f819f26849db5b8ae2f1beb67c819adfd02d0a5796dc706fec575247dab56092e7fced58010d2af2589b"}]}, @NL80211_ATTR_BEACON_TAIL={0x206, 0xf, [@ibss={0x6, 0x2, 0x41}, @peer_mgmt={0x75, 0x16, {0x0, 0xfbff, @val=0x9, @void, @val="45b96d9842f885b9983502be13c180b6"}}, @preq={0x82, 0x5c, {{0x1}, 0x7, 0x5d, 0x9, @broadcast, 0xfffff875, @void, 0xfffffffb, 0x0, 0x6, [{{0x1, 0x0, 0x1}, @device_b, 0x2}, {{0x1, 0x0, 0x1}}, {{}, @device_b, 0x100}, {{0x1, 0x0, 0x1}, @broadcast, 0x7}, {{0x0, 0x0, 0x1}, @device_a, 0xb7}, {{0x1, 0x0, 0x1}, @device_b, 0x1}]}}, @gcr_ga={0xbd, 0x6, @broadcast}, @rann={0x7e, 0x15, {{0x0, 0x3}, 0x3, 0x1, @device_a, 0xf7d, 0x2, 0x377}}, @random_vendor={0xdd, 0xe1, "2a30f01285cf60100191d82d5139e543e9cdcd9efc95f203b3fb4b827d4c35220b33c50f44bb72982b116c378a48ed79c667e47381cfaba7ef1e667f8f3c18305c89107e2a274a13b5d4fb3b0839cc78b60e1627dbcd49e789dc59fda9ba3ee6bac3dff57ecee0ef4baa93dc43c8c55f152baea67636d2e7c94b55a895b73546f986abbe921fc425544270a41987caeae764fe453e14b9d9fa8eea5937b3d1e9acf3e950a506b2a75aa7dd027eb2c4f9c5cf68613bab9f9592ff1ef388d2ca01cd6040d09ca7fc96062e3491772f6d37cf542980b29251ab55f5c954f2b057b578"}, @random_vendor={0xdd, 0x6a, "65fb02ea78d5b3fb3177bb5f7f85d43e83d7331582a1b21b5bdcb2a111febc831a5153db5afefd2f1f1559e1cbe647f04d1496d927562cff5141ab22e2418ab1251773029ff0e77cd52eda1a24252e582016fc7a1cd023b30ce3cd4af3713b095d401a944670ae5a459c"}, @link_id={0x65, 0x12, {@initial, @device_a, @broadcast}}, @chsw_timing={0x68, 0x4, {0x0, 0x6}}]}, @NL80211_ATTR_PROBE_RESP={0x33d, 0x91, "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"}], @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x1fe, 0x80, [@measure_req={0x26, 0x7b, {0x9, 0xf8, 0x1, "4789a7c792e1281258edcc9e6f67f997433b9509d459752c48ada7bc53a039161883fd4106e7bfa0779baa34714c61f7b7381bca0db66b17c6a8385c5e280c7d7d59e63c15d48609a9d02caa22bd9336890305af2187366d2c30ab17d565a6cf7272d3b6b231e35751fd61a82b583e2a26eb711b679f2765"}}, @measure_req={0x26, 0xd9, {0x5, 0x3, 0x3, "9c79edf25ca9a6f9bc34d93ef3f8a71bcdc3a38b55eddb2fc876bde8a82b0c36de49c6103143dd53839be173c6a4649123af6d4b48feaa96e54585c6899bc4f224408e8285cb9dffd3f95ea457399ffcaac5365420ca242277274b268403fa481c5da7ad8785ee0cc60000ccb0a6cc558eb09187bc88d8b92667f9f5ddc44e760b286c96601b6d9b47455d4b77a0a2c7fd4330818eedcab1460e65b6bb7953ac674f597ec7ecbc2d3d7ba26d77ff1f9d2522cf86859d4c1ef3f233bd659f372f6f1781412e315d352e516a0b00a65137acfa3fd5976c"}}, @supported_rates={0x1, 0x8, [{0x36, 0x1}, {0x30, 0x1}, {0x3}, {0x60, 0x1}, {0x24}, {0x3, 0x1}, {0x23, 0x1}, {0x9}]}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x3, 0xf, @broadcast, 0x159, @value=@device_b, 0x7fc00, 0x7, @device_b, 0x3ff00000}}, @gcr_ga={0xbd, 0x6, @broadcast}, @fast_bss_trans={0x37, 0x67, {0x0, 0x1, "2ec441c363c904fb1807caeba6541e53", "101aa98f688a5eadde35ae27612d3b0b6f0d5c0c4e2fa77821f6cf0064cef5f7", "bf46ab716e67d74203372836d184284df81a1467ed6a8c48b4abe9707f6a9be1", [{0x2, 0x13, "f9f60d7b9998a106d133c90e036a97d57db8f8"}]}}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0xff, 0x0]}]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x81}]}, 0x1484}, 0x1, 0x0, 0x0, 0x8010}, 0x88884) (async) sendfile(r0, r1, 0x0, 0xffffffff000) (async, rerun: 32) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0xffffffff}], 0x1, 0x0, 0x0) (async, rerun: 32) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x3) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x1e, "4372070000000000476fb2940acfbe4c3f9725f0f2bf568d62c050e40000"}}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000053c0), 0x0, 0x8004) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYRES8=r1], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) (async, rerun: 64) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) bpf$OBJ_GET_MAP(0x7, &(0x7f0000002180)=@o_path={&(0x7f0000001080)='./file0\x00', 0x0, 0x8, r7}, 0x18) (async) socket$inet_udp(0x2, 0x2, 0x0) 1m1.258477926s ago: executing program 6 (id=2952): r0 = socket$tipc(0x1e, 0x4, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) recvmmsg(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/9, 0x9}], 0x1, 0x0, 0x18}, 0xb7}], 0x1, 0x40002021, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f00000003c0)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x1000a8d0}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="1900"], 0x20) 1m0.343918159s ago: executing program 6 (id=2970): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) unshare(0x6a040000) socket$inet_tcp(0x2, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x541b, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) shutdown(r1, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @empty, 0xa}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8) sendto$inet6(r1, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) unshare(0x6a040000) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) listen(0xffffffffffffffff, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x541b, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) shutdown(r1, 0x1) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @empty, 0xa}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8) (async) sendto$inet6(r1, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) (async) 57.365987448s ago: executing program 8 (id=2996): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1}, 0x0) close(r4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2e, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@rr={0x7, 0x3, 0xa6}]}}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x58, r7, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x82}}]}, 0x58}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 57.231366952s ago: executing program 8 (id=2998): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18005a00000000000000000000000000893718110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r3}, 0xe) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0007f5e7bc35c5adfc1feb78920af30000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r4) epoll_create1(0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000002d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r7}, 0x10) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f0000000080), 0x72a, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r4, &(0x7f0000000380)) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f0000000340)="cbce661a66d5bd3719db747e6f8d29f5445c1bd248db7442560b", &(0x7f0000000300)=""/7, 0x2}, 0x20) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000400)={0x0, 0x4, 0x30, 0x4a07, 0x1}, &(0x7f0000000440)=0x18) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000480)={r10, 0xfa9, 0x8}, 0x8) vmsplice(r9, &(0x7f00000003c0)=[{&(0x7f0000000540)="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", 0x1bd}, {&(0x7f00000000c0)="57a015", 0x3}], 0x2, 0x7) splice(r8, 0x0, r1, 0x0, 0x8000, 0x9) r11 = socket(0x15, 0x5, 0x0) connect$l2tp6(r11, &(0x7f0000000740)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x20) 57.145403894s ago: executing program 8 (id=3000): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000070000100000000000000000007000000", @ANYRES32, @ANYBLOB="100001", @ANYRESOCT], 0x28}}, 0x0) (async) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x8029, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 56.933520284s ago: executing program 8 (id=3003): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000000206010200c85b000000000000000000140007800800124000060000080008400000003716000300686173683a6e65742c706f72742c6e6574000000050005000a00000005000400000000000900020073797a31000000000500010007000000"], 0x64}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a30000000004c000000030a010200000000000000000a0000000900010073797a30000000000900030073797a3100000000140004800800014000000000070002"], 0x94}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000040)={r8, 0x62}, &(0x7f0000000080)=0x8) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x9}}, [@TCA_RATE={0x6, 0x5, {0x7}}, @qdisc_kind_options=@q_qfg={0x8}]}, 0x34}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x1e, "4372070000000000476fb2940acfbe4c3f9725f0f2bf568d62c050e40000"}}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan3\x00'}) 56.654430391s ago: executing program 8 (id=3007): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x39, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x6}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private1}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f"]}]}, 0x114}], 0x1}, 0x8000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='bic\x00', 0x4) (async) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) (async) recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 55.753092838s ago: executing program 8 (id=3011): r0 = socket(0xa, 0x3, 0x87) sendmmsg$unix(r0, &(0x7f0000000580)=[{{&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="10360f0000a00a000100000024000000", @ANYRES32], 0x10, 0x40000}}], 0x1, 0x40480d4) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x4) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000027c0)={0x18, 0x4, &(0x7f0000000a40)=ANY=[], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) (async) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) (async) vmsplice(r1, &(0x7f0000000100)=[{&(0x7f00000005c0)="77690addcf9e281b9098a763908a252fbe0ce020a05c24ddb087137e9b2022f144eebcacd2ed662e89c1299f09533c08193eb3836c60d6b1fbe12e3880c2c9014e204018ee4e04567f225c4110b147c05f2b00f9e7b9dea5b619db6c2093f534ac0b99f757a6153c8d762b1d22cb8dd603d960559e518730e5a26c96bed794f567f3bb213ba71c959607f1d07850b178a9c9d28ad6455f976b2cf7e48bc610a57dd402a5a3673b1c91a20bad8ecbbcfab2161889ed3124af8c95fdd277b16157f5c17acb7d9418522e916ecd8be8ee1eaa7863bc51af900c812863", 0xdb}, {}, {&(0x7f00000006c0)="a646106ea4c5a55df187589c1b57516fbc6b6e1eb8fcff7af56f498dee746d06a4336396a6127b37d7ea7c8c4a79a498dda698c1248e97f5f02ef01dcf5aafbc93b3684811b132d585c111f13421b90bb0fe9c95c36d00c96bd80e025a9d79ce974a3972d3d93118bf435de0a7e0b373c84728462b1e13c855ab7cf6f84a3c157a9140f9300f29c6c7971f4fd34b076d4357b0b526a41f9ffd5b1d76dca88513ba22d263dfad8973a2b645177ef64e9849d090c33b9f2e68798d7b72386338213b003239d27affb83d764bd49f78e5cd7268a83e4c6fe8e757e1565a879b7775c27761b3e0fb6fd9eeb68035800d3866250ff7815e4a12b82782b7498e237d", 0xff}, {&(0x7f0000000840)="d6a20ec30019d47b9566f01a5a131baa3647b749e60511e0897a644dfa0b9074f2fd6e77310002e07e73ea8e73cf86a4c8015f83e117adb4ba973b1be5351cca1eab7086d1b376737d5ed4e85b0195a2f02993cc7324213128d55ea191e5123860a082be5867c6f163684a37700ccf742799e324820c65b484e57c02494edd4934f7f600cf2d36a5c31979b774c45fb8eba921cd5bcae254cbd31a243ed98a6c897024bc34102a056a6485f8e8abc760d03390aec6da633f5dccbf10d5535f0edbc8d305851b526430403d34b362a409928873ef1ea269453bc7122c89c4af57e5925b97a64163c4fbdfcceb392f4ab1d60727dc1f155dcaea", 0xfee1}], 0x4, 0x8) (async) socket$netlink(0x10, 0x3, 0xc) (async) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000022657a6e8b48b9000000000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x1e, 0x0, &(0x7f0000000040)="b9f7ff5f0040f000009e0ff008001fffffe1004000632f8afb7f02f2017f", 0x0, 0x104, 0x6000000000000000, 0x10c, 0x0, &(0x7f0000000400)="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", 0x0, 0x2}, 0x50) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000100800010001"], 0x1c}}, 0x0) (async) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000cc0)={0x12c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK={0x84, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xdee00000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb592}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x53}]}, @TIPC_NLA_BEARER={0x2c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb4}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x40002}, 0x4000800) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), 0xffffffffffffffff) ioctl$EXT4_IOC_GETFSUUID(r4, 0x8008662c, &(0x7f0000000280)) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000003c0)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x3, 0xfffffffffffff4b3, 0x6, 0x8000000000000001, 0x5c]}, &(0x7f0000000000)=0x78) setsockopt$inet6_tcp_int(r8, 0x6, 0x2000000000000022, 0x0, 0x0) 48.812697899s ago: executing program 36 (id=2902): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000002c0)={0x10000018}) syz_genetlink_get_family_id$fou(&(0x7f0000000340), r1) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv4_newrule={0x68, 0x20, 0x10, 0x70bd2d, 0x25dfdbfe, {0x2, 0x80, 0x14, 0x29, 0x9, 0x0, 0x0, 0x1, 0x10002}, [@FRA_DST={0x8, 0x1, @loopback}, @FRA_FLOW={0x8, 0xb, 0x3}, @FRA_DST={0x8, 0x1, @broadcast}, @FRA_FLOW={0x8, 0xb, 0x565c}, @FRA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x4}, @FRA_FLOW={0x8, 0xb, 0xf}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x400}, @FRA_FLOW={0x8, 0xb, 0x9}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') unshare(0x6a040000) r3 = socket$netlink(0x10, 0x3, 0x4) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) write(r3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000100040000000000000007000000", @ANYRES32=r4, @ANYBLOB="5d5b0000000000001c001a8018000a8014000700"], 0x50}}, 0x0) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) accept4(r0, 0x0, 0x0, 0x80800) (async) epoll_create1(0x80000) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000002c0)={0x10000018}) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000340), r1) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv4_newrule={0x68, 0x20, 0x10, 0x70bd2d, 0x25dfdbfe, {0x2, 0x80, 0x14, 0x29, 0x9, 0x0, 0x0, 0x1, 0x10002}, [@FRA_DST={0x8, 0x1, @loopback}, @FRA_FLOW={0x8, 0xb, 0x3}, @FRA_DST={0x8, 0x1, @broadcast}, @FRA_FLOW={0x8, 0xb, 0x565c}, @FRA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x4}, @FRA_FLOW={0x8, 0xb, 0xf}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x400}, @FRA_FLOW={0x8, 0xb, 0x9}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') (async) unshare(0x6a040000) (async) socket$netlink(0x10, 0x3, 0x4) (async) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) (async) write(r3, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000100040000000000000007000000", @ANYRES32=r4, @ANYBLOB="5d5b0000000000001c001a8018000a8014000700"], 0x50}}, 0x0) (async) 45.297982796s ago: executing program 37 (id=2970): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) unshare(0x6a040000) socket$inet_tcp(0x2, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x541b, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) shutdown(r1, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @empty, 0xa}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8) sendto$inet6(r1, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) unshare(0x6a040000) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) listen(0xffffffffffffffff, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x541b, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) shutdown(r1, 0x1) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @empty, 0xa}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8) (async) sendto$inet6(r1, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) (async) 41.488471338s ago: executing program 9 (id=3141): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0xa, 0x2, 0x0, &(0x7f0000000200)='GPL\x00'}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r2, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xfb}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040010}, 0x95) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r3, 0x89f1, &(0x7f0000000000)) sendmsg$netlink(r0, &(0x7f0000000040), 0x300) 41.30611806s ago: executing program 9 (id=3143): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) socket$isdn_base(0x22, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000021c0), 0x5b, 0x40, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000021c0), 0x5b, 0x40, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x20000400) (async) unshare(0x20000400) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000d000000cc0002000600000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000f7ff00"/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x4b2, r5}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x4b2, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f0000000640), &(0x7f0000001740), 0x2, r5}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f0000000640), &(0x7f0000001740), 0x2, r5}, 0x38) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'caif0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r6, 0x1, 0x1000, 0x0, {0x2a}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x0) listen(r3, 0xe9c) socket$inet_udp(0x2, 0x2, 0x0) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414aa000000000000000000000000000000003c00000000000000fe80000000000000000000000000000000000000000000000008000000000000000000007f000001000000000000000000000000000000003200000000000000e00000010000000000000000000000000000800003030000000000000000000000000000ff0100000000000000000000000000010000000033000000000000000a010101000000000000000000000000043500000000010000000000bf0a000000000000fe8000000000000000000000000000aa000004d533"], 0x23c}}, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414aa000000000000000000000000000000003c00000000000000fe80000000000000000000000000000000000000000000000008000000000000000000007f000001000000000000000000000000000000003200000000000000e00000010000000000000000000000000000800003030000000000000000000000000000ff0100000000000000000000000000010000000033000000000000000a010101000000000000000000000000043500000000010000000000bf0a000000000000fe8000000000000000000000000000aa000004d533"], 0x23c}}, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000002c0)=0x82, 0x4) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000b40)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r9, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000fcdbdf250e00000008000300", @ANYRES32=r11], 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r10, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x851}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r12, {}, {0x0, 0xc}, {0xfff3}}}, 0x24}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x30}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 40.912528511s ago: executing program 9 (id=3146): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x600) 40.834262847s ago: executing program 9 (id=3148): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000100)=@framed={{}, [@jmp={0x5, 0x1, 0xc, 0x5, 0x8, 0x0, 0x8}]}, &(0x7f0000000180)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x54, 0x10, 0x401, 0x4000, 0x101, {0x0, 0x0, 0x0, 0x0, 0x20009, 0x1}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4014}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELRULE={0x0, 0x8, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_RULE_HANDLE={0x0, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x0, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x0, 0x1, 0x1, 0x0, 0x16}]}, @NFTA_RULE_EXPRESSIONS={0x0, 0x4, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, @target={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x0, 0x3, "55be5b86efc3a360e3304f7d5b3a1b81e10de16cb556bc213467c8d0915c6606cefb91015462a85a32082f1ab40e8a00799bc629afe947d0fb53f771803148d42a50dda85d2aa8e9f7fada05cae8b0dc9e8f9251506170f0cd26e283f6c67bbf8d39666d2a4db0e6e6b755bdd8b86787a4d8083b8ed0543ec2b994f309c277007e497e273d6e79d66460fef3347bb3a46967215ebc4715714f06e0d8cd7f4e11b3e711cea8de61852b153fad7bd45e854dc0cb5be884789d3adda1147e5a56bf03eba30f991eac6c6f93e4ce87ac7002b84f13281f9473f7880470f6a97221"}, @NFTA_TARGET_NAME={0x0, 0x1, 'RATEEST\x00'}]}}}, {0xfffffffffffffcf7, 0x1, 0x0, 0x1, @exthdr={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @ct={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x0, 0x1, 0x1, 0x0, 0x1b}, @NFTA_CT_DREG={0x0, 0x1, 0x1, 0x0, 0xb}, @NFTA_CT_DREG={0x0, 0x1, 0x1, 0x0, 0x13}, @NFTA_CT_KEY={0x0, 0x2, 0x1, 0x0, 0xb}, @NFTA_CT_DREG={0x0, 0x1, 0x1, 0x0, 0x9}, @NFTA_CT_DREG, @NFTA_CT_KEY={0x0, 0x2, 0x1, 0x0, 0x3}, @NFTA_CT_DIRECTION, @NFTA_CT_DREG={0x0, 0x1, 0x1, 0x0, 0x17}]}}}, {0x0, 0x1, 0x0, 0x1, @fwd={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x0, 0x3, 0x1, 0x0, 0x2}]}}}, {0x0, 0x1, 0x0, 0x1, @byteorder={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x0, 0x1, 0x1, 0x0, 0x19}, @NFTA_BYTEORDER_OP, @NFTA_BYTEORDER_LEN={0x0, 0x4, 0x1, 0x0, 0x6e}]}}}, {0x0, 0x1, 0x0, 0x1, @masq={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @payload}, {0x0, 0x1, 0x0, 0x1, @ct={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @notrack={{}, @val={0x0, 0x2, 0x0, 0x1, ["", "", ""]}}}]}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x20000805}, 0x40000) 40.747547646s ago: executing program 38 (id=3011): r0 = socket(0xa, 0x3, 0x87) sendmmsg$unix(r0, &(0x7f0000000580)=[{{&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="10360f0000a00a000100000024000000", @ANYRES32], 0x10, 0x40000}}], 0x1, 0x40480d4) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x4) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000027c0)={0x18, 0x4, &(0x7f0000000a40)=ANY=[], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) (async) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) (async) vmsplice(r1, &(0x7f0000000100)=[{&(0x7f00000005c0)="77690addcf9e281b9098a763908a252fbe0ce020a05c24ddb087137e9b2022f144eebcacd2ed662e89c1299f09533c08193eb3836c60d6b1fbe12e3880c2c9014e204018ee4e04567f225c4110b147c05f2b00f9e7b9dea5b619db6c2093f534ac0b99f757a6153c8d762b1d22cb8dd603d960559e518730e5a26c96bed794f567f3bb213ba71c959607f1d07850b178a9c9d28ad6455f976b2cf7e48bc610a57dd402a5a3673b1c91a20bad8ecbbcfab2161889ed3124af8c95fdd277b16157f5c17acb7d9418522e916ecd8be8ee1eaa7863bc51af900c812863", 0xdb}, {}, {&(0x7f00000006c0)="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", 0xff}, {&(0x7f0000000840)="d6a20ec30019d47b9566f01a5a131baa3647b749e60511e0897a644dfa0b9074f2fd6e77310002e07e73ea8e73cf86a4c8015f83e117adb4ba973b1be5351cca1eab7086d1b376737d5ed4e85b0195a2f02993cc7324213128d55ea191e5123860a082be5867c6f163684a37700ccf742799e324820c65b484e57c02494edd4934f7f600cf2d36a5c31979b774c45fb8eba921cd5bcae254cbd31a243ed98a6c897024bc34102a056a6485f8e8abc760d03390aec6da633f5dccbf10d5535f0edbc8d305851b526430403d34b362a409928873ef1ea269453bc7122c89c4af57e5925b97a64163c4fbdfcceb392f4ab1d60727dc1f155dcaea", 0xfee1}], 0x4, 0x8) (async) socket$netlink(0x10, 0x3, 0xc) (async) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000022657a6e8b48b9000000000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x1e, 0x0, &(0x7f0000000040)="b9f7ff5f0040f000009e0ff008001fffffe1004000632f8afb7f02f2017f", 0x0, 0x104, 0x6000000000000000, 0x10c, 0x0, &(0x7f0000000400)="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", 0x0, 0x2}, 0x50) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000100800010001"], 0x1c}}, 0x0) (async) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000cc0)={0x12c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK={0x84, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xdee00000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb592}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x53}]}, @TIPC_NLA_BEARER={0x2c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb4}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x40002}, 0x4000800) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), 0xffffffffffffffff) ioctl$EXT4_IOC_GETFSUUID(r4, 0x8008662c, &(0x7f0000000280)) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000003c0)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x3, 0xfffffffffffff4b3, 0x6, 0x8000000000000001, 0x5c]}, &(0x7f0000000000)=0x78) setsockopt$inet6_tcp_int(r8, 0x6, 0x2000000000000022, 0x0, 0x0) 40.730574111s ago: executing program 9 (id=3150): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x42280, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe6, 0xb}, {0xfff2, 0x2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008080) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r8 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0900000003000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="00000000de6bddff0b5e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000fecbd7ff000000000400000085000000ae00000018110000", @ANYRESHEX=r7, @ANYRES64=r7], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f0000000300), 0x4) connect$inet(r8, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r8, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014020000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) 40.07797455s ago: executing program 9 (id=3158): unshare(0x62040200) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) (rerun: 64) gettid() r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000005bf989bfb7ffff95d80000000000000000000000f900000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r0, 0x0, 0x0}, 0x10) unshare(0x10000000) (async, rerun: 32) gettid() (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x20004804}, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, 0x0, 0x0) close(r1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000000)={'wg2\x00'}) (async) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000100)=r0, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) (async) sendmsg$inet(r3, 0x0, 0x0) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="0207000012000000000000000000000005000500000000000a004e200000000400000000000000000000000000000000e40d00000000000008001200000001000000000000000000060000000000000000000000000000000000000000000000000080ffffffffffff00030006000000000002000000e000000100"/144], 0x90}}, 0x0) (async) unshare(0x68040200) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) (async, rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0xb0}}, 0x40004) writev(0xffffffffffffffff, 0x0, 0x0) (async) socket$phonet_pipe(0x23, 0x5, 0x2) syz_init_net_socket$ax25(0x3, 0x3, 0x0) r6 = socket(0x3, 0x1, 0xb) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'veth0_macvtap\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x13, 0x0, 0xbe, 0x760}}) 25.016388788s ago: executing program 39 (id=3158): unshare(0x62040200) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) (rerun: 64) gettid() r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000005bf989bfb7ffff95d80000000000000000000000f900000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r0, 0x0, 0x0}, 0x10) unshare(0x10000000) (async, rerun: 32) gettid() (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x20004804}, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, 0x0, 0x0) close(r1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000000)={'wg2\x00'}) (async) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000100)=r0, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) (async) sendmsg$inet(r3, 0x0, 0x0) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="0207000012000000000000000000000005000500000000000a004e200000000400000000000000000000000000000000e40d00000000000008001200000001000000000000000000060000000000000000000000000000000000000000000000000080ffffffffffff00030006000000000002000000e000000100"/144], 0x90}}, 0x0) (async) unshare(0x68040200) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) (async, rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0xb0}}, 0x40004) writev(0xffffffffffffffff, 0x0, 0x0) (async) socket$phonet_pipe(0x23, 0x5, 0x2) syz_init_net_socket$ax25(0x3, 0x3, 0x0) r6 = socket(0x3, 0x1, 0xb) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'veth0_macvtap\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x13, 0x0, 0xbe, 0x760}}) 9.074877705s ago: executing program 3 (id=3570): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2000d00, 0x3, 0x0, &(0x7f0000000140)="a06ad8", 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$int_in(r2, 0x5421, &(0x7f0000001100)=0x2000000009) connect$bt_sco(r2, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x3, &(0x7f0000000140)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0xa}, {0x4, 0x9, 0x8, 0x873}]}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x80800) sendmsg$alg(r7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}, 0x20044000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000008c0)=ANY=[], 0x8c0}, 0x1, 0x0, 0x0, 0x48810}, 0x4000) recvmmsg$unix(r7, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x12040, 0x0) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x30, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a}], @ndisc_redir={0x89, 0x2, 0x0, '\x00', @private0, @remote}}}}}, 0x66) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xb98}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 8.679580848s ago: executing program 3 (id=3577): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r1, &(0x7f0000000000)="3ad9dc1a9763ad8b9098", &(0x7f0000000100)=""/206}, 0x20) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000240)=0x6, 0x4) r2 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x618e, 0x0) 7.985425226s ago: executing program 3 (id=3587): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) 7.920544692s ago: executing program 3 (id=3590): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f4070009010081000000fe03000100000000", 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_ext={0x1c, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18450000feffffff0000000000000300185900000700000000000000000000005869f443040000001867000007ae6900000000000700000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000030000008500000082000000388ad4ff00000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x3, 0xc, 0x9, 0x200}, 0x10, 0x253d1, 0xffffffffffffffff, 0x0, &(0x7f0000000140)=[0x1, 0x1, 0x1], 0x0, 0x10, 0xcf1}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r3, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x89, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xbe, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000002c0)={r4, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={r4, 0x80000000}, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x1, 0xffffffffffffffff}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x7}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000f60000000c0000000c0000000a0000000600000000000004050000000061002e3061612e2d00"], 0x0, 0x2e, 0x0, 0x1}, 0x28) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b04000000000000000002000000300004802c0001800a00010071756575650000001c0002800600034011020000060002400009000006000140000b00000900010073797a30000000000900020073797a32"], 0x84}}, 0x0) pselect6(0x40, &(0x7f0000000780)={0x200, 0x3, 0x1, 0x0, 0x1, 0x1, 0xd, 0x81}, &(0x7f00000007c0)={0xffffffff, 0xf7b, 0x2, 0x8, 0x3, 0x4, 0x0, 0x7}, &(0x7f0000000800)={0x91e, 0x3, 0x10001, 0x400, 0x1, 0xbd1, 0x7, 0x9}, &(0x7f0000000840)={0x0, 0x989680}, &(0x7f00000008c0)={&(0x7f0000000880)={[0x8000]}, 0x8}) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "24120bb92a60010d", "9e8ee7dc25c6519ae8ee828f7113300200b17b55080000000000000000fe00", "dc5db43f", "80031f0000000200"}, 0x38) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffffff00000000017c00000c0002"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x50}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r8 = socket(0x2a, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002280)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x5}, {}, {0x8, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x4000) 7.756938061s ago: executing program 3 (id=3593): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[@ANYBLOB="cc000000210001000000000004000000ff010000000000000000000000000001fc02000000000000000000000000000000000000000000000afffffffd000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ff0200000000000000000000000000010a010100000000000000000000000000fc0100000000000000000000000000010a0101000000004900000000000000003c000000000000000a000a002c0013"], 0xcc}}, 0x0) 6.850089014s ago: executing program 3 (id=3596): unshare(0x6a040080) (async) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x15, 0x3, 'dh\x00', 0x0, 0x4, 0x76}, 0x2c) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e24, 0x3, 'lc\x00', 0xb, 0x323b, 0x3a}, {@rand_addr=0x64010102, 0x4e23, 0x0, 0x0, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) (async) unshare(0x32050100) (async) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r2, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) connect$bt_l2cap(r3, &(0x7f0000000380), 0xe) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x170bd25, 0x25dfdbfe, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4004810) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000002010003000000"], 0x28}}, 0x2000c050) (async) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) (async) write(0xffffffffffffffff, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) 1.534183684s ago: executing program 0 (id=3701): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff98, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf2504"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) recvfrom(r1, 0x0, 0x0, 0x40002000, 0x0, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1) (rerun: 64) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r3, 0x29, 0x10, &(0x7f0000000000)=0x8, 0x4) (async) r4 = socket(0x32, 0x6, 0x80000001) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@deltclass={0x78, 0x29, 0x200, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x8, 0xb}, {0x2, 0xa}, {0xfff2, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x1}}, @tclass_kind_options=@c_sfq={0x8}, @TCA_RATE={0x6, 0x5, {0x0, 0x4}}, @TCA_RATE={0x6, 0x5, {0x5, 0xf}}, @tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x14, 0x2, [@TCA_HFSC_USC={0x10, 0x3, {0x4, 0x6, 0x3ff}}]}}]}, 0x78}}, 0x20040089) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001000)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0xc}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000880) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x2, 0x1, 0x4, 0x4}, 0x0) (async, rerun: 32) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (rerun: 32) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) sendto$inet6(r3, 0x0, 0x0, 0x884, &(0x7f0000000300)={0xa, 0x4e21, 0x9, @empty, 0x3}, 0x1c) (async, rerun: 32) setsockopt$inet6_group_source_req(r2, 0x29, 0x5, 0x0, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r9 = socket$unix(0x1, 0x2, 0x0) bind$unix(r9, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000240)={0x20, 0x0, 0x0, 0x4000, 0x3}, 0x0, 0x0) (async) connect$unix(r8, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) 1.338254175s ago: executing program 0 (id=3705): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000640)={0x54, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0xfffffffffffffd98, 0xb, 0x87}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x9}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004808}, 0x20008000) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/35, 0x23}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000000100)=""/140, 0x8c}, {&(0x7f00000001c0)=""/43, 0x2b}, {&(0x7f0000000200)=""/92, 0x5c}], 0x5, &(0x7f0000000400)=""/235, 0xeb}, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000000000000850000009400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x0, 0x6}, 0xc) close(r6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000700)=r3, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 1.214336982s ago: executing program 4 (id=3709): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f00000001c0)={[{0x2d, 'blkio'}]}, 0x7) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) unshare(0x26020400) r4 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a", 0xd}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000000) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000100)=0x3, 0x4) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xffffffffffffffee) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f00000004c0)=0x2) 1.150485237s ago: executing program 4 (id=3712): r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="7ed8", 0x2}, {0x0}], 0x2}, 0x4004050) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000005000061114c0000000000850000001c0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) r2 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f00000001c0)="4b8cf51c2822c58bbdb368a1ce0a9d63e8d39fb3e3c33d3b7a2c5c5a05797cb6772fcae0baf24126c2f42a50e1ec516e04e57afedeab1f862f6a", 0x3a}, {&(0x7f00000004c0)="dcec301479299f00565a46ccb461bc9ba47730769eb31555dda77da84045f041d1572bf23c2d77518baf689ae2d92cbd9f66387670377850ba35e22efe63f044d54dec1316795e39f4aefb3b422914f55a71940f0086fe947a557453517963f91bb7426ad5debf3424a894613468a44c402e5c6f2e9e025115275dc814d051cd3055163b231b94d0e36b214ec04c5a85a8e95af3be59c6086a6fe678d2a48ea6e72ad3e351c8f05b48f4d43700", 0xad}, {&(0x7f0000000580)="a9b8517f7ba729435f3aa2987b5b1d6ef13d35eb547047291a5eca7cd9a4ccd55cf05061152b0fcba1a9dfa3e387026ef9753e7e29dd19d8b0d1604e6efd510d84b5e232beef08c6ce6a5fb317b499df03769d04b6122182285ec2853a06d368e98ff90f28f55bc449a3896a79c949e68ac7641f98d6d4b12ec53b65019e2781d7333a1a409ec300e7ae8c5e27203bfcebf5ed41fc5dde6383f9a2736409eee3df42d2d84ab4bcb2fc788c4897dabeabd4169a833bf9a8cd", 0xb8}, {&(0x7f0000000640)="5c8cafebcb8cd5b9d6951450fb87ce27832aba723cb75ae71eefbf6677dc6dc3548acd9242fab6a82dc9382e723fa73decb8567a7418dcc43db0e11c04233dade3fcc05d8bf22e8d4c37624f10bd278ea4a941742bb3eb8ecba7de97dc10f4bfccf11b5a6bef84c09cdf71e97a0112155d73423a401d7414f8845ed53957bef643", 0x81}], 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') getpid() openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close(r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40) unshare(0x6a040000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYRES16=r1], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x21}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r5, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000440)={r6, r4}, 0xc) r7 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) 915.933525ms ago: executing program 4 (id=3716): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$netlink(0x10, 0x3, 0x7) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000000)={0xc, 0x7, 0xed}, 0x10) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000fc0)={'geneve1\x00', &(0x7f0000000f40)=@ethtool_dump={0x40, 0x4, 0x2}}) 781.496734ms ago: executing program 4 (id=3719): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x4, 0x4, 0x4, 0x1}, 0x48) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1b21000000000000000020000080000031bb1cc9e6ab6f6e92716574c28c0000eea740fa2de54ae282df27999d51eaff0a1b07558e4d3aa380f008e84d1a855d24130d98e48fc935faba7bef71a4257f41a4b65d52f4f5ad717fd8959d2fe3f19a4dedffabacec044b1648d520a7e0adc62029a18e1ff20cea652b62863bf70e26"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000a40)=ANY=[@ANYBLOB="1d000000a100000002000000000000", @ANYRES32, @ANYBLOB="00000000000000008fac0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000005000000fc"], 0x50) vmsplice(r1, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x604}], 0x1, 0x9) socket$nl_generic(0x10, 0x3, 0x10) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x13, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000080c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000b40)=ANY=[], 0x6f4}}, 0x80) 723.329834ms ago: executing program 4 (id=3721): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC, @ANYRES32], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0xfffffdba, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYRES32=r0], 0x104}}, 0x0) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000200)={0x0, 0xc3, "3df0312ed414c899c9a067bf7aeca70c874fd456f9c3f0e3fc6e6f1725e5a7f9ab7829701dbeb4d9d24d1028c6e8dfc641cd1496d0dca077944d1942ea8da23a9626c6760be2d7a7614c8c85eaeeb5964c810295c0a58ff0d625c2a6da8cd6412b22070099553cf07059dc8d1ec63de0e2f8693dffd7b2565dbe7df23dd7898b1eb5d61310e79f2aface4deadf28a85aa7ff1bf27d8344630e279735eb0ce040157141ef6c8559089318f6d4239981b4313bcd8c0cbb234dd524b55b3baf84b032a02a"}, &(0x7f0000000040)=0xcb) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x1ff, {0x0, 0x0, 0x0, r5, {0xfff2}, {0xe}, {0x8, 0x10}}}, 0x24}}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='rpcgss_bad_seqno\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) (async) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="070000000400000008000000270d0000000000009d0b7743cbe8ada91373a13530fa507b762e238a1f0a06c53fa93680d4a940d60ecb844288e597a7b1e9e75c3e30a6161b6fe3913351b9d86a5a81e559f368e497dfcde787b634cbc9100b6a184e44fbe8db144eb62c3d9cfd3c9f451680de21604f4891c48afaa564f0f12a014f9a748dfaf8dd00"/149, @ANYRES32, @ANYBLOB='\x00'/13, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001800"/28], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) r6 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 64) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'sit0\x00'}) (async) r7 = socket$inet6(0xa, 0x1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r9 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x20040001, &(0x7f0000000080)={0xa, 0x4620, 0x0, @mcast2, 0xffff8003}, 0x1c) (async) getsockopt$IP_VS_SO_GET_DESTS(r7, 0x0, 0x484, &(0x7f0000000140)=""/209, &(0x7f0000000240)=0xd1) (async) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000fc0)=ANY=[@ANYRES32=r10, @ANYRES32=r10, @ANYBLOB="2f0000002820000004000000951394c68e"], 0x20) (async) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000240)=0x4000, 0x4) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) 653.784455ms ago: executing program 2 (id=3723): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1e, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0xb4}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff8100"], 0x30}}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="1400000024000b94f01845288200eb141fb220cf", 0x14}], 0x1}, 0x0) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f0000000100)={0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='contention_end\x00'}, 0x18) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) unshare(0x6a040000) (async) socket(0x8, 0x3, 0x0) (async) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1e, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0xb4}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff8100"], 0x30}}, 0x0) (async) socket$kcm(0x10, 0x3, 0x10) (async) sendmsg$kcm(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="1400000024000b94f01845288200eb141fb220cf", 0x14}], 0x1}, 0x0) (async) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f0000000100)={0x1}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='contention_end\x00'}, 0x18) (async) 225.442344ms ago: executing program 5 (id=3725): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) (async) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0xe, &(0x7f0000000080)=[{&(0x7f0000000180)=""/245, 0xf5}], 0x1}, 0x10022) (async) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) (async, rerun: 32) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) (async) sendmsg$nl_xfrm(r2, 0x0, 0x2000) unshare(0x24020400) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r4, 0x11c, 0x1, 0x0, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r8, @ANYBLOB='\b\x00\v\x00!\x00\x00\x00\b\x00'], 0x54}}, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async, rerun: 64) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="60000000020601010000e600000000000000000005000400000000000900020073797a300900000005000100070005000a000000140007800800114000000000080012400000ffff12000300683a73683a6f65742c706f7274000000"], 0x60}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001880)=ANY=[@ANYRES32=r10, @ANYRES32=r10, @ANYBLOB='/\x00\x00\x00\b'], 0x20) (async) socket$inet_icmp(0x2, 0x2, 0x1) 224.804986ms ago: executing program 4 (id=3726): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x894a, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 223.394429ms ago: executing program 5 (id=3727): r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf9247f9af007051d, 0x11, r0, 0xa7270000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000040)={0x3, {0x0, 0xff, 0x1c000000000, 0x6ecc, 0x7}}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x148, r2, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x148}, 0x1, 0x0, 0x0, 0x80}, 0x8810) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x80, 0x4) (async, rerun: 32) r3 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) (rerun: 32) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="85d4656eeeaf729b00676885756396a9a321f144262a85d70f9b0f4990895b42303ffcc5b41192f4a9e3e5ab1e03e640ba45a14bfc8fe1b3bfc80a05deac43093ee9f37cb9a62807fbaa0df44e4229995e56cfacf9767f9a35ec9dc84da0bd0c4086204a7fec0688a50d4684c5b026e6b4f52dd3adaa48ec63015ef061162397594499b6ee7117b5ec0cada9a7af1d576070f71bff8ea4f7", 0x98}, {&(0x7f00000003c0)="dbdf36daf95440ba67d53111688c87979d9bd4a2d401d6769702494b37b7853d40ca373669d573610733b3dfa2828b51a6420b1d030a392db1733f5aa1b102ae5f83c1e64f800bc6f6523867f137a29e18abb8c4116817beecf9cf996bcf23e9fc9130ba46fc1bd4150b68c75e2f9c2bc09ef1c860ef5f62668a07537f3f0b0c983b009596c1ee101d8da9bbe72460104227d76d857c081dcfbd7bc97498ad0cbca286eee66fbb", 0xa7}], 0x2, &(0x7f00000004c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x30}, 0x8000) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@o_path={&(0x7f0000000580)='./file0\x00'}, 0x18) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000600)=@o_path={&(0x7f0000000540)='./file0\x00', r4, 0x4000, r1}, 0x18) (async) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680), r1) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r5, 0x401, 0x70bd2d, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040095}, 0x4040) (async) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000780)={r1, 0x101, 0x5, 0x10000}) write$cgroup_type(r6, &(0x7f00000007c0), 0x9) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), 0xffffffffffffffff) (async, rerun: 32) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000880), r1) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000940)={'syztnl2\x00', &(0x7f00000008c0)={'ip6gre0\x00', 0x0, 0x4, 0x8, 0x7, 0x85d6, 0x2, @private0, @mcast2, 0x80, 0x40, 0x5, 0x6da}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000a00)={'ip6tnl0\x00', &(0x7f0000000980)={'ip6gre0\x00', 0x0, 0x0, 0x3, 0xfc, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0x3b}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x40, 0x9, 0x10}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000ac0)={'ip6tnl0\x00', &(0x7f0000000a40)={'ip6gre0\x00', 0x0, 0x4, 0x3d, 0x6, 0x2, 0x4, @local, @private1, 0x700, 0x10, 0x3, 0x3fdf}}) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f0000000b00)=0x0, &(0x7f0000000b40)=0x4) getsockopt$inet_mreqn(r6, 0x0, 0x20, &(0x7f0000000b80)={@remote, @multicast2, 0x0}, &(0x7f0000000bc0)=0xc) sendmsg$ETHTOOL_MSG_RINGS_GET(r4, &(0x7f0000000dc0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c00)={0x168, r7, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x4}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x24000004}, 0x890) (async, rerun: 64) syz_genetlink_get_family_id$ethtool(&(0x7f0000000e00), r1) (async, rerun: 64) sendto$inet6(r6, &(0x7f0000000e40)="76c59e07e7ddc13057641543992b1c7ac4bb556b829066fb34d681c75feee5b508a971bad8ba81964e59cc181762cfd536325b598451f4e07835ca4b065d52708232a4d1ab4f0392bf5927e8c4be8345accaa445e15723b060cff026ffd8ffe780453b6416c8fade", 0x68, 0x4004804, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000ec0)={0x0, 0x0, 0xe39}, &(0x7f0000000f00)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000f40)={r13, 0x1ff}, &(0x7f0000000f80)=0x8) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x48, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x10000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 222.770514ms ago: executing program 0 (id=3728): socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000440)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) syz_emit_ethernet(0xfdef, &(0x7f0000000400)={@random="ae63b2a6bea9", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x4000, 0x0, 0x2, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x4e24, 0x17c1, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x40, 0x0, @val=0x80}}}}}}}, 0x0) (async) syz_emit_ethernet(0xfdef, &(0x7f0000000400)={@random="ae63b2a6bea9", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x4000, 0x0, 0x2, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x4e24, 0x17c1, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x40, 0x0, @val=0x80}}}}}}}, 0x0) 221.225055ms ago: executing program 2 (id=3729): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000100001002abd70000002000000000000", @ANYRES32=0x0, @ANYBLOB="0801000000000000140003006e657464657673696d3000000000000008001b000800000014001680100001800c0009"], 0x50}}, 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000600)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead", 0x51}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f00000002c0)=""/92, 0x5c}], 0x2}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r0], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x5d}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x6, 0x4, {{0xe, 0x4, 0x1, 0x2, 0x38, 0x65, 0x0, 0x4, 0x4, 0x0, @private=0xa010100, @broadcast, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x20, 0x9a, 0x0, 0x4, [0x4, 0xffffffff, 0x4, 0x9, 0x5, 0x7, 0x401]}]}}}}}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x0, 0x0, 0x2, {0x0, 0x0, 0x0, r5, 0x0, 0x8991}}, 0x20}, 0x1, 0x0, 0x0, 0x2004c050}, 0x4048841) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 220.612296ms ago: executing program 5 (id=3730): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[@ANYBLOB="cc000000210001000000000004000000ff010000000000000000000000000001fc02000000000000000000000000000000000000000000000afdffffffffffff", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ff0200000000000000000000000000010a010100000000000000000000000000fc0100000000000000000000000000010a0101000000004900000000000000003c000000000000000a000a002c0013"], 0xcc}}, 0x0) 216.024199ms ago: executing program 0 (id=3731): r0 = socket$unix(0x1, 0x5, 0x0) (async, rerun: 64) r1 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) bind$alg(r1, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r1, 0x117, 0x7, &(0x7f00000000c0)="070036f0", 0x4) (async, rerun: 32) listen(r0, 0x0) 213.64387ms ago: executing program 2 (id=3732): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000500000000000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000240)="354da925f340a56cd9bd738d6055", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x14, 0x52, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) 212.013471ms ago: executing program 5 (id=3733): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="58010000100001000000000000000000ac1414aa0000000000000000000000002001000000000000000000000000000200000000000000000000000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x158}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x4c, r4, 0xc11, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x2, 0x1}, {0x73, 0x6}, {0x5, 0x3}, {0x7a, 0x2}, {0xf, 0x2}, {0x4, 0x2}, {0x4, 0x7}, {0x0, 0x4}, {0x8, 0x2}, {0xe8, 0x6}, {0x3, 0x4}, {0x8, 0x5}, {0x9}, {0x0, 0x5}, {0x6, 0x7}, {0x4, 0x6}, {0x1, 0x1}], "7ecd4163b8fccf09"}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYRES16=r4, @ANYRESDEC=r2, @ANYRESOCT, @ANYRESHEX=r1, @ANYRES16=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20008001) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001d000106000002000000000007000000", @ANYRES32=r7, @ANYBLOB="000096"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) tee(r1, r8, 0x7c41, 0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r10, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x4, 0x1}, {0x1, 0xa}]}]}]}]}, 0x2c}}, 0x4000) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000003c0)={0x80}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x840) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="14020000140001002dbd7000000000000a"], 0x214}], 0x1}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="006bb15c98d8800b00010062726964f236959e747d66676500000c00028005"], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 211.283788ms ago: executing program 2 (id=3734): r0 = socket$kcm(0x10, 0x400000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001100)={0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x24, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4f72}, {}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @ringbuf_query, @map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='GPL\x00', 0xd15, 0x1000, &(0x7f0000001140)=""/4096, 0x41000, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0xa, 0x400}, 0x10, 0x0, 0x0, 0x9, &(0x7f00000006c0)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000700)=[{0x1, 0x4, 0x8, 0x1}, {0x3, 0x3, 0xb, 0x2}, {0x4, 0x4, 0x0, 0xa}, {0x4, 0x4, 0x0, 0xb}, {0x3, 0x2, 0x1, 0x6}, {0x1, 0x3, 0xc, 0x2}, {0x3, 0x1, 0x6, 0x1}, {0x4, 0x3, 0x9, 0x6}, {0x2, 0x5, 0x5, 0x4}], 0x10, 0x3}, 0x94) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r3, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe) listen(r3, 0x8) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000e80)) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000012c0)={0x30, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r5}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}]}, 0x30}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r8, &(0x7f0000003600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}], 0x20, 0x40044}}], 0x1, 0x4) r12 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000ec0)=@name, &(0x7f0000000f00)=0x10, 0x800) r13 = getpid() sendmmsg$unix(r1, &(0x7f0000002340)=[{{&(0x7f0000000900)=@abs={0x0, 0x0, 0x4e1d}, 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000980)="76c9589c68cb91fd25adadf6e494e46302c5abb57a1c045f0e7727d449b09cdbdca63afbecac7d9cf0bffacc21c1869588da809bb128842f2241846a76bedc42e7cdb5f41cdc078c3743e616c67fc3d9de86180584b1754f235f43a6b7206b70b98c8090da07e73ad6c2d1158060d3", 0x6f}, {&(0x7f0000000a00)="913ed71491b8c68d03a2d1a8a5ac7a0f41de338db9e1b8e9531a2b31a46918b00323f9d06224693ee71a5f374ee57d1205f26811ebe8f5a5fb765832fb788c988d1163bf54f223f174a94ef03d677c616f9081e69c1992421666d13d70020b70cf249dc3f10c00ce6baecb15a88b0c79fdc8d8879fdbc7984133f5390d8d2b501758d3d327515442c45255d8bec80a9a821486aedaa6e02c44a569dec189527fe92b58fa0c85b480ae6ea91bc8816be4158c9bf4169736a2f5e12833467a4b59df3323cd7a7d1f42ed997d63bff6fae66efe44be1901ec8308c3cbaea56f65c8fe6d56547c", 0xe5}, {&(0x7f0000000b00)="9d95543901cda1c10a09d65fa2bef0bfe707e065d72a0c993285c30160c9dbcb8d0a476f5efe270e07b00f3badfd12703bb4182c03dd6eaf8d6504f6868e59fa6febe875b309f633f60b0751f48ff682343c95fec4209a8c580e8cf463ea1131def137af5f477147a59a449175e1ee4d3525b75a01ecd77afe43948fa9294fad6a86ee4e9ec79d67628a81301391c4a258be352e2ba9957f8f850186c8482ac978844ba2c5", 0xa5}, {&(0x7f0000000bc0)="1f1deca18f9d72c3298645602beb7af49bb328765b381286e4f87e5fd8cbdd6ad638eb62026fb1b1f2266a682a1a443daa049c40a7e2da6172c231ef8b67aff0cc23a6b9f05fb7a3198b4d545acabe9ea46920c54fe9ec51f63950f71e1c38be656638e752a137ec9b822a389d04924c778525dbbfb036179430", 0x7a}, {&(0x7f0000000800)="b3d046941e32409e5088d597aecbce05e7d9a8aab8d9936acf3e96dab272f46eeaaa23a3aa420c83bed24011356aab4e91900f387bbc7da118ef3a29ec5d006e", 0x40}, {&(0x7f0000000c40)="1d3316742f3aade3475e510bf4572c03867dafd54a3c6ff2ef07cd", 0x1b}, {&(0x7f0000000c80)="fc185931d14d706213a3c895b892b8b677a08b5b5ae3557cd0acbdb8f68414a9bc9b72f797ec6ebded2640d0b6461a523e188b83dc4194b28ee76c787783c7a74dea851d9ac58fed7b28ecb635ee62e43bad8e74fcdc6e023d1d5fbe3b12f336944206838c3c1b6e7a1c9567fc3e7db6b8c649a0f7cd0b44a17cf6", 0x7b}, {&(0x7f0000000d00)="1d656540b22b17fb6c2f15", 0xb}, {&(0x7f0000000d40)="171281709c21eabd61456c0621e65a449df2ba08e8a7d912793c72f6522cf9bc64fef88c0cb07ab8ebadbebd93756f15118bc4ffce47a6ee77f3955753465aa5601863d4b3a991faffbe96c26370d5656f6c78ef539b180edb5e3c91d7d64109", 0x60}], 0x9, &(0x7f0000000f40)=[@rights={{0x18, 0x1, 0x1, [r7, r12]}}, @rights={{0x20, 0x1, 0x1, [r1, r2, r3, r12]}}, @rights={{0x1c, 0x1, 0x1, [r3, r1, r2]}}], 0x58, 0x20000000}}, {{&(0x7f0000000fc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001040)=[{&(0x7f0000002140)="d4b1e1526855a5e4ad0a03204c7262ebe87d23825766d65571a82b90e84bae2db652d2c1f55c40168cf68b80fc10e56f293ce8887b92bf9f0bb0fdd3cdbdae41edf3ec510b4c3b275a37fbe49d8f1017881491bbd718e52620a67e48d0458d6479a8e8c7ea5e4362db73683fceeb7cdeab18eec050f107a78b75b1b9349702dfba603f8237c6217dd11fa3c96bcdeeea062bb531c6dac80f13e00dd20e1f19d1652840af8d40f6452dd60e94e80f6e4e56da012ef55b4c3077d517d648bda87ddd871d3b324610d6571458093bd18ac0368d74236387c52ad0f1c30cec135e", 0xdf}, {&(0x7f0000002240)="931b205fb8901b619e48b040cb7e47eeb877a62963f73907ae367220d54da077b5e9b9cd89ef4351187eca74c2523b08511b327f4044dc3fa8744bad21c4651a3fea7305990c916ee2b0fc51ebe066d8598d214325f568c391edbf2896f1a82430c42858b71bcd0afea69969db4da0ddc588a45143535aa28e1f9e068677d2b3dd1a873c689ac368384bd3574fe6747c972ead17d3f84372e73d9fa6b6691342ea4b1352cc2903405964513c51be8b4129c4e19fac296f4fe32c9838ae41d4ef90a1d2f3d5acf8662d12f24a", 0xcc}], 0x2, &(0x7f0000001080)=[@cred={{0x1c, 0x1, 0x2, {r13, r5, r11}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5, r6}}}], 0x58, 0x10}}], 0x2, 0x24048090) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe000078009106000000000000004a073e3dccf4548db274"], 0xfe33) r14 = socket(0x10, 0x3, 0x0) r15 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r15, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) r16 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf21, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r16}}, {}, [@ldst={0x3, 0x3, 0x6, 0x0, 0xa, 0x2, 0xf1}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x1}, 0x94) sendmsg$kcm(r15, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r17 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r18, @ANYBLOB="000000000000000010010c8013001a800ca3488008000000000000000800038064"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) setsockopt$inet6_udp_encap(r14, 0x11, 0x64, &(0x7f00000001c0)=0x3, 0x4) sendmsg$can_bcm(r14, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r19}, 0x10, &(0x7f0000000140)={&(0x7f00000023c0)=ANY=[], 0x80}}, 0x4008011) 201.239184ms ago: executing program 5 (id=3735): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket(0x28, 0x1, 0x0) connect$packet(r1, &(0x7f0000000100)={0x28}, 0x14) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x20000090) 110.166523ms ago: executing program 0 (id=3736): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11, 0x1, 0x0, 0x40}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r7, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fcdbdf251b00000008009a000210"], 0x20}}, 0x40090) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x1c, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000000000828500000017000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x8, 0x0, &(0x7f00000002c0)="b800000500000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x1c, 0x2d, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4, 0x800}, @nested={0x6, 0x11, 0x0, 0x1, [@generic="2fe5"]}]}, 0x1c}], 0x1}, 0x0) (async) close(r2) 109.777992ms ago: executing program 5 (id=3737): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000300)="00000000020001000003a90830332b35", 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'geneve0\x00', @local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0000f5"], 0xfd1) 108.644206ms ago: executing program 2 (id=3738): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x17, 0x0, 0x30000, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x28d, 0x0, 0x0, 0x0, 0x1}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000080)='GPL\x00', 0x6, 0x78, &(0x7f00000000c0)=""/120, 0x41000, 0x62}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x8}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_OFFSET={0x8}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x84}}, 0x0) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000000)) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2000, 0xab00, 0x0, 0x7, {{0x5, 0x4, 0x0, 0x13, 0x14, 0x20, 0x0, 0x2b, 0x2f, 0x0, @empty=0x2f, @multicast1}}}}) close(r0) 2.911249ms ago: executing program 2 (id=3739): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) socket$unix(0x1, 0x1, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0xfc}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1600000067000000001000001004000000010000", @ANYRES32=0x1, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="3b5a00000100"/28], 0x50) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, 0x0, 0x8) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x41000) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000)=0x7ff, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010067656e657665000020000280140007000000000000000000000000000000000105000c000100000008000a00", @ANYRES32=r5, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r6}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x8}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000200)={r8, 0xe}, &(0x7f0000000240)=0x8) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 0s ago: executing program 0 (id=3740): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'sit0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x20, 0x7800, 0xfffffff8, 0x6, {{0x1e, 0x4, 0x0, 0x39, 0x78, 0x67, 0x0, 0x2, 0x2f, 0x0, @loopback, @broadcast, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x3c, 0xdb, 0x1, 0x2, [{@empty, 0x6}, {@remote, 0x6}, {@multicast2, 0x1}, {@local, 0x800}, {@private=0xa010102, 0x2}, {@multicast1, 0x2}, {@local, 0x5}]}, @ra={0x94, 0x4}, @end, @timestamp_prespec={0x44, 0x1c, 0xd9, 0x3, 0x9, [{@local, 0x8}, {@empty, 0x6}, {@local, 0x3}]}]}}}}}) (async, rerun: 64) r3 = socket(0x10, 0x803, 0x0) (rerun: 64) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x84, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x1, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x6783, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_MARK={0x10, 0xa, {0x5, 0x6}}]}}]}, 0x84}}, 0x24040084) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x29, 0x5, 0x5, 0x2, 0x46, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @empty, 0x8000, 0x8000, 0x2, 0x7ff}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xac, r1, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x91}, 0x1004) (async) r7 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00000001c0), 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1cb2f1971d00000000001000000000000a000000000000000400040031278f745b70edd6e229df39b7d4095f84b40000000000000006c534d0c06abe5c99bd98f746e91ee0ed103c"], 0x1c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000004c0)={0x0, 0xfffffffffffffe03, &(0x7f00000003c0)={&(0x7f0000002800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x8006}, 0x240004d4) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r11}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) (async, rerun: 32) sendmsg$key(r7, 0x0, 0x0) (async) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x4040) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r12, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) kernel console output (not intermixed with test programs): non:0kB active_file:0kB inactive_file:1564kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 298.604388][T14795] lowmem_reserve[]: 0 0 0 0 0 [ 298.609425][T14795] Node 1 Normal free:3890292kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19472kB local_pcp:12072kB free_cma:0kB [ 298.707174][T14795] lowmem_reserve[]: 0 0 0 0 0 [ 298.712056][T14795] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 298.732714][T14795] Node 0 DMA32: 709*4kB (UME) 411*8kB (UM) 626*16kB (UM) 548*32kB (UME) 339*64kB (UM) 167*128kB (UM) 99*256kB (UM) 61*512kB (UM) 20*1024kB (UM) 6*2048kB (UM) 183*4096kB (UM) = 915660kB [ 298.753887][T14795] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 298.766786][T14795] Node 1 Normal: 205*4kB (UE) 46*8kB (UME) 39*16kB (UME) 73*32kB (UME) 29*64kB (UME) 6*128kB (UME) 4*256kB (UME) 5*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 946*4096kB (M) = 3890292kB [ 298.785347][T14795] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 298.823779][T14795] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 298.856136][T14795] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 298.887645][T14795] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 298.889241][T14865] batadv_slave_1: entered promiscuous mode [ 298.908324][T14795] 44910 total pagecache pages [ 298.924031][T14795] 0 pages in swap cache [ 298.928265][T14795] Free swap = 124996kB [ 298.938211][T14795] Total swap = 124996kB [ 298.942736][T14795] 2097051 pages RAM [ 298.948737][T14795] 0 pages HighMem/MovableOnly [ 298.954220][T14795] 425663 pages reserved [ 298.958586][T14795] 0 pages cma reserved [ 299.565603][T14920] netlink: 'syz.1.2444': attribute type 10 has an invalid length. [ 299.577857][T14920] dummy0: entered promiscuous mode [ 299.583667][T14920] dummy0: entered allmulticast mode [ 299.590748][T14920] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 299.657023][T14928] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 299.721344][T14934] netlink: 'syz.1.2446': attribute type 13 has an invalid length. [ 299.732431][T14934] netlink: 'syz.1.2446': attribute type 17 has an invalid length. [ 300.031301][T14941] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0 [ 300.170228][T14951] tipc: Resetting bearer [ 300.444696][T14968] hsr_slave_1 (unregistering): left promiscuous mode [ 300.967450][T14984] netlink: 'syz.4.2467': attribute type 29 has an invalid length. [ 301.047808][T14988] netlink: 'syz.4.2470': attribute type 14 has an invalid length. [ 302.219103][T15042] __nla_validate_parse: 10 callbacks suppressed [ 302.219119][T15042] netlink: 592 bytes leftover after parsing attributes in process `syz.1.2483'. [ 302.253937][T15041] netlink: 'syz.4.2484': attribute type 1 has an invalid length. [ 302.276335][T15041] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 302.294122][T15041] veth9: entered promiscuous mode [ 302.597107][T15070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2491'. [ 302.666672][T15075] netlink: 'syz.2.2492': attribute type 10 has an invalid length. [ 302.719461][T15079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2494'. [ 302.741875][T15081] netlink: 'syz.4.2495': attribute type 2 has an invalid length. [ 302.749824][T15081] netlink: 'syz.4.2495': attribute type 8 has an invalid length. [ 302.760025][T15081] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2495'. [ 302.809691][T15086] tipc: Enabling of bearer rejected, already enabled [ 302.824355][T15086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2497'. [ 302.859694][T15090] tipc: Enabled bearer , priority 0 [ 302.868347][T15090] syzkaller0: entered promiscuous mode [ 302.874133][T15090] syzkaller0: entered allmulticast mode [ 302.886356][T15090] tipc: Resetting bearer [ 302.895203][T15089] tipc: Resetting bearer [ 302.902636][T15089] tipc: Disabling bearer [ 303.202361][T15105] netlink: 'syz.2.2503': attribute type 21 has an invalid length. [ 303.219886][T15105] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2503'. [ 303.260388][T15112] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2504'. [ 303.358791][T15126] netlink: 'syz.1.2507': attribute type 1 has an invalid length. [ 303.369270][T15126] netlink: 'syz.1.2507': attribute type 4 has an invalid length. [ 303.564635][T15141] tipc: Enabled bearer , priority 0 [ 303.577393][T15141] syzkaller0: entered promiscuous mode [ 303.583317][T15141] syzkaller0: entered allmulticast mode [ 303.599081][T15141] tipc: Resetting bearer [ 303.606817][T15139] tipc: Resetting bearer [ 303.618496][T15139] tipc: Disabling bearer [ 303.652848][T15149] netlink: 592 bytes leftover after parsing attributes in process `syz.4.2512'. [ 303.759372][T15158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2517'. [ 303.769752][T15158] openvswitch: netlink: nsh attribute has 5276 unknown bytes. [ 303.781392][T15158] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.829556][T15163] siw: device registration error -23 [ 304.215062][T15180] netlink: 'syz.1.2524': attribute type 10 has an invalid length. [ 304.522003][T15197] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2529'. [ 304.709137][T15216] nbd: nbd1 already in use [ 304.715524][T15216] nbd: nbd1 already in use [ 305.010888][T15234] tipc: Enabling of bearer rejected, failed to enable media [ 305.203155][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 305.723595][T15250] tipc: Enabled bearer , priority 10 [ 305.985518][T15278] vlan2: entered promiscuous mode [ 305.990613][T15278] gretap0: entered promiscuous mode [ 306.061589][T15285] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 306.090923][T15285] netlink: 'syz.1.2557': attribute type 1 has an invalid length. [ 306.622441][T15330] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.902784][T15348] geneve0: entered promiscuous mode [ 306.910376][ T8661] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.918894][ T8661] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.927903][ T8661] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.936820][ T8661] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.237194][T15364] __nla_validate_parse: 8 callbacks suppressed [ 307.237210][T15364] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2581'. [ 307.310285][T15368] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2583'. [ 307.369814][T15368] batman_adv: batadv0: Adding interface: ip6gretap1 [ 307.378007][T15368] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.405058][T15368] batman_adv: batadv0: Interface activated: ip6gretap1 [ 307.496614][T15372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2584'. [ 307.506730][T15372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2584'. [ 307.515869][T15372] netlink: 'syz.2.2584': attribute type 18 has an invalid length. [ 307.661086][T15384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2588'. [ 307.672397][T15384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2588'. [ 307.732003][T15381] netlink: 'syz.2.2587': attribute type 29 has an invalid length. [ 307.750882][T15381] netlink: 'syz.2.2587': attribute type 29 has an invalid length. [ 308.098843][T15409] bond0: (slave team0): Releasing backup interface [ 308.131632][T15409] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2596'. [ 308.143808][T15409] netlink: 'syz.1.2596': attribute type 10 has an invalid length. [ 308.152502][T15409] bond0: (slave wlan1): Opening slave failed [ 308.297608][T15418] bridge_slave_0: default FDB implementation only supports local addresses [ 309.123784][ T5869] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 309.131099][ T5869] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 309.139255][ T5869] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 309.147549][ T5869] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 309.156532][ T5869] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 309.167328][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 309.175258][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 309.182623][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 309.191223][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 309.200744][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 309.292731][T15431] chnl_net:caif_netlink_parms(): no params data found [ 309.338654][T15431] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.346302][T15431] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.354267][T15431] bridge_slave_0: entered allmulticast mode [ 309.361041][T15431] bridge_slave_0: entered promiscuous mode [ 309.368908][T15431] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.376547][T15431] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.383856][T15431] bridge_slave_1: entered allmulticast mode [ 309.390509][T15431] bridge_slave_1: entered promiscuous mode [ 309.411566][T15431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.424316][T15431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.448907][T15431] team0: Port device team_slave_0 added [ 309.456411][T15431] team0: Port device team_slave_1 added [ 309.477457][T15431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.485046][T15431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.512109][T15431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.524470][T15431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.531447][T15431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.557956][T15431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.590257][T15431] hsr_slave_0: entered promiscuous mode [ 309.597019][T15431] hsr_slave_1: entered promiscuous mode [ 309.676590][T15431] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 309.686890][T15431] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 309.697431][T15431] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 309.706334][T15431] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 309.730031][T15431] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.737201][T15431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.744555][T15431] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.751645][T15431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.789588][T15431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.804534][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.812126][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.828603][T15431] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.841939][ T6134] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.849217][ T6134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.865401][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.865500][T15447] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2604'. [ 309.872678][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.956340][T15450] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2605'. [ 310.096791][T15431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.191291][T15474] pimreg: entered allmulticast mode [ 310.251810][T15478] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2611'. [ 310.322083][T15431] veth0_vlan: entered promiscuous mode [ 310.334409][T15431] veth1_vlan: entered promiscuous mode [ 310.355433][T15431] veth0_macvtap: entered promiscuous mode [ 310.364545][T15431] veth1_macvtap: entered promiscuous mode [ 310.378609][T15431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.390485][T15431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.405473][ T71] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.415285][ T71] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.425435][ T71] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.434467][ T6134] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.476176][ T8661] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.487205][ T8661] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.505193][ T6134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.514588][ T6134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.610433][T15484] nbd: couldn't find device at index 0 [ 311.049317][ T30] audit: type=1800 audit(1755903552.104:7): pid=15509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2621" name="x000000000000000400000000000000000000004" dev="tmpfs" ino=66 res=0 errno=0 [ 311.076198][ T30] audit: type=1804 audit(1755903552.104:8): pid=15509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.2621" name="x000000000000000400000000000000000000004" dev="tmpfs" ino=66 res=1 errno=0 [ 311.283654][ T51] Bluetooth: hci5: command tx timeout [ 311.337992][T15528] veth0: entered promiscuous mode [ 311.347765][T15527] veth0: left promiscuous mode [ 313.363029][ T51] Bluetooth: hci5: command tx timeout [ 313.874098][ T5869] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 313.881843][ T5869] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 313.890714][ T5869] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 313.902455][ T5869] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 313.910085][ T5869] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 313.926256][T15563] __nla_validate_parse: 5 callbacks suppressed [ 313.926277][T15563] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2637'. [ 314.064132][T15571] delete_channel: no stack [ 314.085307][T15571] delete_channel: no stack [ 314.207234][T15560] chnl_net:caif_netlink_parms(): no params data found [ 314.312769][T15560] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.327848][T15560] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.338053][T15560] bridge_slave_0: entered allmulticast mode [ 314.348051][T15560] bridge_slave_0: entered promiscuous mode [ 314.360805][T15560] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.368323][T15560] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.376350][T15560] bridge_slave_1: entered allmulticast mode [ 314.383033][T15560] bridge_slave_1: entered promiscuous mode [ 314.419577][T15560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.433150][T15560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.468536][T15589] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2642'. [ 314.477520][T15560] team0: Port device team_slave_0 added [ 314.480099][T15560] team0: Port device team_slave_1 added [ 314.526123][T15560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.533310][T15560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.562679][T15560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.579157][T15560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.587102][T15560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.614803][T15560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.665611][T15560] hsr_slave_0: entered promiscuous mode [ 314.666372][T15596] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2644'. [ 314.672080][T15560] hsr_slave_1: entered promiscuous mode [ 314.688264][T15560] debugfs: 'hsr0' already exists in 'hsr' [ 314.694504][T15560] Cannot create hsr debugfs directory [ 314.868591][T15560] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 314.882188][T15560] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 314.895573][T15560] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 314.906715][T15560] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 314.944441][T15560] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.951657][T15560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.959145][T15560] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.966322][T15560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.978430][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.986774][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.058283][T15560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.096356][T15560] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.110537][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.117717][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.150186][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.157371][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.223214][T15606] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2645'. [ 315.232224][T15606] openvswitch: netlink: Flow key attr not present in new flow. [ 315.255370][T15606] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2645'. [ 315.268072][T15606] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2645'. [ 315.350567][T15614] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2646'. [ 315.365111][T15616] syz.5.2646: vmalloc error: size 4722688, failed to allocated page array size 9224, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 315.379822][T15560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.385650][T15616] CPU: 1 UID: 0 PID: 15616 Comm: syz.5.2646 Not tainted syzkaller #0 PREEMPT(full) [ 315.385675][T15616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 315.385687][T15616] Call Trace: [ 315.385694][T15616] [ 315.385701][T15616] dump_stack_lvl+0x189/0x250 [ 315.385730][T15616] ? __pfx_dump_stack_lvl+0x10/0x10 [ 315.385751][T15616] ? __pfx__printk+0x10/0x10 [ 315.385772][T15616] ? lock_release+0x4b/0x3e0 [ 315.385798][T15616] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 315.385828][T15616] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 315.385849][T15616] warn_alloc+0x214/0x310 [ 315.385877][T15616] ? __pfx_warn_alloc+0x10/0x10 [ 315.385905][T15616] ? __get_vm_area_node+0x28f/0x300 [ 315.385929][T15616] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 315.385955][T15616] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 315.385980][T15616] ? rcu_is_watching+0x15/0xb0 [ 315.386005][T15616] ? futex_unqueue+0x22/0x240 [ 315.386023][T15616] ? futex_unqueue+0x22/0x240 [ 315.386042][T15616] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 315.386065][T15616] ? __futex_wait+0x1d1/0x3e0 [ 315.386089][T15616] ? __futex_wait+0x34f/0x3e0 [ 315.386116][T15616] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 315.386138][T15616] __vmalloc_noprof+0xb1/0xf0 [ 315.386162][T15616] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 315.386186][T15616] bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 315.386211][T15616] bpf_prog_alloc+0x3c/0x1a0 [ 315.386235][T15616] bpf_prog_load+0x735/0x1930 [ 315.386263][T15616] ? __pfx_bpf_prog_load+0x10/0x10 [ 315.386286][T15616] ? __might_fault+0xb0/0x130 [ 315.386313][T15616] ? lock_release+0x4b/0x3e0 [ 315.386336][T15616] ? __might_fault+0xb0/0x130 [ 315.386358][T15616] ? __might_fault+0xcc/0x130 [ 315.386380][T15616] ? bpf_lsm_bpf+0x9/0x20 [ 315.386401][T15616] ? security_bpf+0x7e/0x300 [ 315.386425][T15616] __sys_bpf+0x528/0x870 [ 315.386447][T15616] ? __pfx___sys_bpf+0x10/0x10 [ 315.386476][T15616] ? rcu_is_watching+0x15/0xb0 [ 315.386496][T15616] __x64_sys_bpf+0x7c/0x90 [ 315.386516][T15616] do_syscall_64+0xfa/0x3b0 [ 315.386533][T15616] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.386550][T15616] ? clear_bhb_loop+0x60/0xb0 [ 315.386569][T15616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.386586][T15616] RIP: 0033:0x7f62f818ebe9 [ 315.386602][T15616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.386618][T15616] RSP: 002b:00007f62f63f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 315.386638][T15616] RAX: ffffffffffffffda RBX: 00007f62f83b6180 RCX: 00007f62f818ebe9 [ 315.386657][T15616] RDX: 0000000000000094 RSI: 00002000000007c0 RDI: 0000000000000005 [ 315.386670][T15616] RBP: 00007f62f8211e19 R08: 0000000000000000 R09: 0000000000000000 [ 315.386681][T15616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.386693][T15616] R13: 00007f62f83b6218 R14: 00007f62f83b6180 R15: 00007fffb26a1748 [ 315.386713][T15616] [ 315.386774][T15616] Mem-Info: [ 315.399081][T15614] xfrm1: entered promiscuous mode [ 315.433361][T15616] active_anon:7831 inactive_anon:0 isolated_anon:0 [ 315.433361][T15616] active_file:3636 inactive_file:39927 isolated_file:0 [ 315.433361][T15616] unevictable:768 dirty:203 writeback:0 [ 315.433361][T15616] slab_reclaimable:13316 slab_unreclaimable:212075 [ 315.433361][T15616] mapped:39652 shmem:1370 pagetables:1101 [ 315.433361][T15616] sec_pagetables:0 bounce:0 [ 315.433361][T15616] kernel_misc_reclaimable:0 [ 315.433361][T15616] free:1175930 free_pcp:16427 free_cma:0 [ 315.447414][ T51] Bluetooth: hci5: command tx timeout [ 315.450400][T15616] Node 0 active_anon:31324kB inactive_anon:0kB active_file:14544kB inactive_file:159508kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:158608kB dirty:812kB writeback:0kB shmem:3944kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14092kB pagetables:4288kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 315.506953][T15614] xfrm1: entered allmulticast mode [ 315.516183][T15616] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 315.745645][T15560] veth0_vlan: entered promiscuous mode [ 315.746682][T15616] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 315.852577][T15616] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 315.852814][T15560] veth1_vlan: entered promiscuous mode [ 315.858915][T15616] Node 0 DMA32 free:798044kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31376kB inactive_anon:0kB active_file:14544kB inactive_file:157944kB unevictable:1536kB writepending:808kB present:3129332kB managed:2557448kB mlocked:0kB bounce:0kB free_pcp:45728kB local_pcp:29464kB free_cma:0kB [ 315.901040][T15616] lowmem_reserve[]: 0 0 1 1 1 [ 315.906053][T15616] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1564kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 315.918254][T15560] veth0_macvtap: entered promiscuous mode [ 315.942417][ T51] Bluetooth: hci6: command tx timeout [ 315.957088][T15560] veth1_macvtap: entered promiscuous mode [ 315.974792][T15560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.983077][T15616] lowmem_reserve[]: 0 0 0 0 0 [ 315.989462][T15616] Node 1 Normal free:3890292kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19472kB local_pcp:7400kB free_cma:0kB [ 316.025812][T15616] lowmem_reserve[]: 0 0 0 0 0 [ 316.030584][T15616] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB [ 316.035051][T15560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.049604][T15616] 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 316.059977][T15616] Node 0 DMA32: 853*4kB (UME) 371*8kB (UE) 22*16kB (UME) 2*32kB (UE) 2*64kB (UM) 60*128kB (UME) 112*256kB (UM) 52*512kB (UME) 3*1024kB (UM) 6*2048kB (UME) 174*4096kB (M) = 797964kB [ 316.082641][ T71] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.098467][T15616] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 316.112384][T15616] Node 1 Normal: 205*4kB (UE) 46*8kB (UME) 39*16kB (UME) 73*32kB (UME) 29*64kB (UME) 6*128kB (UME) 4*256kB (UME) 5*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 946*4096kB (M) = 3890292kB [ 316.115027][ T71] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.134732][T15616] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 316.158545][T15616] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 316.162755][ T71] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.169032][T15616] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 316.187731][T15616] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 316.195717][ T71] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.198496][T15616] 44919 total pagecache pages [ 316.215465][T15616] 0 pages in swap cache [ 316.219852][T15616] Free swap = 124996kB [ 316.248446][T15616] Total swap = 124996kB [ 316.252653][T15616] 2097051 pages RAM [ 316.257356][T15616] 0 pages HighMem/MovableOnly [ 316.262522][T15616] 425663 pages reserved [ 316.267693][T15616] 0 pages cma reserved [ 316.291128][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.303484][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.344379][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.359183][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.919009][T15651] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2653'. [ 317.022223][T15665] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.068171][T15665] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.081587][T15663] "syz.2.2655" (15663) uses obsolete ecb(arc4) skcipher [ 317.117473][T15665] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.176942][T15665] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.226292][ T8661] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.239912][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.252401][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.267360][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.523444][ T51] Bluetooth: hci5: command tx timeout [ 317.972593][T15689] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.003743][ T51] Bluetooth: hci6: command tx timeout [ 318.159541][T15692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2663'. [ 318.170846][T15692] netlink: 'syz.2.2663': attribute type 1 has an invalid length. [ 318.179054][T15692] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2663'. [ 318.354722][T15698] netlink: 'syz.2.2666': attribute type 1 has an invalid length. [ 318.384429][T15698] bond6: (slave gretap1): making interface the new active one [ 318.392571][T15698] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 318.413450][T15698] netlink: 'syz.2.2666': attribute type 10 has an invalid length. [ 318.421592][T15698] syz_tun: entered promiscuous mode [ 318.431339][T15698] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 318.510574][T15701] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.687194][T15689] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.702580][T15716] netlink: 'syz.2.2672': attribute type 4 has an invalid length. [ 318.764592][T15689] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.817449][T15689] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.875432][ T36] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.887282][ T71] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.901577][ T6134] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.914533][ T6134] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.341169][T15729] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 319.906755][T15748] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 320.083433][ T51] Bluetooth: hci6: command tx timeout [ 320.400119][T15767] __nla_validate_parse: 1 callbacks suppressed [ 320.400140][T15767] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2684'. [ 320.650431][T15773] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2687'. [ 320.682042][T15773] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2687'. [ 320.830038][T15786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2690'. [ 320.839950][T15786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2690'. [ 321.612806][T15797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2694'. [ 321.631307][T15797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2694'. [ 321.755284][T15799] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2696'. [ 321.782572][T15799] netem: invalid attributes len -16 [ 321.791509][T15799] netem: change failed [ 321.810122][T15801] tipc: Enabled bearer , priority 0 [ 321.862542][ T5869] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 321.875171][ T5869] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 321.882569][ T5869] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 321.903956][ T5869] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 321.919811][ T5869] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 322.111495][T15815] delete_channel: no stack [ 322.160673][T15819] netlink: 'syz.5.2701': attribute type 12 has an invalid length. [ 322.168644][ T5869] Bluetooth: hci6: command tx timeout [ 322.176205][T15819] netlink: 'syz.5.2701': attribute type 29 has an invalid length. [ 322.184533][T15819] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2701'. [ 322.205960][T15810] block nbd3: server does not support multiple connections per device. [ 322.226537][T15810] block nbd3: shutting down sockets [ 322.268277][T15803] chnl_net:caif_netlink_parms(): no params data found [ 322.363890][T15838] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.410137][T15803] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.418976][T15803] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.426446][T15803] bridge_slave_0: entered allmulticast mode [ 322.433478][T15803] bridge_slave_0: entered promiscuous mode [ 322.440935][T15803] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.448489][T15803] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.457265][T15803] bridge_slave_1: entered allmulticast mode [ 322.464510][T15803] bridge_slave_1: entered promiscuous mode [ 322.487600][T15803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.497120][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 322.508532][T15803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.532196][T15803] team0: Port device team_slave_0 added [ 322.540921][T15803] team0: Port device team_slave_1 added [ 322.559854][T15803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.567172][T15803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.593888][T15803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.606062][T15803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.613687][T15803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.640092][T15803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.669936][T15803] hsr_slave_0: entered promiscuous mode [ 322.676876][T15803] hsr_slave_1: entered promiscuous mode [ 322.683271][T15803] debugfs: 'hsr0' already exists in 'hsr' [ 322.689010][T15803] Cannot create hsr debugfs directory [ 322.768384][T15803] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 322.777760][T15803] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 322.788626][T15803] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 322.798095][T15803] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 322.850091][T15803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.867407][T15803] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.878037][ T6134] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.885342][ T6134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.898609][ T8661] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.905701][ T8661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.923880][T11572] tipc: Node number set to 2382849102 [ 323.037400][T15803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.187060][T15803] veth0_vlan: entered promiscuous mode [ 323.199227][T15803] veth1_vlan: entered promiscuous mode [ 323.218673][T15803] veth0_macvtap: entered promiscuous mode [ 323.228301][T15803] veth1_macvtap: entered promiscuous mode [ 323.241973][T15803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.254682][T15803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.269333][ T6134] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.278600][ T6134] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.288667][ T6134] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.298283][ T36] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.341243][ T6134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.349845][ T6134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.375211][ T6134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.383497][ T6134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.003863][ T5869] Bluetooth: hci7: command tx timeout [ 326.083690][ T5869] Bluetooth: hci7: command tx timeout [ 328.163439][ T5869] Bluetooth: hci7: command tx timeout [ 330.243425][ T5869] Bluetooth: hci7: command tx timeout [ 357.683091][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 375.304941][T15869] bond0: default FDB implementation only supports local addresses [ 375.315706][T15865] netlink: 'syz.6.2707': attribute type 39 has an invalid length. [ 375.337779][T15868] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2710'. [ 375.465641][T15871] syzkaller0: entered promiscuous mode [ 375.480481][T15871] syzkaller0: entered allmulticast mode [ 375.528952][T15877] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2715'. [ 375.550085][T15875] netem: incorrect gi model size [ 375.572514][T15875] netem: change failed [ 375.621511][ T51] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 375.630952][ T51] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 375.644601][ T51] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 375.659301][ T51] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 375.679467][ T51] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 375.794599][T15894] netlink: 'syz.5.2717': attribute type 3 has an invalid length. [ 375.802532][T15894] netlink: 'syz.5.2717': attribute type 1 has an invalid length. [ 375.811019][T15894] netlink: 220 bytes leftover after parsing attributes in process `syz.5.2717'. [ 376.175900][T15882] chnl_net:caif_netlink_parms(): no params data found [ 376.217889][T15909] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2721'. [ 376.239701][T15908] netlink: 'syz.7.2722': attribute type 10 has an invalid length. [ 376.288110][T15908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.307619][T15908] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 376.375956][T15882] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.387333][T15882] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.397440][T15882] bridge_slave_0: entered allmulticast mode [ 376.419767][T15882] bridge_slave_0: entered promiscuous mode [ 376.430280][T15882] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.441713][T15882] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.462430][T15882] bridge_slave_1: entered allmulticast mode [ 376.471464][T15882] bridge_slave_1: entered promiscuous mode [ 376.521467][T15882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.567342][T15882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.671742][T15924] netlink: 'syz.5.2725': attribute type 1 has an invalid length. [ 376.731413][T15882] team0: Port device team_slave_0 added [ 376.749046][T15882] team0: Port device team_slave_1 added [ 376.842207][T15929] ‚: renamed from bond_slave_0 (while UP) [ 376.872579][T15930] atomic_op ffff88805048f998 conn xmit_atomic 0000000000000000 [ 376.896752][T15882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.903957][T15882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.930336][T15882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.942609][T15882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.949818][T15882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.976281][T15882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.024573][T15929] pimreg3: entered allmulticast mode [ 377.087458][T15929] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2726'. [ 377.139852][T15882] hsr_slave_0: entered promiscuous mode [ 377.149792][T15882] hsr_slave_1: entered promiscuous mode [ 377.160946][T15882] debugfs: 'hsr0' already exists in 'hsr' [ 377.168204][T15882] Cannot create hsr debugfs directory [ 377.226170][T15929] bond0 (unregistering): (slave 5‚): Releasing backup interface [ 377.254629][T15929] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 377.278572][T15929] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 377.314790][T15929] bond0 (unregistering): Released all slaves [ 377.751870][T15882] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 377.763075][ T5869] Bluetooth: hci8: command tx timeout [ 377.804112][T15882] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 377.822466][T15882] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 377.842195][T15882] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 378.061857][T15882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.114130][T15882] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.157981][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.165161][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.266668][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.273914][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.844244][T15882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.451412][T15882] veth0_vlan: entered promiscuous mode [ 379.536848][T15882] veth1_vlan: entered promiscuous mode [ 379.636133][T15882] veth0_macvtap: entered promiscuous mode [ 379.691534][T15882] veth1_macvtap: entered promiscuous mode [ 379.746399][T15882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.790512][T15882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.826658][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.843502][ T5869] Bluetooth: hci8: command 0x041b tx timeout [ 379.878657][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.903184][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.973735][ T8661] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.142719][ T6134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.177707][ T6134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.220314][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.241459][T15964] netlink: 'syz.2.2733': attribute type 4 has an invalid length. [ 380.259436][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.821778][T15880] Set syz1 is full, maxelem 65536 reached [ 380.996703][T15987] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 380.998352][T15988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2737'. [ 381.004177][T15987] IPv6: NLM_F_CREATE should be set when creating new route [ 381.020332][T15987] IPv6: NLM_F_CREATE should be set when creating new route [ 381.039390][T15984] netlink: 'syz.5.2739': attribute type 11 has an invalid length. [ 381.047806][T15984] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2739'. [ 381.068694][T15987] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 381.445921][T16005] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2742'. [ 381.470078][T16005] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 381.552433][T16001] netlink: 452 bytes leftover after parsing attributes in process `syz.2.2743'. [ 381.559100][T16011] netlink: 'syz.6.2744': attribute type 1 has an invalid length. [ 381.724925][T16016] gretap1: entered promiscuous mode [ 381.734906][T16016] bond1: (slave gretap1): making interface the new active one [ 381.744510][T16016] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 381.750173][T16011] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2744'. [ 381.766604][T16019] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2747'. [ 381.884268][T16011] 8021q: adding VLAN 0 to HW filter on device bond1 [ 381.923371][ T51] Bluetooth: hci8: command 0x041b tx timeout [ 382.140637][T16032] netlink: 'syz.8.2752': attribute type 1 has an invalid length. [ 382.184854][T16032] netlink: 244 bytes leftover after parsing attributes in process `syz.8.2752'. [ 382.525017][T16041] netlink: 'syz.7.2756': attribute type 1 has an invalid length. [ 382.609245][T16045] netlink: 'syz.2.2757': attribute type 1 has an invalid length. [ 382.675834][T16045] bond7: (slave gretap2): making interface the new active one [ 382.712782][T16045] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 382.802690][T16045] vlan2: entered allmulticast mode [ 382.819555][T16045] bond7: entered allmulticast mode [ 382.833967][T16045] gretap2: entered allmulticast mode [ 382.841489][T16045] bond7: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 382.903864][T16052] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 382.962424][T16066] netlink: 248 bytes leftover after parsing attributes in process `syz.7.2761'. [ 383.017373][T16069] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2761'. [ 383.037292][T16037] netlink: 'syz.8.2754': attribute type 13 has an invalid length. [ 383.048282][T16037] netlink: 'syz.8.2754': attribute type 17 has an invalid length. [ 383.056906][T16042] netlink: 26 bytes leftover after parsing attributes in process `syz.8.2754'. [ 383.284925][T16081] syzkaller1: entered promiscuous mode [ 383.290450][T16081] syzkaller1: entered allmulticast mode [ 383.575236][T16093] tipc: Started in network mode [ 383.581967][T16093] tipc: Node identity 76ea99ff27d1, cluster identity 4711 [ 383.592498][T16093] tipc: Enabled bearer , priority 0 [ 383.609435][T16092] tipc: Disabling bearer [ 383.932249][T16123] tap0: tun_chr_ioctl cmd 2147767521 [ 384.003697][ T5869] Bluetooth: hci8: command 0x041b tx timeout [ 384.925639][T16182] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.933394][T16182] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.009689][T16185] netlink: 'syz.2.2792': attribute type 6 has an invalid length. [ 385.155001][T16182] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.174976][T16182] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.191199][T16191] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 385.352666][ T6134] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.362576][ T6134] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.387102][ T6134] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.449009][ T6134] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.100398][ T5869] Bluetooth: hci8: command 0x041b tx timeout [ 386.152081][T16244] __nla_validate_parse: 10 callbacks suppressed [ 386.152104][T16244] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2810'. [ 386.250127][T16248] tipc: Started in network mode [ 386.264907][T16248] tipc: Node identity c6594c57a47d, cluster identity 4711 [ 386.272458][T16248] tipc: Enabled bearer , priority 0 [ 386.285836][T16248] syzkaller0: entered promiscuous mode [ 386.291458][T16248] syzkaller0: entered allmulticast mode [ 386.316483][T16248] tipc: Resetting bearer [ 386.329694][T16247] tipc: Resetting bearer [ 386.352692][T16247] tipc: Disabling bearer [ 386.358399][T16258] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2814'. [ 386.379163][T16260] netlink: 'syz.8.2815': attribute type 12 has an invalid length. [ 386.387941][T16260] netlink: 'syz.8.2815': attribute type 29 has an invalid length. [ 386.396497][T16260] netlink: 148 bytes leftover after parsing attributes in process `syz.8.2815'. [ 386.407422][T16260] netlink: 43 bytes leftover after parsing attributes in process `syz.8.2815'. [ 386.587255][T16275] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2818'. [ 386.652124][T16280] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2822'. [ 386.661981][T16280] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2822'. [ 386.733000][T16285] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2824'. [ 387.011257][T16245] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 387.019265][T16245] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 387.041899][T16245] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 387.048780][T16245] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 387.069572][T16245] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 387.075899][T16245] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 387.097140][T16245] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 387.103765][T16245] Bluetooth: hci8: Error when powering off device on rfkill (-4) [ 387.277304][T16312] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71) [ 387.301182][T16319] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2835'. [ 387.475947][T16337] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2840'. [ 387.641014][T16337] pim6reg: entered allmulticast mode [ 387.646891][T16341] pim6reg: left allmulticast mode [ 387.932268][T16369] netlink: 'syz.2.2848': attribute type 1 has an invalid length. [ 388.157852][T16391] rdma_rxe: rxe_newlink: failed to add lo [ 388.301195][T16391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.335327][T16391] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.377403][T16391] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 388.573867][T16420] netlink: 'syz.6.2862': attribute type 4 has an invalid length. [ 388.574260][T16419] netlink: 'syz.6.2862': attribute type 4 has an invalid length. [ 389.177366][T16461] syzkaller1: entered promiscuous mode [ 389.191843][T16461] syzkaller1: entered allmulticast mode [ 390.122764][T16506] openvswitch: netlink: Actions may not be safe on all matching packets [ 390.162487][T16506] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 390.522218][T16536] ip6tnl0: entered promiscuous mode [ 390.535504][T16536] ip6tnl0: entered allmulticast mode [ 390.575412][T16535] netlink: 'syz.6.2903': attribute type 13 has an invalid length. [ 390.622551][T16541] bridge1: entered promiscuous mode [ 390.631337][T16535] netlink: 'syz.6.2903': attribute type 17 has an invalid length. [ 390.653527][T16535] netlink: 'syz.6.2903': attribute type 27 has an invalid length. [ 391.060517][ T5862] IPVS: starting estimator thread 0... [ 391.172963][T16569] IPVS: using max 41 ests per chain, 98400 per kthread [ 391.230299][T16580] __nla_validate_parse: 12 callbacks suppressed [ 391.230323][T16580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2913'. [ 391.455360][T16586] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2914'. [ 391.505974][T16594] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2918'. [ 391.578186][T16594] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2918'. [ 391.600173][T16602] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2917'. [ 391.748959][T16615] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2919'. [ 391.987748][T16628] netlink: 'syz.8.2924': attribute type 1 has an invalid length. [ 392.002489][T16628] netlink: 432 bytes leftover after parsing attributes in process `syz.8.2924'. [ 392.060845][T16632] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2925'. [ 392.079066][T16632] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 392.103933][T16628] netlink: 'syz.8.2924': attribute type 1 has an invalid length. [ 392.112580][T16628] netlink: 432 bytes leftover after parsing attributes in process `syz.8.2924'. [ 392.127428][T16632] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2925'. [ 392.198346][T16641] IPVS: set_ctl: invalid protocol: 128 0.32.0.0:65535 [ 392.893118][T11572] IPVS: starting estimator thread 0... [ 392.899733][T16679] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 392.983498][T16681] IPVS: using max 43 ests per chain, 103200 per kthread [ 393.046901][T16685] blkio.reset_stats is deprecated [ 393.070605][T16685] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20003 [ 393.142223][T16692] netlink: 'syz.2.2940': attribute type 15 has an invalid length. [ 393.318671][T16711] netlink: 'syz.5.2948': attribute type 9 has an invalid length. [ 393.808377][T16750] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 393.989789][T16763] netlink: 'syz.5.2963': attribute type 11 has an invalid length. [ 394.662472][ T5861] bond0: (slave syz_tun): Releasing backup interface [ 394.717185][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 394.727931][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 394.735295][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 394.745312][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 394.753992][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 394.767043][ T5869] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 394.774756][ T5869] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 394.782037][ T5869] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 394.790612][ T5869] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 394.798412][ T5869] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 394.891292][T16797] chnl_net:caif_netlink_parms(): no params data found [ 394.940423][T16797] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.947745][T16797] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.955094][T16797] bridge_slave_0: entered allmulticast mode [ 394.961794][T16797] bridge_slave_0: entered promiscuous mode [ 394.969659][T16797] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.976845][T16797] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.985599][T16797] bridge_slave_1: entered allmulticast mode [ 394.992704][T16797] bridge_slave_1: entered promiscuous mode [ 395.015886][T16797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.027070][T16797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.052017][T16797] team0: Port device team_slave_0 added [ 395.059696][T16797] team0: Port device team_slave_1 added [ 395.080949][T16797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.088449][T16797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.116099][T16797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.128267][T16797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.135774][T16797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.162031][T16797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.214040][T16797] hsr_slave_0: entered promiscuous mode [ 395.220438][T16797] hsr_slave_1: entered promiscuous mode [ 395.228448][T16797] debugfs: 'hsr0' already exists in 'hsr' [ 395.234527][T16797] Cannot create hsr debugfs directory [ 395.341704][T16797] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.387048][T16797] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.438896][T16797] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.490398][T16797] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.575785][T16797] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 395.595870][T16797] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 395.609804][T16797] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 395.623183][T16797] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 395.722005][T16797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.745183][T16797] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.760545][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.768045][ T5952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.783006][ T8661] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.790234][ T8661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.995430][T16797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.044504][T16797] veth0_vlan: entered promiscuous mode [ 396.059545][T16797] veth1_vlan: entered promiscuous mode [ 396.097917][T16797] veth0_macvtap: entered promiscuous mode [ 396.108794][T16797] veth1_macvtap: entered promiscuous mode [ 396.127693][T16797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.147980][T16797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.176821][ T6134] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.191686][ T6134] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.219798][ T6134] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.234873][ T6134] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.254648][T16830] __nla_validate_parse: 20 callbacks suppressed [ 396.254669][T16830] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2979'. [ 396.274699][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.282544][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.337099][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.346568][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.479513][T16849] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2984'. [ 396.491536][T16849] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 396.694332][T16864] mac80211_hwsim hwsim42 wlan0: entered promiscuous mode [ 396.723360][T16864] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 396.891461][ T51] Bluetooth: hci3: command tx timeout [ 396.926721][T16875] syzkaller1: entered promiscuous mode [ 396.932588][T16875] syzkaller1: entered allmulticast mode [ 396.944368][T16872] netlink: 'syz.5.2990': attribute type 4 has an invalid length. [ 396.948789][T16877] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2991'. [ 396.962455][T16877] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2991'. [ 397.071006][T16879] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2992'. [ 397.172435][T16889] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 397.184776][T16889] netlink: 'syz.5.2995': attribute type 1 has an invalid length. [ 397.207125][T16889] bond3: entered promiscuous mode [ 397.212450][T16889] 8021q: adding VLAN 0 to HW filter on device bond3 [ 397.223675][T16889] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2995'. [ 397.237282][T16889] batadv1: entered promiscuous mode [ 397.242543][T16889] batadv1: entered allmulticast mode [ 397.249913][T16889] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 397.259244][T16889] bond3: (slave batadv1): making interface the new active one [ 397.267806][T16889] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 397.321926][T16892] lo: entered allmulticast mode [ 397.398246][T16889] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2995'. [ 397.810609][T16921] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3003'. [ 397.838649][T16921] netlink: 'syz.8.3003': attribute type 2 has an invalid length. [ 397.891319][T16927] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3005'. [ 398.023070][T16934] pimreg: entered allmulticast mode [ 398.037441][T16934] pimreg: left allmulticast mode [ 398.059055][T16937] netlink: 224 bytes leftover after parsing attributes in process `syz.8.3007'. [ 398.749268][T16941] netlink: 'syz.5.3008': attribute type 1 has an invalid length. [ 398.795529][T16944] netlink: 'syz.5.3009': attribute type 153 has an invalid length. [ 398.963126][ T51] Bluetooth: hci3: command tx timeout [ 399.268281][T16966] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 399.275563][T16966] IPv6: NLM_F_CREATE should be set when creating new route [ 399.282923][T16966] IPv6: NLM_F_CREATE should be set when creating new route [ 399.817420][T16990] tipc: Started in network mode [ 399.822398][T16990] tipc: Node identity 36151f17109d, cluster identity 4711 [ 399.830032][T16990] tipc: Enabled bearer , priority 0 [ 399.838630][T16990] syzkaller0: entered promiscuous mode [ 399.844564][T16990] syzkaller0: entered allmulticast mode [ 399.859073][T16990] tipc: Resetting bearer [ 399.868314][T16989] tipc: Resetting bearer [ 399.878258][T16989] tipc: Disabling bearer [ 400.266780][T17015] netlink: 'syz.2.3032': attribute type 8 has an invalid length. [ 400.832224][T17049] tipc: Enabled bearer , priority 0 [ 400.841837][T17049] syzkaller0: entered promiscuous mode [ 400.847914][T17049] syzkaller0: entered allmulticast mode [ 400.871593][T17049] tipc: Resetting bearer [ 400.911745][T17049] tipc: Resetting bearer [ 400.922074][T17049] tipc: Disabling bearer [ 401.043892][ T51] Bluetooth: hci3: command tx timeout [ 401.139948][T17074] syzkaller0: entered promiscuous mode [ 401.145735][T17074] syzkaller0: entered allmulticast mode [ 401.481056][T17086] netlink: 'syz.5.3054': attribute type 7 has an invalid length. [ 401.489905][T17086] __nla_validate_parse: 11 callbacks suppressed [ 401.489929][T17086] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3054'. [ 402.078085][T17099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3059'. [ 402.188972][T17102] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 402.197036][T17102] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 402.239070][T17103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3060'. [ 403.083891][T17111] netlink: 'syz.2.3062': attribute type 11 has an invalid length. [ 403.091805][T17111] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3062'. [ 403.123842][ T51] Bluetooth: hci3: command tx timeout [ 403.331811][T17126] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3067'. [ 403.437447][T17139] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3071'. [ 403.447288][T17139] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3071'. [ 403.579849][T17146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3072'. [ 403.589286][T17146] IPv6: Can't replace route, no match found [ 404.475573][T17156] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3076'. [ 404.539116][T17155] raw_sendmsg: syz.5.3074 forgot to set AF_INET. Fix it! [ 404.612270][T17159] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3077'. [ 404.648243][T17159] 8021q: adding VLAN 0 to HW filter on device bond1 [ 404.668960][T17165] netlink: 'syz.5.3079': attribute type 1 has an invalid length. [ 404.677860][T17165] netlink: 'syz.5.3079': attribute type 1 has an invalid length. [ 404.739468][T17159] 8021q: adding VLAN 0 to HW filter on device bond1 [ 404.775293][T17159] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 404.787382][T17159] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 405.790063][T17166] batman_adv: batadv0: Adding interface: ip6gretap1 [ 405.800794][T17166] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.831355][T17166] batman_adv: batadv0: Interface activated: ip6gretap1 [ 406.106529][T17189] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 406.239116][ T5869] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 406.248264][ T5869] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 406.256117][ T5869] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 406.271572][ T5869] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 406.279714][ T5869] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 406.452067][T17194] chnl_net:caif_netlink_parms(): no params data found [ 406.490991][T17208] netlink: 'syz.5.3090': attribute type 2 has an invalid length. [ 406.528535][T17208] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.542339][T17194] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.549886][T17194] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.557806][T17194] bridge_slave_0: entered allmulticast mode [ 406.567978][T17194] bridge_slave_0: entered promiscuous mode [ 406.579821][T17208] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.595516][T17194] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.602774][T17194] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.610986][T17194] bridge_slave_1: entered allmulticast mode [ 406.619905][T17194] bridge_slave_1: entered promiscuous mode [ 406.641214][T17208] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.667574][T17194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.679310][T17194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.704842][T17208] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.731043][T17194] team0: Port device team_slave_0 added [ 406.740029][T17194] team0: Port device team_slave_1 added [ 406.768867][T17194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.776638][T17194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.805696][T17194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.819943][T17194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.828022][T17194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.854390][T17194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.883953][ T5952] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.906344][ T1114] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.928387][T17194] hsr_slave_0: entered promiscuous mode [ 406.935159][T17194] hsr_slave_1: entered promiscuous mode [ 406.941237][T17194] debugfs: 'hsr0' already exists in 'hsr' [ 406.947225][T17194] Cannot create hsr debugfs directory [ 406.962319][ T1114] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.990321][ T1114] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.132747][T17194] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 407.153528][T17194] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 407.173544][T17194] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 407.188391][T17194] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 407.277396][T17194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.298436][T17194] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.317742][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.324922][ T5952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.363759][ T8661] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.370904][ T8661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.440084][T17214] __nla_validate_parse: 10 callbacks suppressed [ 407.440107][T17214] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3091'. [ 407.477537][T17214] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3091'. [ 407.489467][T17214] netlink: 'syz.5.3091': attribute type 13 has an invalid length. [ 407.498047][T17214] netlink: 'syz.5.3091': attribute type 17 has an invalid length. [ 407.595537][T17214] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 407.814363][T17194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.212096][T17194] veth0_vlan: entered promiscuous mode [ 408.225298][T17194] veth1_vlan: entered promiscuous mode [ 408.259766][T17194] veth0_macvtap: entered promiscuous mode [ 408.279550][T17194] veth1_macvtap: entered promiscuous mode [ 408.301019][T17194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.315317][T17194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.323459][ T51] Bluetooth: hci9: command tx timeout [ 408.338446][ T71] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.350716][ T71] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.373720][ T71] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.385540][ T71] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.426624][T17256] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3096'. [ 408.446945][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.463055][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.481267][T17258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3097'. [ 408.492689][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.507683][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.558637][T17260] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3098'. [ 408.561154][T17262] netlink: 'syz.9.3082': attribute type 12 has an invalid length. [ 408.571991][T17260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3098'. [ 408.577822][T17262] netlink: 9472 bytes leftover after parsing attributes in process `syz.9.3082'. [ 408.689050][T17264] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.696613][T17264] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.708698][T17272] netlink: 'syz.9.3100': attribute type 1 has an invalid length. [ 409.001097][T17264] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 409.034728][T17264] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 409.192104][ T6134] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.231406][ T6134] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.240605][ T6134] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.276114][ T6134] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.378692][T17289] netlink: 'syz.5.3104': attribute type 6 has an invalid length. [ 409.544250][T17292] netlink: 248 bytes leftover after parsing attributes in process `syz.9.3106'. [ 409.687261][ T5869] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 409.695422][ T5869] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 409.703035][ T5869] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 409.711354][ T5869] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 409.722110][ T5869] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 409.890298][T17300] chnl_net:caif_netlink_parms(): no params data found [ 409.955524][T17300] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.962685][T17300] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.970427][T17300] bridge_slave_0: entered allmulticast mode [ 409.978158][T17300] bridge_slave_0: entered promiscuous mode [ 409.988518][T17300] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.996130][T17300] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.004530][T17300] bridge_slave_1: entered allmulticast mode [ 410.011704][T17300] bridge_slave_1: entered promiscuous mode [ 410.040959][T17300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.054986][T17300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.087826][T17300] team0: Port device team_slave_0 added [ 410.097078][T17300] team0: Port device team_slave_1 added [ 410.121295][T17300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.128516][T17300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.154828][T17300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.169572][T17300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.178910][T17300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.205829][T17300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.246195][T17300] hsr_slave_0: entered promiscuous mode [ 410.252735][T17300] hsr_slave_1: entered promiscuous mode [ 410.259836][T17300] debugfs: 'hsr0' already exists in 'hsr' [ 410.267000][T17300] Cannot create hsr debugfs directory [ 410.389238][T17312] tipc: Enabling of bearer rejected, failed to enable media [ 410.402995][ T51] Bluetooth: hci9: command tx timeout [ 410.527154][T17318] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.570971][T17328] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3113'. [ 410.606288][T17333] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3115'. [ 410.606797][ T6134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.643709][ T6134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.759340][T17300] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 410.778130][T17300] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 410.835317][T17300] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 410.865371][T17300] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 410.887040][T17348] bridge_slave_0: left allmulticast mode [ 410.894648][T17348] bridge_slave_0: left promiscuous mode [ 410.900451][T17348] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.910915][T17348] bridge_slave_1: left allmulticast mode [ 410.920312][T17348] bridge_slave_1: left promiscuous mode [ 410.927701][T17348] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.937578][T17348] bond0: (slave bond_slave_0): Releasing backup interface [ 410.947771][T17348] bond0: (slave bond_slave_1): Releasing backup interface [ 410.967987][T17348] team0: Port device team_slave_0 removed [ 410.976864][T17348] team0: Port device team_slave_1 removed [ 410.983738][T17348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.997896][T17348] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.097538][T17353] netlink: 'syz.9.3119': attribute type 10 has an invalid length. [ 411.168080][T17353] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 411.181256][T17366] : entered promiscuous mode [ 411.198504][T17300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.211403][T17369] tipc: Started in network mode [ 411.220304][T17369] tipc: Node identity , cluster identity 4711 [ 411.229380][T17369] tipc: Failed to obtain node identity [ 411.236188][T17369] tipc: Enabling of bearer rejected, failed to enable media [ 411.287982][T17369] syzkaller0: entered promiscuous mode [ 411.294965][T17369] syzkaller0: entered allmulticast mode [ 411.303825][T17373] netlink: 'syz.5.3125': attribute type 21 has an invalid length. [ 411.304786][T17300] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.322793][T17373] netlink: 'syz.5.3125': attribute type 1 has an invalid length. [ 411.332683][ T8661] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.339858][ T8661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.405966][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.413143][ T5952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.558561][T17382] netlink: 'syz.2.3127': attribute type 23 has an invalid length. [ 411.765327][ T51] Bluetooth: hci10: command tx timeout [ 411.822200][T17300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.873317][T17401] syzkaller1: entered promiscuous mode [ 411.878860][T17401] syzkaller1: entered allmulticast mode [ 411.977639][T17405] ip6tnl2: entered promiscuous mode [ 412.009297][T17405] ip6tnl2: entered allmulticast mode [ 412.018933][T17405] team0: Device ip6tnl2 is of different type [ 412.106575][T17300] veth0_vlan: entered promiscuous mode [ 412.482995][ T51] Bluetooth: hci9: command tx timeout [ 412.907088][T17300] veth1_vlan: entered promiscuous mode [ 412.914849][T17414] __nla_validate_parse: 3 callbacks suppressed [ 412.914869][T17414] netlink: 248 bytes leftover after parsing attributes in process `syz.9.3135'. [ 412.956286][T17416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3136'. [ 412.983637][T17416] openvswitch: netlink: Flow key attr not present in new flow. [ 413.005323][T17300] veth0_macvtap: entered promiscuous mode [ 413.021527][T17300] veth1_macvtap: entered promiscuous mode [ 413.062119][T17300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.085792][T17300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.129809][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.140206][ T1114] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.150159][ T71] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.159958][T17425] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 413.160114][T17420] IPVS: stopping backup sync thread 17425 ... [ 413.193219][ T71] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.211362][T17420] netlink: 260 bytes leftover after parsing attributes in process `syz.5.3138'. [ 413.230185][T17420] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3138'. [ 413.240141][T17420] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3138'. [ 413.320523][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.344847][T17431] nft_compat: unsupported protocol 0 [ 413.345942][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.377564][T17431] sch_fq: defrate 0 ignored. [ 413.421324][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.441350][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.497580][T17437] IPv6: addrconf: prefix option has invalid lifetime [ 413.519023][T17433] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3143'. [ 413.535853][T17433] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3143'. [ 413.559593][T17437] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 413.777935][T17442] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3146'. [ 413.844720][ T51] Bluetooth: hci10: command tx timeout [ 413.889704][T17444] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.028492][T17455] tipc: Started in network mode [ 414.053549][T17455] tipc: Node identity 16ac8e2ba91e, cluster identity 4711 [ 414.063653][T17455] tipc: Enabled bearer , priority 0 [ 414.088146][T17458] syzkaller0: entered promiscuous mode [ 414.094700][T17457] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3151'. [ 414.103297][T17458] syzkaller0: entered allmulticast mode [ 414.152840][T17455] tipc: Resetting bearer [ 414.286666][T17458] netlink: 6 bytes leftover after parsing attributes in process `syz.9.3150'. [ 414.333815][T17458] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 414.424930][ T5869] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 414.432559][ T5869] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 414.441216][ T5869] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 414.449751][ T5869] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 414.457963][ T5869] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 414.489171][T17454] tipc: Resetting bearer [ 414.511749][T17454] tipc: Disabling bearer [ 414.564364][ T5869] Bluetooth: hci9: command tx timeout [ 414.567128][T17470] netlink: 'syz.5.3155': attribute type 1 has an invalid length. [ 414.816091][T17494] netlink: 'syz.5.3161': attribute type 14 has an invalid length. [ 414.830384][ T1114] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.830505][T17494] netlink: 'syz.5.3161': attribute type 14 has an invalid length. [ 414.847733][ T1114] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.892988][ T1114] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.901459][ T1114] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.935861][T17465] chnl_net:caif_netlink_parms(): no params data found [ 414.960179][T17499] netlink: 'syz.5.3163': attribute type 29 has an invalid length. [ 414.991861][T17499] netlink: 'syz.5.3163': attribute type 29 has an invalid length. [ 415.125722][T17465] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.143055][T17465] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.153472][T17465] bridge_slave_0: entered allmulticast mode [ 415.171063][T17465] bridge_slave_0: entered promiscuous mode [ 415.192227][T17465] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.211116][T17465] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.231512][T17465] bridge_slave_1: entered allmulticast mode [ 415.238885][T17465] bridge_slave_1: entered promiscuous mode [ 415.292180][T17465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.323972][T17465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.378686][T17465] team0: Port device team_slave_0 added [ 415.395937][T17465] team0: Port device team_slave_1 added [ 415.451775][T17465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.461873][T17465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.488590][T17465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.501204][T17465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.508384][T17465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.536205][T17465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.599699][T17465] hsr_slave_0: entered promiscuous mode [ 415.608214][T17465] hsr_slave_1: entered promiscuous mode [ 415.621778][T17465] debugfs: 'hsr0' already exists in 'hsr' [ 415.628234][T17465] Cannot create hsr debugfs directory [ 415.923330][ T5869] Bluetooth: hci10: command tx timeout [ 416.064154][T17465] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 416.080284][T17465] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 416.104386][T17465] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 416.121901][T17465] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 416.301171][T17465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.322037][T17465] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.349760][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.356955][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.370497][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.377795][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.552158][T17555] team1: entered promiscuous mode [ 416.558286][T17555] team1: entered allmulticast mode [ 416.564289][ T5869] Bluetooth: hci11: command tx timeout [ 416.570572][T17555] 8021q: adding VLAN 0 to HW filter on device team1 [ 416.590529][T17557] syz_tun: entered allmulticast mode [ 416.605351][T17556] syz_tun: left allmulticast mode [ 416.679839][T17562] netlink: 'syz.5.3176': attribute type 3 has an invalid length. [ 416.691328][T17561] netlink: 'syz.5.3176': attribute type 1 has an invalid length. [ 416.711993][T17465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.740632][T17561] 8021q: adding VLAN 0 to HW filter on device bond4 [ 416.814644][T17569] openvswitch: netlink: Flow key attr not present in new flow. [ 416.870419][T17465] veth0_vlan: entered promiscuous mode [ 416.927356][T17465] veth1_vlan: entered promiscuous mode [ 416.981816][T17576] netlink: 'syz.3.3182': attribute type 29 has an invalid length. [ 417.003722][T17465] veth0_macvtap: entered promiscuous mode [ 417.030129][T17465] veth1_macvtap: entered promiscuous mode [ 417.105775][T17465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.121360][T17465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.164191][ T8661] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.177974][ T8661] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.209548][ T8661] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.216128][T17594] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 417.219926][ T8661] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.238509][T17595] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 417.364073][ T5952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.371940][ T5952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.472434][ T8661] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.481848][ T8661] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.008135][ T51] Bluetooth: hci10: command tx timeout [ 418.159235][T17625] __nla_validate_parse: 18 callbacks suppressed [ 418.159259][T17625] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3197'. [ 418.348960][T17631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3199'. [ 418.644059][ T51] Bluetooth: hci11: command tx timeout [ 418.893347][T17635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3200'. [ 418.897082][T17623] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 418.922778][T17623] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 418.950719][T17623] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 418.958600][T17623] Bluetooth: hci9: Error when powering off device on rfkill (-4) [ 418.960901][T17639] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3201'. [ 418.976778][T17639] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3201'. [ 418.986342][T17639] netlink: 'syz.5.3201': attribute type 14 has an invalid length. [ 419.000549][T17623] Bluetooth: hci10: Opcode 0x0c1a failed: -4 [ 419.010295][T17623] Bluetooth: hci10: Error when powering off device on rfkill (-4) [ 419.031737][T17623] Bluetooth: hci11: Opcode 0x0c1a failed: -4 [ 419.044953][T17623] Bluetooth: hci11: Error when powering off device on rfkill (-4) [ 419.059221][T17642] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 419.192259][T17652] vxcan2: entered promiscuous mode [ 419.427708][T17660] netlink: 'syz.2.3212': attribute type 23 has an invalid length. [ 419.538265][T17677] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3216'. [ 419.545066][T17678] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3219'. [ 419.555527][T17677] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3216'. [ 419.571720][T17677] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3216'. [ 419.602560][T17670] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3216'. [ 419.862529][T17709] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 422.974725][T17723] netlink: 'syz.0.3233': attribute type 5 has an invalid length. [ 423.049638][T17726] bpq0: entered promiscuous mode [ 423.296897][T17744] netlink: 'syz.2.3239': attribute type 5 has an invalid length. [ 423.458160][T17742] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.491378][T17742] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.547307][T17743] __nla_validate_parse: 6 callbacks suppressed [ 423.547332][T17743] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3239'. [ 423.593133][T17743] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 423.640645][T17742] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.650757][T17742] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.719090][T17742] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.736452][T17742] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.762708][T17755] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3241'. [ 423.773265][T17754] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3241'. [ 423.808254][T17742] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.842270][T17742] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.978032][ T6134] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.993091][ T6134] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.008122][ T6134] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.026276][ T6134] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.060988][T17774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3247'. [ 424.070992][ T36] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.086576][ T36] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.120796][ T36] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.149990][ T36] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.296324][T17783] syzkaller1: entered promiscuous mode [ 424.302226][T17783] syzkaller1: entered allmulticast mode [ 424.493933][T17793] netlink: 'syz.0.3254': attribute type 1 has an invalid length. [ 424.501856][T17793] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3254'. [ 424.722576][T17797] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3256'. [ 424.732390][T17797] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3256'. [ 424.747093][T17797] netlink: 'syz.3.3256': attribute type 1 has an invalid length. [ 424.750274][T17798] netlink: 'syz.3.3256': attribute type 1 has an invalid length. [ 424.929626][T17808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3258'. [ 424.964909][T17812] openvswitch: netlink: Message has 4 unknown bytes. [ 424.971720][T17812] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 424.981926][T17812] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3261'. [ 425.332334][T17814] syzkaller1: entered promiscuous mode [ 425.340016][T17814] syzkaller1: entered allmulticast mode [ 425.353819][T17828] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3267'. [ 425.890316][T17868] tipc: Started in network mode [ 425.902455][T17868] tipc: Node identity 7f000001, cluster identity 4711 [ 425.912265][T17868] tipc: Enabled bearer , priority 10 [ 425.961855][ T30] audit: type=1804 audit(1755903667.014:9): pid=17874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3283" name="/newroot/26/cgroup.controllers" dev="tmpfs" ino=152 res=1 errno=0 [ 426.004021][ T30] audit: type=1800 audit(1755903667.014:10): pid=17874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3283" name="cgroup.controllers" dev="tmpfs" ino=152 res=0 errno=0 [ 426.011442][T17867] smc: net device bond0 applied user defined pnetid SYZ2 [ 426.339723][T17901] dvmrp0: entered allmulticast mode [ 426.411117][T17904] syzkaller0: entered promiscuous mode [ 426.417623][T17904] syzkaller0: entered allmulticast mode [ 427.023406][T17277] tipc: Node number set to 2130706433 [ 427.164767][T17969] bpq0: left promiscuous mode [ 427.226012][T17970] netlink: 'syz.2.3312': attribute type 4 has an invalid length. [ 427.349995][T17978] tipc: Started in network mode [ 427.361523][T17978] tipc: Node identity 22c7a8d31521, cluster identity 4711 [ 427.370554][T17978] tipc: Enabled bearer , priority 0 [ 427.410108][T17978] syzkaller0: entered promiscuous mode [ 427.415710][T17978] syzkaller0: entered allmulticast mode [ 427.421768][T17978] tipc: Resetting bearer [ 427.432531][T17980] gretap1: entered promiscuous mode [ 427.474431][T17978] tipc: Resetting bearer [ 427.532107][T17978] tipc: Disabling bearer [ 427.778573][T17991] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 428.094184][T17996] netlink: 'syz.0.3318': attribute type 1 has an invalid length. [ 428.416275][T18029] tipc: Started in network mode [ 428.421380][T18029] tipc: Node identity a6468800d1, cluster identity 4711 [ 428.430350][T18029] tipc: Enabled bearer , priority 0 [ 428.441431][T18029] syzkaller0: entered promiscuous mode [ 428.449085][T18029] syzkaller0: entered allmulticast mode [ 428.490913][T18029] tipc: Resetting bearer [ 428.545864][T18028] tipc: Resetting bearer [ 428.596895][T18028] tipc: Disabling bearer [ 429.116463][T18035] __nla_validate_parse: 19 callbacks suppressed [ 429.116485][T18035] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3330'. [ 429.146116][T18068] macvlan3: entered allmulticast mode [ 429.151670][T18068] veth1_vlan: entered allmulticast mode [ 429.159868][T18068] veth1_vlan: left allmulticast mode [ 429.287584][T18074] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3339'. [ 429.299214][T18074] openvswitch: netlink: Flow key attr not present in new flow. [ 429.409472][T18081] netlink: 212340 bytes leftover after parsing attributes in process `syz.5.3339'. [ 429.618069][T18096] netlink: 'syz.2.3344': attribute type 1 has an invalid length. [ 429.628257][T18096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3344'. [ 429.882188][T18108] tipc: Enabling of bearer rejected, already enabled [ 429.914036][T18107] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3350'. [ 429.936959][T18108] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3347'. [ 429.986044][ T5869] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 429.994367][ T5869] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 430.001759][ T5869] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 430.011590][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 430.032234][ T5857] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 430.040577][ T5857] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 430.060988][ T51] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 430.126299][ T51] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 430.133942][ T51] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 430.142029][ T51] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 430.150027][ T51] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 430.660363][T18109] chnl_net:caif_netlink_parms(): no params data found [ 430.777969][T18137] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3356'. [ 430.800882][T18109] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.809093][T18109] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.817255][T18109] bridge_slave_0: entered allmulticast mode [ 430.825346][T18109] bridge_slave_0: entered promiscuous mode [ 430.847270][T18109] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.855247][T18109] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.862755][T18109] bridge_slave_1: entered allmulticast mode [ 430.870869][T18109] bridge_slave_1: entered promiscuous mode [ 430.954836][T18109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.973562][T18109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.044912][T18109] team0: Port device team_slave_0 added [ 431.054808][T18109] team0: Port device team_slave_1 added [ 431.105212][T18109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.116674][T18109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.186586][T18109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.216878][T18109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.224241][T18109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.250612][T18109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.345090][T18109] hsr_slave_0: entered promiscuous mode [ 431.352103][T18109] hsr_slave_1: entered promiscuous mode [ 431.361482][T18109] debugfs: 'hsr0' already exists in 'hsr' [ 431.368074][T18109] Cannot create hsr debugfs directory [ 431.505863][T18147] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 431.620627][T18147] rdma_rxe: rxe_newlink: failed to add lo [ 432.202369][ T5857] Bluetooth: hci12: command tx timeout [ 432.322048][T18190] netlink: 'syz.2.3371': attribute type 1 has an invalid length. [ 432.334736][T18190] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3371'. [ 432.348919][T18109] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 432.371931][T18109] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 432.381060][T18197] netlink: 'syz.3.3372': attribute type 1 has an invalid length. [ 432.424174][T18197] 8021q: adding VLAN 0 to HW filter on device bond1 [ 432.457379][T18109] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 432.491180][T18109] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 432.531620][T18209] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3374'. [ 432.564094][T18204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3373'. [ 432.573859][T18204] nbd: socks must be embedded in a SOCK_ITEM attr [ 432.581509][T18204] block nbd3: shutting down sockets [ 432.610310][T18109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.635076][T18109] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.649433][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.656767][ T5952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.679440][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.686683][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.924154][T18109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.109618][T18228] netlink: 'syz.2.3377': attribute type 1 has an invalid length. [ 433.170298][T18228] bond2: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 433.183979][ T5952] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 433.195845][T18228] 8021q: adding VLAN 0 to HW filter on device bond2 [ 433.315188][ T1114] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 433.408416][T18109] veth0_vlan: entered promiscuous mode [ 433.429793][T18109] veth1_vlan: entered promiscuous mode [ 433.465517][T18237] netlink: 'syz.3.3379': attribute type 1 has an invalid length. [ 433.481139][T18109] veth0_macvtap: entered promiscuous mode [ 433.507043][T18109] veth1_macvtap: entered promiscuous mode [ 433.542575][T18109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.569887][T18109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.592320][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.627404][T18243] dvmrp8: entered allmulticast mode [ 433.648175][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.664777][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.769889][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.949607][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.958361][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.035718][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.048584][T17275] IPVS: starting estimator thread 0... [ 434.064923][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.143151][T18259] IPVS: using max 38 ests per chain, 91200 per kthread [ 434.243335][ T5857] Bluetooth: hci12: command tx timeout [ 434.382784][T18275] netlink: 'syz.0.3390': attribute type 1 has an invalid length. [ 434.398015][T18275] netlink: 'syz.0.3390': attribute type 4 has an invalid length. [ 434.407952][T18275] __nla_validate_parse: 2 callbacks suppressed [ 434.407974][T18275] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.3390'. [ 434.700640][T18293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3396'. [ 434.740306][T18293] (unnamed net_device) (uninitialized): option lacp_active: invalid value (5) [ 434.802647][T18275] netlink: 'syz.0.3390': attribute type 13 has an invalid length. [ 434.819767][T18275] netlink: 'syz.0.3390': attribute type 17 has an invalid length. [ 434.921681][T18312] sctp: [Deprecated]: syz.2.3400 (pid 18312) Use of struct sctp_assoc_value in delayed_ack socket option. [ 434.921681][T18312] Use struct sctp_sack_info instead [ 434.961989][T18275] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 435.098735][T18316] netlink: 'syz.5.3401': attribute type 4 has an invalid length. [ 435.131774][T18316] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3401'. [ 435.254222][T18316] Ã: renamed from bond0 (while UP) [ 435.400108][T18331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3405'. [ 435.413747][T18331] bridge_slave_1: left allmulticast mode [ 435.419681][T18331] bridge_slave_1: left promiscuous mode [ 435.427022][T18331] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.437990][T18331] bridge_slave_0: left allmulticast mode [ 435.450026][T18331] bridge_slave_0: left promiscuous mode [ 435.460732][T18331] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.490133][T18335] netlink: zone id is out of range [ 435.500402][T18335] netlink: zone id is out of range [ 435.508424][T18335] netlink: zone id is out of range [ 435.538247][T18335] netlink: zone id is out of range [ 435.547009][T18335] netlink: zone id is out of range [ 435.562356][T18335] netlink: zone id is out of range [ 435.575034][T18343] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode 802.3ad(4) [ 435.578816][T18335] netlink: zone id is out of range [ 435.595270][T18344] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode 802.3ad(4) [ 435.608358][T18335] netlink: zone id is out of range [ 435.608527][T18335] netlink: zone id is out of range [ 435.859758][T18355] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3413'. [ 435.892055][T18356] bridge_slave_0: left allmulticast mode [ 435.946949][T18356] bridge_slave_0: left promiscuous mode [ 435.953447][T18356] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.985488][T18356] bridge_slave_1: left allmulticast mode [ 435.996975][T18356] bridge_slave_1: left promiscuous mode [ 436.007448][T18356] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.049959][T18367] netlink: 'syz.4.3417': attribute type 1 has an invalid length. [ 436.050334][T18356] Ã: (slave bond_slave_0): Releasing backup interface [ 436.088764][T18356] Ã: (slave bond_slave_1): Releasing backup interface [ 436.129602][T18356] team0: Port device team_slave_0 removed [ 436.141810][T18356] team0: Port device team_slave_1 removed [ 436.170436][T18356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.179390][T18356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.189429][T18356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.197793][T18356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.218819][T18356] bond3: (slave batadv1): Releasing active interface [ 436.323471][ T5857] Bluetooth: hci12: command tx timeout [ 436.482207][T18363] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.489864][T18363] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.653594][T18363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.673675][T18363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.979308][T18368] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3418'. [ 437.055815][ T1114] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.076083][ T1114] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.140139][ T1114] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.188109][T18383] bridge_slave_0: left allmulticast mode [ 437.196202][T18383] bridge_slave_0: left promiscuous mode [ 437.228447][T18383] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.247973][T18383] bridge_slave_1: left allmulticast mode [ 437.261417][T18397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3426'. [ 437.267285][T18383] bridge_slave_1: left promiscuous mode [ 437.289568][T18383] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.300691][T18395] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3425'. [ 437.317676][T18383] bond0: (slave bond_slave_0): Releasing backup interface [ 437.327850][T18383] bond0: (slave bond_slave_1): Releasing backup interface [ 437.337290][T18383] team0: Port device team_slave_0 removed [ 437.350145][T18383] team0: Port device team_slave_1 removed [ 437.356226][T18400] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3425'. [ 437.356235][T18392] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3425'. [ 437.356681][T18383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.384512][T18383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.406220][ T1114] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.572589][T18408] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci12/hci12:200/input5 [ 438.239851][T18448] tipc: Enabled bearer , priority 0 [ 438.269637][T18448] syzkaller0: entered promiscuous mode [ 438.280714][T18448] syzkaller0: entered allmulticast mode [ 438.378436][T18448] tipc: Resetting bearer [ 438.403867][ T5857] Bluetooth: hci12: command tx timeout [ 438.580265][T18465] tc_dump_action: action bad kind [ 438.858763][T18446] tipc: Resetting bearer [ 438.895507][T18446] tipc: Disabling bearer [ 439.076625][T18487] syzkaller0: entered promiscuous mode [ 439.082247][T18487] syzkaller0: entered allmulticast mode [ 439.668400][T18539] __nla_validate_parse: 10 callbacks suppressed [ 439.668420][T18539] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3467'. [ 439.693312][T18539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3467'. [ 439.862673][T18539] bond3: entered promiscuous mode [ 439.875981][T18539] bond3: entered allmulticast mode [ 439.889667][T18539] 8021q: adding VLAN 0 to HW filter on device bond3 [ 440.070284][T18555] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3470'. [ 440.105781][T18555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3470'. [ 440.351172][T18564] syzkaller0: entered promiscuous mode [ 440.359444][T18564] syzkaller0: entered allmulticast mode [ 440.529665][T18575] bridge_slave_0: default FDB implementation only supports local addresses [ 440.543240][T18577] bridge_slave_0: default FDB implementation only supports local addresses [ 440.686059][T18588] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3480'. [ 440.889204][T18594] team_slave_0: entered promiscuous mode [ 440.895547][T18594] team_slave_0: entered allmulticast mode [ 440.945694][T18598] netlink: 'syz.5.3483': attribute type 15 has an invalid length. [ 440.955307][T18598] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3483'. [ 440.976523][T18598] netlink: 'syz.5.3483': attribute type 1 has an invalid length. [ 440.986180][T18598] netlink: 'syz.5.3483': attribute type 1 has an invalid length. [ 441.024137][T18600] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3484'. [ 441.179877][T18611] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3488'. [ 441.190216][T18611] nbd: illegal input index 65508 [ 441.281535][T18609] macsec1: entered promiscuous mode [ 441.301118][T18609] macsec1: entered allmulticast mode [ 441.308621][T18609] mac80211_hwsim hwsim42 wlan0: entered allmulticast mode [ 441.589974][T18628] netlink: 'syz.5.3492': attribute type 1 has an invalid length. [ 441.715539][T18628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.973479][T18652] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3499'. [ 442.061034][T18657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3501'. [ 442.230398][T18676] netlink: 'syz.3.3506': attribute type 2 has an invalid length. [ 442.399877][T18683] tipc: Can't bind to reserved service type 2 [ 442.572579][T18694] netlink: 'syz.5.3512': attribute type 7 has an invalid length. [ 442.586900][T18694] netlink: 'syz.5.3512': attribute type 8 has an invalid length. [ 442.597303][T18694] netlink: 'syz.5.3512': attribute type 15 has an invalid length. [ 442.615602][T18694] netlink: 'syz.5.3512': attribute type 1 has an invalid length. [ 442.777059][T18705] netlink: 'syz.2.3518': attribute type 1 has an invalid length. [ 442.934097][T18715] 8021q: adding VLAN 0 to HW filter on device bond4 [ 443.048779][T18715] veth5: entered promiscuous mode [ 443.059550][T18715] bond4: (slave veth5): Enslaving as an active interface with a down link [ 443.110340][T18724] tipc: Enabling of bearer rejected, failed to enable media [ 443.469100][T18751] batadv_slave_0: entered promiscuous mode [ 443.487509][T18748] batadv_slave_0: left promiscuous mode [ 443.640503][T18757] tipc: Enabled bearer , priority 0 [ 443.649680][T18757] syzkaller0: entered promiscuous mode [ 443.658159][T18757] syzkaller0: entered allmulticast mode [ 443.702607][T18757] tipc: Resetting bearer [ 443.728941][T18755] tipc: Resetting bearer [ 443.755376][T18755] tipc: Disabling bearer [ 443.965595][T18776] 8021q: adding VLAN 0 to HW filter on device bond1 [ 443.989966][T18776] ipvlan2: entered allmulticast mode [ 443.995662][T18776] bond1: entered allmulticast mode [ 444.016077][T18776] bond1: (slave gretap1): making interface the new active one [ 444.024329][T18776] gretap1: entered allmulticast mode [ 444.031337][T18776] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 444.177108][T18786] syzkaller0: entered promiscuous mode [ 444.182638][T18786] syzkaller0: entered allmulticast mode [ 444.199056][T18785] tipc: Enabled bearer , priority 0 [ 444.219731][T18783] dvmrp0: left allmulticast mode [ 444.247124][T18785] tipc: Resetting bearer [ 444.259364][T18785] tipc: Disabling bearer [ 444.385336][T18794] vlan4: entered promiscuous mode [ 444.413238][T18794] bond0: entered promiscuous mode [ 444.419081][T18794] vlan4: entered allmulticast mode [ 444.452969][T18794] bond0: entered allmulticast mode [ 444.488689][T18799] net_ratelimit: 13 callbacks suppressed [ 444.488703][T18799] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 444.819964][T18821] __nla_validate_parse: 13 callbacks suppressed [ 444.819987][T18821] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3555'. [ 444.901815][T18821] nbd: socks must be embedded in a SOCK_ITEM attr [ 444.919795][T18830] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3557'. [ 445.073858][T18840] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3560'. [ 445.093679][T18840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3560'. [ 445.351513][T18855] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 445.431393][T18856] pim6reg1: entered promiscuous mode [ 445.446014][T18856] pim6reg1: entered allmulticast mode [ 445.514331][T18857] IPv6: NLM_F_CREATE should be specified when creating new route [ 445.675342][T18874] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 445.713202][T18875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3569'. [ 445.739454][T18874] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3570'. [ 445.750714][T18883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3573'. [ 445.806717][T18874] bridge1: entered promiscuous mode [ 445.812250][T18874] bridge1: entered allmulticast mode [ 445.837007][T18874] team0: Port device bridge1 added [ 445.859531][T18886] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3574'. [ 445.884683][T18886] ip6gretap0: entered promiscuous mode [ 445.905587][T18886] ip6gretap0: left promiscuous mode [ 445.990769][T18891] validate_nla: 4 callbacks suppressed [ 445.990789][T18891] netlink: 'syz.4.3576': attribute type 3 has an invalid length. [ 446.030881][T18891] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 446.345221][T18908] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3580'. [ 446.454788][T18916] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3583'. [ 446.674697][T18926] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 446.824404][T18944] netlink: 'syz.3.3590': attribute type 2 has an invalid length. [ 446.957782][T18920] netlink: 'syz.2.3584': attribute type 13 has an invalid length. [ 447.086888][T17283] IPVS: starting estimator thread 0... [ 447.148440][T18974] tipc: New replicast peer: 255.255.255.255 [ 447.156243][T18974] tipc: Enabled bearer , priority 10 [ 447.173332][T18970] IPVS: using max 34 ests per chain, 81600 per kthread [ 447.937954][T18995] batman_adv: batadv0: Adding interface: ip6gretap1 [ 447.947164][T18995] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.974009][T18995] batman_adv: batadv0: Interface activated: ip6gretap1 [ 448.131071][T19006] bridge_slave_0: entered promiscuous mode [ 448.283515][T17283] tipc: Node number set to 646455063 [ 448.353893][T19018] bond0: entered promiscuous mode [ 448.366742][T19018] batadv0: entered promiscuous mode [ 448.381216][T19018] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 448.392013][T19018] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 448.410537][T19018] hsr1: entered allmulticast mode [ 448.416832][T19018] bond0: entered allmulticast mode [ 448.422187][T19018] batadv0: entered allmulticast mode [ 448.438277][T19018] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 448.447720][T19027] netlink: 'syz.5.3617': attribute type 10 has an invalid length. [ 448.455944][T19018] bond0: left promiscuous mode [ 448.461506][T19018] batadv0: left promiscuous mode [ 448.480838][T19024] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.497198][T19024] bridge_slave_1 (unregistering): left allmulticast mode [ 448.505105][T19024] bridge_slave_1 (unregistering): left promiscuous mode [ 448.512190][T19024] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.571838][T19027] Ã: (slave bridge0): Enslaving as an active interface with an up link [ 448.630585][T19029] Ã: (slave bridge0): Releasing backup interface [ 449.419122][T19072] gtp0: entered promiscuous mode [ 449.550973][T19103] netlink: 'syz.0.3639': attribute type 3 has an invalid length. [ 449.835718][T19127] __nla_validate_parse: 12 callbacks suppressed [ 449.835740][T19127] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3646'. [ 449.862318][T19127] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 449.991513][T19136] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3650'. [ 450.010435][T19136] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3650'. [ 450.473546][T19164] block nbd3: server does not support multiple connections per device. [ 450.510266][T19173] syzkaller0: entered promiscuous mode [ 450.522686][T19164] block nbd3: shutting down sockets [ 450.534673][T19173] syzkaller0: entered allmulticast mode [ 450.852224][T19194] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3666'. [ 451.113296][T19215] openvswitch: netlink: Key 19 has unexpected len 8 expected 4 [ 451.139511][T19218] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3674'. [ 451.190930][T19224] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3674'. [ 451.729615][T19244] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3678'. [ 451.750900][T19244] sctp: [Deprecated]: syz.5.3678 (pid 19244) Use of int in max_burst socket option. [ 451.750900][T19244] Use struct sctp_assoc_value instead [ 451.813201][T19247] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3680'. [ 451.851247][T19247] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3680'. [ 451.904760][T19247] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3680'. [ 451.910482][T19254] netlink: 'syz.4.3681': attribute type 1 has an invalid length. [ 451.929457][T19247] 8021q: adding VLAN 0 to HW filter on device à [ 451.941662][T19251] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 451.965376][T19247] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 452.052651][T19255] 8021q: adding VLAN 0 to HW filter on device bond2 [ 452.062296][T19255] bond1: (slave bond2): making interface the new active one [ 452.071331][T19255] bond1: (slave bond2): Enslaving as an active interface with an up link [ 452.147711][T19263] netlink: del zone limit has 8 unknown bytes [ 452.245614][T19272] netlink: 'syz.4.3687': attribute type 2 has an invalid length. [ 452.260019][T19272] k›*·]‘: entered promiscuous mode [ 452.436953][T19273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 452.458744][T19273] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 452.543569][T19273] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 452.586205][ T36] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.595830][ T36] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.606795][ T36] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.616831][ T36] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.838882][T19280] netlink: 'syz.4.3689': attribute type 303 has an invalid length. [ 453.459519][T19333] netlink: 'syz.5.3708': attribute type 4 has an invalid length. [ 454.306945][T19415] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 454.316641][T19415] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 454.348929][T19415] bond3: left promiscuous mode [ 454.356180][T19415] bond3: left allmulticast mode [ 454.361573][T19415] veth5: left promiscuous mode [ 454.710174][T19446] netlink: 'syz.2.3739': attribute type 1 has an invalid length. [ 454.736860][T19446] 8021q: adding VLAN 0 to HW filter on device bond5 [ 454.755984][T19446] bond5: (slave geneve2): making interface the new active one [ 454.765177][T19446] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 454.776102][ T1114] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.786938][ T1114] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.802893][ T1114] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.832442][ T1114] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.916535][T19463] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 454.930617][T19463] batman_adv: batadv0: Adding interface: ip6gretap2 [ 454.937734][T19463] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.968098][ T31] INFO: task kworker/u8:7:1157 blocked for more than 143 seconds. [ 454.976112][ T31] Not tainted syzkaller #0 [ 454.980518][T19463] batman_adv: batadv0: Interface activated: ip6gretap2 [ 454.981068][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 454.997047][ T31] task:kworker/u8:7 state:D stack:22472 pid:1157 tgid:1157 ppid:2 task_flags:0x4208160 flags:0x00004000 [ 455.009585][ T31] Workqueue: netns cleanup_net SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 455.018376][ T31] Call Trace: [ 455.033269][ T31] [ 455.036269][ T31] __schedule+0x1798/0x4cc0 [ 455.040815][ T31] ? unwind_next_frame+0xa5/0x2390 [ 455.112932][ T31] ? unwind_next_frame+0x19ae/0x2390 [ 455.118297][ T31] ? __pfx___schedule+0x10/0x10 [ 455.152928][ T31] ? schedule+0x91/0x360 [ 455.157292][ T31] ? rcu_is_watching+0x15/0xb0 [ 455.162088][ T31] ? lock_release+0x4b/0x3e0 [ 455.212961][ T31] ? wq_worker_sleeping+0x63/0x250 [ 455.218170][ T31] schedule+0x165/0x360 [ 455.222457][ T31] schedule_preempt_disabled+0x13/0x30 [ 455.246004][ T31] __mutex_lock+0x7e6/0x1350 [ 455.250661][ T31] ? xas_start+0x3b3/0x770 [ 455.261325][ T31] ? __mutex_lock+0x5bb/0x1350 [ 455.266207][ T31] ? rdma_dev_change_netns+0x39/0x300 [ 455.271617][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 455.287122][ T31] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 455.293946][ T31] ? rcu_is_watching+0x15/0xb0 [ 455.298747][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 455.305430][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 455.310674][ T31] ? _raw_spin_unlock+0x28/0x50 [ 455.315819][ T31] rdma_dev_change_netns+0x39/0x300 [ 455.321054][ T31] rdma_dev_exit_net+0x203/0x340 [ 455.326178][ T31] ? __pfx___might_resched+0x10/0x10 [ 455.331512][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 455.337200][ T31] ? net_generic+0x1e/0x240 [ 455.341736][ T31] ? mutex_is_locked+0x17/0x50 [ 455.347178][ T31] ? rtnl_is_locked+0x15/0x20 [ 455.351901][ T31] ops_undo_list+0x497/0x990 [ 455.361399][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 455.367463][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 455.372709][ T31] cleanup_net+0x4c5/0x800 [ 455.378034][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 455.383817][ T31] ? rcu_is_watching+0x15/0xb0 [ 455.388707][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 455.395361][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 455.401224][ T31] process_scheduled_works+0xae1/0x17b0 [ 455.407481][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 455.414203][ T31] worker_thread+0x8a0/0xda0 [ 455.418838][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 455.425866][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 455.431803][ T31] ? __kthread_parkme+0x7b/0x200 [ 455.437368][ T31] kthread+0x70e/0x8a0 [ 455.441483][ T31] ? __pfx_worker_thread+0x10/0x10 [ 455.447730][ T31] ? __pfx_kthread+0x10/0x10 [ 455.452372][ T31] ? rcu_is_watching+0x15/0xb0 [ 455.457801][ T31] ? __pfx_kthread+0x10/0x10 [ 455.462440][ T31] ret_from_fork+0x3f9/0x770 [ 455.467679][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 455.473490][ T31] ? __switch_to_asm+0x39/0x70 [ 455.483427][ T31] ? __switch_to_asm+0x33/0x70 [ 455.488330][ T31] ? __pfx_kthread+0x10/0x10 [ 455.493743][ T31] ret_from_fork_asm+0x1a/0x30 [ 455.498638][ T31] [ 455.501769][ T31] INFO: task syz.3.2338:14520 blocked for more than 143 seconds. [ 455.511682][ T31] Not tainted syzkaller #0 [ 455.516990][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 455.526661][ T31] task:syz.3.2338 state:D stack:22928 pid:14520 tgid:14516 ppid:5863 task_flags:0x400140 flags:0x00004004 [ 455.539175][ T31] Call Trace: [ 455.542482][ T31] [ 455.545847][ T31] __schedule+0x1798/0x4cc0 [ 455.550417][ T31] ? stack_depot_save_flags+0x41b/0x860 [ 455.556021][ T31] ? kasan_save_free_info+0x46/0x50 [ 455.561231][ T31] ? __kasan_slab_free+0x5b/0x80 [ 455.566543][ T31] ? __pfx___schedule+0x10/0x10 [ 455.571632][ T31] ? disable_device+0x137/0x320 [ 455.576550][ T31] ? ib_unregister_device_and_put+0xb8/0xf0 [ 455.582508][ T31] ? schedule+0x91/0x360 [ 455.587058][ T31] ? rcu_is_watching+0x15/0xb0 [ 455.591853][ T31] ? lock_release+0x4b/0x3e0 [ 455.596490][ T31] schedule+0x165/0x360 [ 455.600650][ T31] schedule_timeout+0x9a/0x270 [ 455.612699][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 455.618435][ T31] ? rcu_is_watching+0x15/0xb0 [ 455.629840][ T31] ? rcu_is_watching+0x15/0xb0 [ 455.635287][ T31] ? wait_for_completion+0x267/0x5d0 [ 455.640612][ T31] wait_for_completion+0x2bf/0x5d0 [ 455.653840][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 455.659545][ T31] ? remove_client_context+0x19c/0x1e0 [ 455.670831][ T31] disable_device+0x1c6/0x320 [ 455.676810][ T31] ? __pfx_disable_device+0x10/0x10 [ 455.682042][ T31] ? xa_load+0x1ea/0x210 [ 455.692730][ T31] __ib_unregister_device+0x2cb/0x3f0 [ 455.700303][ T31] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 455.712194][ T31] ib_unregister_device_and_put+0xb8/0xf0 [ 455.720511][ T31] nldev_dellink+0x2d1/0x320 [ 455.726051][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 455.731253][ T31] ? apparmor_capable+0x137/0x1b0 [ 455.737454][ T31] ? bpf_lsm_capable+0x9/0x20 [ 455.742203][ T31] ? security_capable+0x7e/0x2e0 [ 455.747715][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 455.752997][ T31] rdma_nl_rcv+0x6ab/0x980 [ 455.757464][ T31] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 455.762401][ T31] ? net_generic+0x1e/0x240 [ 455.767204][ T31] ? rcu_is_watching+0x15/0xb0 [ 455.772000][ T31] netlink_unicast+0x82c/0x9e0 [ 455.776818][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 455.782126][ T31] ? netlink_sendmsg+0x642/0xb30 [ 455.787229][ T31] ? skb_put+0x11b/0x210 [ 455.791494][ T31] netlink_sendmsg+0x805/0xb30 [ 455.796292][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 455.801571][ T31] ? futex_unqueue+0x22/0x240 [ 455.806388][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 455.811344][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 455.816880][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 455.822184][ T31] __sock_sendmsg+0x21c/0x270 [ 455.827975][ T31] ____sys_sendmsg+0x505/0x830 [ 455.833394][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 455.838716][ T31] ? import_iovec+0x74/0xa0 [ 455.845334][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 455.850134][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 455.855938][ T31] ? futex_wait+0x285/0x360 [ 455.860492][ T31] ? __fget_files+0x2a/0x420 [ 455.865227][ T31] ? __fget_files+0x3a0/0x420 [ 455.869932][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 455.874987][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 455.880473][ T31] ? rcu_is_watching+0x15/0xb0 [ 455.885299][ T31] ? rcu_is_watching+0x15/0xb0 [ 455.890076][ T31] do_syscall_64+0xfa/0x3b0 [ 455.894783][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.900959][ T31] ? clear_bhb_loop+0x60/0xb0 [ 455.905867][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.911786][ T31] RIP: 0033:0x7f6c42d8ebe9 [ 455.916347][ T31] RSP: 002b:00007f6c40fee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 455.925239][ T31] RAX: ffffffffffffffda RBX: 00007f6c42fb5fa0 RCX: 00007f6c42d8ebe9 [ 455.933357][ T31] RDX: 0000000000008044 RSI: 0000200000000200 RDI: 0000000000000008 [ 455.941356][ T31] RBP: 00007f6c42e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 455.949403][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 455.957712][ T31] R13: 00007f6c42fb6038 R14: 00007f6c42fb5fa0 R15: 00007ffc5beb4998 [ 455.965924][ T31] [ 455.993971][ T31] INFO: task syz.0.2424:14842 blocked for more than 144 seconds. [ 456.001741][ T31] Not tainted syzkaller #0 [ 456.032873][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 456.041711][ T31] task:syz.0.2424 state:D stack:26776 pid:14842 tgid:14840 ppid:5856 task_flags:0x400140 flags:0x00004006 [ 456.102868][ T31] Call Trace: [ 456.106211][ T31] [ 456.109168][ T31] __schedule+0x1798/0x4cc0 [ 456.138783][ T31] ? lock_release+0x4b/0x3e0 [ 456.159303][ T31] ? is_bpf_text_address+0x292/0x2b0 [ 456.166231][ T31] ? __pfx___schedule+0x10/0x10 [ 456.171146][ T31] ? schedule+0x91/0x360 [ 456.192932][ T31] ? rcu_is_watching+0x15/0xb0 [ 456.197757][ T31] ? lock_release+0x4b/0x3e0 [ 456.202388][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 456.232920][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 456.239338][ T31] schedule+0x165/0x360 [ 456.273002][ T31] schedule_preempt_disabled+0x13/0x30 [ 456.278530][ T31] __mutex_lock+0x7e6/0x1350 [ 456.312889][ T31] ? xas_start+0x3b3/0x770 [ 456.317376][ T31] ? __mutex_lock+0x5bb/0x1350 [ 456.322171][ T31] ? rdma_dev_change_netns+0x39/0x300 [ 456.340934][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 456.346624][ T31] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 456.352307][ T31] ? rcu_is_watching+0x15/0xb0 [ 456.357933][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 456.364441][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 456.369670][ T31] ? _raw_spin_unlock+0x28/0x50 [ 456.375085][ T31] rdma_dev_change_netns+0x39/0x300 [ 456.380315][ T31] rdma_dev_exit_net+0x203/0x340 [ 456.386110][ T31] ? __pfx___might_resched+0x10/0x10 [ 456.391435][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 456.397341][ T31] ? net_generic+0x1e/0x240 [ 456.401973][ T31] ? mutex_is_locked+0x17/0x50 [ 456.407409][ T31] ? rtnl_is_locked+0x15/0x20 [ 456.412130][ T31] ops_undo_list+0x497/0x990 [ 456.417125][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 456.422255][ T31] ? ops_init+0x469/0x5c0 [ 456.427011][ T31] setup_net+0x2d3/0x320 [ 456.431266][ T31] ? __pfx_setup_net+0x10/0x10 [ 456.436370][ T31] ? copy_net_ns+0x304/0x4d0 [ 456.440964][ T31] ? down_read_killable+0x1d1/0x350 [ 456.446502][ T31] copy_net_ns+0x31b/0x4d0 [ 456.450951][ T31] create_new_namespaces+0x3f3/0x720 [ 456.456825][ T31] ? security_capable+0x7e/0x2e0 [ 456.461809][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 456.467955][ T31] ksys_unshare+0x4c8/0x8c0 [ 456.472502][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 456.477737][ T31] ? rcu_is_watching+0x15/0xb0 [ 456.482503][ T31] __x64_sys_unshare+0x38/0x50 [ 456.487675][ T31] do_syscall_64+0xfa/0x3b0 [ 456.492184][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.498404][ T31] ? clear_bhb_loop+0x60/0xb0 [ 456.503764][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.509690][ T31] RIP: 0033:0x7f03b238ebe9 [ 456.514441][ T31] RSP: 002b:00007f03b3152038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 456.523404][ T31] RAX: ffffffffffffffda RBX: 00007f03b25b6090 RCX: 00007f03b238ebe9 [ 456.531390][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 456.539731][ T31] RBP: 00007f03b2411e19 R08: 0000000000000000 R09: 0000000000000000 [ 456.548072][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 456.556605][ T31] R13: 00007f03b25b6128 R14: 00007f03b25b6090 R15: 00007fff386e27c8 [ 456.565213][ T31] [ 456.568364][ T31] INFO: task syz.0.2424:14843 blocked for more than 144 seconds. [ 456.576972][ T31] Not tainted syzkaller #0 [ 456.581955][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 456.592063][ T31] task:syz.0.2424 state:D stack:26832 pid:14843 tgid:14840 ppid:5856 task_flags:0x400140 flags:0x00004006 [ 456.604357][ T31] Call Trace: [ 456.607680][ T31] [ 456.610635][ T31] __schedule+0x1798/0x4cc0 [ 456.615377][ T31] ? lock_release+0x4b/0x3e0 [ 456.620098][ T31] ? is_bpf_text_address+0x292/0x2b0 [ 456.625586][ T31] ? __pfx___schedule+0x10/0x10 [ 456.630460][ T31] ? schedule+0x91/0x360 [ 456.635059][ T31] ? rcu_is_watching+0x15/0xb0 [ 456.639889][ T31] ? lock_release+0x4b/0x3e0 [ 456.644818][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 456.650756][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 456.657765][ T31] schedule+0x165/0x360 [ 456.661956][ T31] schedule_preempt_disabled+0x13/0x30 [ 456.667827][ T31] __mutex_lock+0x7e6/0x1350 [ 456.672438][ T31] ? xas_start+0x3b3/0x770 [ 456.677239][ T31] ? __mutex_lock+0x5bb/0x1350 [ 456.682021][ T31] ? rdma_dev_change_netns+0x39/0x300 [ 456.687452][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 456.692481][ T31] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 456.698280][ T31] ? rcu_is_watching+0x15/0xb0 [ 456.703471][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 456.709461][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 456.714764][ T31] ? _raw_spin_unlock+0x28/0x50 [ 456.719637][ T31] rdma_dev_change_netns+0x39/0x300 [ 456.724983][ T31] rdma_dev_exit_net+0x203/0x340 [ 456.729942][ T31] ? __pfx___might_resched+0x10/0x10 [ 456.735349][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 456.740827][ T31] ? net_generic+0x1e/0x240 [ 456.745489][ T31] ? mutex_is_locked+0x17/0x50 [ 456.750381][ T31] ? rtnl_is_locked+0x15/0x20 [ 456.755665][ T31] ops_undo_list+0x497/0x990 [ 456.760294][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 456.765610][ T31] ? ops_init+0x469/0x5c0 [ 456.769953][ T31] setup_net+0x2d3/0x320 [ 456.774627][ T31] ? __pfx_setup_net+0x10/0x10 [ 456.779417][ T31] ? copy_net_ns+0x304/0x4d0 [ 456.784083][ T31] ? down_read_killable+0x1d1/0x350 [ 456.789302][ T31] copy_net_ns+0x31b/0x4d0 [ 456.793835][ T31] create_new_namespaces+0x3f3/0x720 [ 456.799149][ T31] ? security_capable+0x7e/0x2e0 [ 456.804165][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 456.809927][ T31] ksys_unshare+0x4c8/0x8c0 [ 456.814587][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 456.819636][ T31] __x64_sys_unshare+0x38/0x50 [ 456.824428][ T31] do_syscall_64+0xfa/0x3b0 [ 456.828933][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.835088][ T31] ? clear_bhb_loop+0x60/0xb0 [ 456.839798][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.845809][ T31] RIP: 0033:0x7f03b238ebe9 [ 456.850216][ T31] RSP: 002b:00007f03b3131038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 456.858842][ T31] RAX: ffffffffffffffda RBX: 00007f03b25b6180 RCX: 00007f03b238ebe9 [ 456.866872][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 456.874970][ T31] RBP: 00007f03b2411e19 R08: 0000000000000000 R09: 0000000000000000 [ 456.883324][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 456.891439][ T31] R13: 00007f03b25b6218 R14: 00007f03b25b6180 R15: 00007fff386e27c8 [ 456.899648][ T31] [ 456.902891][ T31] INFO: task syz.4.2567:15325 blocked for more than 145 seconds. [ 456.910630][ T31] Not tainted syzkaller #0 [ 456.915976][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 456.924722][ T31] task:syz.4.2567 state:D stack:26472 pid:15325 tgid:15323 ppid:5852 task_flags:0x400140 flags:0x00004006 [ 456.936744][ T31] Call Trace: [ 456.940036][ T31] [ 456.943080][ T31] __schedule+0x1798/0x4cc0 [ 456.947619][ T31] ? lock_release+0x4b/0x3e0 [ 456.952209][ T31] ? is_bpf_text_address+0x292/0x2b0 [ 456.957565][ T31] ? __pfx___schedule+0x10/0x10 [ 456.962534][ T31] ? schedule+0x91/0x360 [ 456.967221][ T31] ? rcu_is_watching+0x15/0xb0 [ 456.971991][ T31] ? lock_release+0x4b/0x3e0 [ 456.976723][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 456.982650][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 456.989220][ T31] schedule+0x165/0x360 [ 456.993468][ T31] schedule_preempt_disabled+0x13/0x30 [ 456.998958][ T31] __mutex_lock+0x7e6/0x1350 [ 457.003657][ T31] ? xas_start+0x3b3/0x770 [ 457.008099][ T31] ? __mutex_lock+0x5bb/0x1350 [ 457.013026][ T31] ? rdma_dev_change_netns+0x39/0x300 [ 457.018444][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 457.023555][ T31] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 457.029195][ T31] ? rcu_is_watching+0x15/0xb0 [ 457.034023][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 457.040031][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 457.045974][ T31] ? _raw_spin_unlock+0x28/0x50 [ 457.050960][ T31] rdma_dev_change_netns+0x39/0x300 [ 457.056279][ T31] rdma_dev_exit_net+0x203/0x340 [ 457.061243][ T31] ? __pfx___might_resched+0x10/0x10 [ 457.066597][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 457.072159][ T31] ? net_generic+0x1e/0x240 [ 457.076949][ T31] ? mutex_is_locked+0x17/0x50 [ 457.081756][ T31] ? rtnl_is_locked+0x15/0x20 [ 457.086539][ T31] ops_undo_list+0x497/0x990 [ 457.091139][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 457.096452][ T31] ? ops_init+0x469/0x5c0 [ 457.100823][ T31] setup_net+0x2d3/0x320 [ 457.105308][ T31] ? __pfx_setup_net+0x10/0x10 [ 457.110112][ T31] ? copy_net_ns+0x304/0x4d0 [ 457.114842][ T31] ? down_read_killable+0x1d1/0x350 [ 457.120087][ T31] copy_net_ns+0x31b/0x4d0 [ 457.125128][ T31] create_new_namespaces+0x3f3/0x720 [ 457.130456][ T31] ? security_capable+0x7e/0x2e0 [ 457.135509][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 457.141253][ T31] ksys_unshare+0x4c8/0x8c0 [ 457.145836][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 457.150871][ T31] ? rcu_is_watching+0x15/0xb0 [ 457.155705][ T31] __x64_sys_unshare+0x38/0x50 [ 457.160508][ T31] do_syscall_64+0xfa/0x3b0 [ 457.165066][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.171133][ T31] ? clear_bhb_loop+0x60/0xb0 [ 457.175914][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.181823][ T31] RIP: 0033:0x7fb42a98ebe9 [ 457.186337][ T31] RSP: 002b:00007fb42b8b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 457.194819][ T31] RAX: ffffffffffffffda RBX: 00007fb42abb6090 RCX: 00007fb42a98ebe9 [ 457.203233][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 457.211240][ T31] RBP: 00007fb42aa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 457.219276][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 457.227459][ T31] R13: 00007fb42abb6128 R14: 00007fb42abb6090 R15: 00007ffcdb473418 [ 457.235547][ T31] [ 457.238613][ T31] INFO: task syz.1.2601:15420 blocked for more than 145 seconds. [ 457.248840][ T31] Not tainted syzkaller #0 [ 457.253889][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 457.262575][ T31] task:syz.1.2601 state:D stack:26488 pid:15420 tgid:15419 ppid:5855 task_flags:0x400140 flags:0x00004006 [ 457.274796][ T31] Call Trace: [ 457.278099][ T31] [ 457.281044][ T31] __schedule+0x1798/0x4cc0 [ 457.285746][ T31] ? lock_release+0x4b/0x3e0 [ 457.290341][ T31] ? is_bpf_text_address+0x292/0x2b0 [ 457.295873][ T31] ? __pfx___schedule+0x10/0x10 [ 457.300747][ T31] ? schedule+0x91/0x360 [ 457.305048][ T31] ? rcu_is_watching+0x15/0xb0 [ 457.309807][ T31] ? lock_release+0x4b/0x3e0 [ 457.314678][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 457.320611][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 457.326980][ T31] schedule+0x165/0x360 [ 457.331151][ T31] schedule_preempt_disabled+0x13/0x30 [ 457.336794][ T31] __mutex_lock+0x7e6/0x1350 [ 457.341390][ T31] ? xas_start+0x3b3/0x770 [ 457.345853][ T31] ? __mutex_lock+0x5bb/0x1350 [ 457.350615][ T31] ? rdma_dev_change_netns+0x39/0x300 [ 457.356118][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 457.361142][ T31] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 457.367430][ T31] ? rcu_is_watching+0x15/0xb0 [ 457.372233][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 457.378375][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 457.383636][ T31] ? _raw_spin_unlock+0x28/0x50 [ 457.388508][ T31] rdma_dev_change_netns+0x39/0x300 [ 457.393824][ T31] rdma_dev_exit_net+0x203/0x340 [ 457.398795][ T31] ? __pfx___might_resched+0x10/0x10 [ 457.404226][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 457.409730][ T31] ? net_generic+0x1e/0x240 [ 457.414372][ T31] ? mutex_is_locked+0x17/0x50 [ 457.419155][ T31] ? rtnl_is_locked+0x15/0x20 [ 457.423899][ T31] ops_undo_list+0x497/0x990 [ 457.428504][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 457.433712][ T31] ? ops_init+0x469/0x5c0 [ 457.438072][ T31] setup_net+0x2d3/0x320 [ 457.442316][ T31] ? __pfx_setup_net+0x10/0x10 [ 457.447233][ T31] ? copy_net_ns+0x304/0x4d0 [ 457.451827][ T31] ? down_read_killable+0x1d1/0x350 [ 457.457102][ T31] copy_net_ns+0x31b/0x4d0 [ 457.461524][ T31] create_new_namespaces+0x3f3/0x720 [ 457.466861][ T31] ? security_capable+0x7e/0x2e0 [ 457.471842][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 457.477637][ T31] ksys_unshare+0x4c8/0x8c0 [ 457.482142][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 457.487231][ T31] ? rcu_is_watching+0x15/0xb0 [ 457.492028][ T31] __x64_sys_unshare+0x38/0x50 [ 457.496939][ T31] do_syscall_64+0xfa/0x3b0 [ 457.501474][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.507587][ T31] ? clear_bhb_loop+0x60/0xb0 [ 457.512269][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.518331][ T31] RIP: 0033:0x7f46aed8ebe9 [ 457.522746][ T31] RSP: 002b:00007f46afc84038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 457.531675][ T31] RAX: ffffffffffffffda RBX: 00007f46aefb5fa0 RCX: 00007f46aed8ebe9 [ 457.540483][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 457.548950][ T31] RBP: 00007f46aee11e19 R08: 0000000000000000 R09: 0000000000000000 [ 457.557346][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 457.565992][ T31] R13: 00007f46aefb6038 R14: 00007f46aefb5fa0 R15: 00007ffe870204b8 [ 457.574589][ T31] [ 457.577662][ T31] INFO: task syz.1.2601:15422 blocked for more than 145 seconds. [ 457.585785][ T31] Not tainted syzkaller #0 [ 457.590744][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 457.599531][ T31] task:syz.1.2601 state:D stack:25992 pid:15422 tgid:15419 ppid:5855 task_flags:0x400140 flags:0x00004006 [ 457.611786][ T31] Call Trace: [ 457.615152][ T31] [ 457.618108][ T31] __schedule+0x1798/0x4cc0 [ 457.622652][ T31] ? lock_release+0x4b/0x3e0 [ 457.627416][ T31] ? is_bpf_text_address+0x292/0x2b0 [ 457.632742][ T31] ? __pfx___schedule+0x10/0x10 [ 457.638009][ T31] ? schedule+0x91/0x360 [ 457.642274][ T31] ? rcu_is_watching+0x15/0xb0 [ 457.647273][ T31] ? lock_release+0x4b/0x3e0 [ 457.651887][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 457.657927][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 457.664980][ T31] schedule+0x165/0x360 [ 457.669164][ T31] schedule_preempt_disabled+0x13/0x30 [ 457.674942][ T31] __mutex_lock+0x7e6/0x1350 [ 457.679527][ T31] ? xas_start+0x3b3/0x770 [ 457.685121][ T31] ? __mutex_lock+0x5bb/0x1350 [ 457.689916][ T31] ? rdma_dev_change_netns+0x39/0x300 [ 457.695934][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 457.700972][ T31] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 457.707325][ T31] ? rcu_is_watching+0x15/0xb0 [ 457.712117][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 457.718648][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 457.724504][ T31] ? _raw_spin_unlock+0x28/0x50 [ 457.729383][ T31] rdma_dev_change_netns+0x39/0x300 [ 457.735406][ T31] rdma_dev_exit_net+0x203/0x340 [ 457.740382][ T31] ? __pfx___might_resched+0x10/0x10 [ 457.746277][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 457.751781][ T31] ? net_generic+0x1e/0x240 [ 457.756627][ T31] ? mutex_is_locked+0x17/0x50 [ 457.761388][ T31] ? rtnl_is_locked+0x15/0x20 [ 457.766845][ T31] ops_undo_list+0x497/0x990 [ 457.771479][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 457.777249][ T31] ? ops_init+0x469/0x5c0 [ 457.781599][ T31] setup_net+0x2d3/0x320 [ 457.785965][ T31] ? __pfx_setup_net+0x10/0x10 [ 457.790916][ T31] ? copy_net_ns+0x304/0x4d0 [ 457.795636][ T31] ? down_read_killable+0x1d1/0x350 [ 457.800853][ T31] copy_net_ns+0x31b/0x4d0 [ 457.805348][ T31] create_new_namespaces+0x3f3/0x720 [ 457.810656][ T31] ? security_capable+0x7e/0x2e0 [ 457.816537][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 457.822289][ T31] ksys_unshare+0x4c8/0x8c0 [ 457.827456][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 457.832486][ T31] ? rcu_is_watching+0x15/0xb0 [ 457.837774][ T31] __x64_sys_unshare+0x38/0x50 [ 457.842562][ T31] do_syscall_64+0xfa/0x3b0 [ 457.847604][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.855105][ T31] ? clear_bhb_loop+0x60/0xb0 [ 457.859855][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.865812][ T31] RIP: 0033:0x7f46aed8ebe9 [ 457.870244][ T31] RSP: 002b:00007f46afc63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 457.878744][ T31] RAX: ffffffffffffffda RBX: 00007f46aefb6090 RCX: 00007f46aed8ebe9 [ 457.886808][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 457.894967][ T31] RBP: 00007f46aee11e19 R08: 0000000000000000 R09: 0000000000000000 [ 457.902994][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 457.910981][ T31] R13: 00007f46aefb6128 R14: 00007f46aefb6090 R15: 00007ffe870204b8 [ 457.919039][ T31] [ 457.922145][ T31] INFO: lockdep is turned off. [ 457.927096][ T31] NMI backtrace for cpu 1 [ 457.927125][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 457.927148][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 457.927159][ T31] Call Trace: [ 457.927167][ T31] [ 457.927175][ T31] dump_stack_lvl+0x189/0x250 [ 457.927205][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 457.927227][ T31] ? __pfx__printk+0x10/0x10 [ 457.927259][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 457.927283][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 457.927308][ T31] ? __pfx__printk+0x10/0x10 [ 457.927335][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 457.927366][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 457.927390][ T31] watchdog+0xf93/0xfe0 [ 457.927418][ T31] ? watchdog+0x1de/0xfe0 [ 457.927445][ T31] kthread+0x70e/0x8a0 [ 457.927470][ T31] ? __pfx_watchdog+0x10/0x10 [ 457.927495][ T31] ? __pfx_kthread+0x10/0x10 [ 457.927518][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 457.927542][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 457.927568][ T31] ? __pfx_kthread+0x10/0x10 [ 457.927589][ T31] ret_from_fork+0x3f9/0x770 [ 457.927607][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 457.927628][ T31] ? __switch_to_asm+0x39/0x70 [ 457.927650][ T31] ? __switch_to_asm+0x33/0x70 [ 457.927673][ T31] ? __pfx_kthread+0x10/0x10 [ 457.927694][ T31] ret_from_fork_asm+0x1a/0x30 [ 457.927724][ T31] [ 457.927731][ T31] Sending NMI from CPU 1 to CPUs 0: [ 458.073542][ C0] NMI backtrace for cpu 0 [ 458.073560][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 458.073578][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 458.073587][ C0] RIP: 0010:kasan_check_range+0x6b/0x2c0 [ 458.073615][ C0] Code: 00 ff f3 0f 1e fa 4c 39 cf 0f 82 58 02 00 00 49 89 ff 49 c1 ef 03 49 ba 00 00 00 00 00 fc ff df 4f 8d 1c 17 49 ff c8 4d 89 c1 <49> c1 e9 03 48 bb 01 00 00 00 00 fc ff df 4d 8d 34 19 4d 89 f4 4d [ 458.073629][ C0] RSP: 0018:ffffc90000007620 EFLAGS: 00000082 [ 458.073645][ C0] RAX: 1ffff92000000e01 RBX: 0000000000000010 RCX: ffffffff8172cd88 [ 458.073657][ C0] RDX: 0000000000000001 RSI: 0000000000000010 RDI: ffffc90000007798 [ 458.073667][ C0] RBP: 0000000000000000 R08: ffffc900000077a7 R09: ffffc900000077a7 [ 458.073678][ C0] R10: dffffc0000000000 R11: fffff52000000ef3 R12: ffffc90000007ff8 [ 458.073689][ C0] R13: ffffc90000007798 R14: ffffc90000007798 R15: 1ffff92000000ef3 [ 458.073701][ C0] FS: 0000000000000000(0000) GS:ffff888125c18000(0000) knlGS:0000000000000000 [ 458.073715][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 458.073726][ C0] CR2: 00007fc4db0e7d60 CR3: 000000000df36000 CR4: 00000000003526f0 [ 458.073742][ C0] Call Trace: [ 458.073748][ C0] [ 458.073756][ C0] __asan_memset+0x22/0x50 [ 458.073774][ C0] unwind_next_frame+0xc98/0x2390 [ 458.073795][ C0] ? unwind_next_frame+0xa5/0x2390 [ 458.073812][ C0] ? irq_exit_rcu+0x9/0x30 [ 458.073828][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 458.073848][ C0] arch_stack_walk+0x11c/0x150 [ 458.073868][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 458.073891][ C0] stack_trace_save+0x9c/0xe0 [ 458.073908][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 458.073927][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 458.073948][ C0] kasan_save_stack+0x3e/0x60 [ 458.073965][ C0] ? kasan_save_stack+0x3e/0x60 [ 458.073981][ C0] ? kasan_record_aux_stack+0xbd/0xd0 [ 458.073996][ C0] ? insert_work+0x3d/0x330 [ 458.074017][ C0] ? __queue_work+0xcd2/0xfb0 [ 458.074031][ C0] ? call_timer_fn+0x17e/0x5f0 [ 458.074060][ C0] ? __run_timer_base+0x646/0x860 [ 458.074077][ C0] ? run_timer_softirq+0xb7/0x180 [ 458.074095][ C0] ? handle_softirqs+0x283/0x870 [ 458.074109][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 458.074122][ C0] ? irq_exit_rcu+0x9/0x30 [ 458.074153][ C0] kasan_record_aux_stack+0xbd/0xd0 [ 458.074169][ C0] insert_work+0x3d/0x330 [ 458.074192][ C0] __queue_work+0xcd2/0xfb0 [ 458.074208][ C0] ? __queue_work+0x102/0xfb0 [ 458.074226][ C0] call_timer_fn+0x17e/0x5f0 [ 458.074245][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 458.074261][ C0] ? call_timer_fn+0xbe/0x5f0 [ 458.074281][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 458.074305][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 458.074337][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 458.074354][ C0] __run_timer_base+0x646/0x860 [ 458.074372][ C0] ? ktime_get+0x3e/0x1f0 [ 458.074393][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 458.074419][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 458.074443][ C0] run_timer_softirq+0xb7/0x180 [ 458.074463][ C0] handle_softirqs+0x283/0x870 [ 458.074486][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 458.074503][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 458.074528][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 458.074549][ C0] __irq_exit_rcu+0xca/0x1f0 [ 458.074564][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 458.074582][ C0] irq_exit_rcu+0x9/0x30 [ 458.074595][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 458.074616][ C0] [ 458.074627][ C0] [ 458.074634][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 458.074650][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 458.074671][ C0] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 56 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 458.074685][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 458.074697][ C0] RAX: 2ea0c8adead69e00 RBX: ffffffff819683b8 RCX: 2ea0c8adead69e00 [ 458.074709][ C0] RDX: 0000000000000001 RSI: ffffffff8be33660 RDI: ffffffff819683b8 [ 458.074720][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 458.074731][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa38630 [ 458.074742][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20 [ 458.074754][ C0] ? do_idle+0x1e8/0x510 [ 458.074769][ C0] ? do_idle+0x1e8/0x510 [ 458.074785][ C0] default_idle+0x13/0x20 [ 458.074800][ C0] default_idle_call+0x74/0xb0 [ 458.074815][ C0] do_idle+0x1e8/0x510 [ 458.074830][ C0] ? __pfx_do_idle+0x10/0x10 [ 458.074851][ C0] cpu_startup_entry+0x44/0x60 [ 458.074866][ C0] rest_init+0x2de/0x300 [ 458.074890][ C0] start_kernel+0x3a9/0x410 [ 458.074909][ C0] x86_64_start_reservations+0x24/0x30 [ 458.074930][ C0] x86_64_start_kernel+0x143/0x1c0 [ 458.074952][ C0] common_startup_64+0x13e/0x147 [ 458.074977][ C0] [ 458.075944][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 458.075961][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 458.075983][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 458.075994][ T31] Call Trace: [ 458.076001][ T31] [ 458.076009][ T31] dump_stack_lvl+0x99/0x250 [ 458.076035][ T31] ? __asan_memcpy+0x40/0x70 [ 458.076055][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 458.076076][ T31] ? __pfx__printk+0x10/0x10 [ 458.076106][ T31] vpanic+0x281/0x750 [ 458.076127][ T31] ? __pfx_vpanic+0x10/0x10 [ 458.076147][ T31] ? preempt_schedule+0xae/0xc0 [ 458.076172][ T31] ? preempt_schedule_common+0x83/0xd0 [ 458.076199][ T31] panic+0xb9/0xc0 [ 458.076218][ T31] ? __pfx_panic+0x10/0x10 [ 458.076239][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 458.076268][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 458.076292][ T31] watchdog+0xfd2/0xfe0 [ 458.076319][ T31] ? watchdog+0x1de/0xfe0 [ 458.076345][ T31] kthread+0x70e/0x8a0 [ 458.076367][ T31] ? __pfx_watchdog+0x10/0x10 [ 458.076390][ T31] ? __pfx_kthread+0x10/0x10 [ 458.076413][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 458.076436][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 458.076461][ T31] ? __pfx_kthread+0x10/0x10 [ 458.076482][ T31] ret_from_fork+0x3f9/0x770 [ 458.076502][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 458.076522][ T31] ? __switch_to_asm+0x39/0x70 [ 458.076544][ T31] ? __switch_to_asm+0x33/0x70 [ 458.076566][ T31] ? __pfx_kthread+0x10/0x10 [ 458.076588][ T31] ret_from_fork_asm+0x1a/0x30 [ 458.076617][ T31] [ 458.718020][ T31] Kernel Offset: disabled [ 458.722337][ T31] Rebooting in 86400 seconds..