last executing test programs: 2.257279286s ago: executing program 3 (id=250): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) writev(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="b0564a76af255d5288634fa71f2d917efa44ada5269bfacb4b1a83198c4441513eb6bb143388803778af60c7a76ceace7cdbdaabe91cf7a05e527ca3e65c4fe642da11213ce1b9e05297bb4a33c83e"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x2, r0}, 0x94) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="b0564a76af255d5288634fa71f2d917efa44ada5269bfacb4b1a83198c4441513eb6bb143388803778af60c7a76ceace7cdbdaabe91cf7a05e527ca3e65c4fe642da11213ce1b9e05297bb4a33c83e"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x2, r0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) 2.037380435s ago: executing program 3 (id=254): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x0, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xf, 0x8}, {0xc}, {0xb, 0xffde}}}, 0x24}}, 0x40051) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r1, {0x4, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x24000000) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x200000, @empty, 0x1}, 0x1c) (async) listen(r2, 0xfffffffe) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) connect$bt_l2cap(r4, 0x0, 0xc) (async) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) (async) close(0x4) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x50}, 0x40080) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r5, 0x8b32, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'syzkaller1\x00'}) (async) r6 = socket$phonet(0x23, 0x2, 0x1) getsockopt$sock_cred(r6, 0x1, 0x11, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYRES8], 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x91) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.814448696s ago: executing program 3 (id=259): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004300)=@newtaction={0x14, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}}, 0x0) (async) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0xfac}], 0x1, 0x10142, &(0x7f0000000580)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x48) bpf$MAP_UPDATE_BATCH(0x19, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x16ec7077c8c871d9}, 0x38) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x108}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000c2c52b75adf300000101080000000000000000020000000600124000000000140005800e00010069727e5c7ad5c154a106632d3230"], 0x30}, 0x1, 0x0, 0x0, 0x15}, 0x40) 1.636914927s ago: executing program 3 (id=264): socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getpeername(r0, &(0x7f0000000780)=@phonet, &(0x7f0000000940)=0x80) (async) getpeername(r0, &(0x7f0000000780)=@phonet, &(0x7f0000000940)=0x80) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) sendmsg$unix(r2, &(0x7f0000000540)={&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000100)="e546c0e87cf12ab74517ad68c972c7108e43597ac1577d016d9f75464098ac6cd854f2dd9294f1353ba0034e31fb2e7f6ee826a4c19463014a186af0f3d03467386b7ecc05dbe023d2bad62177678db9ae935eee86307c00fce05f20bca7d995c1f8a655e72dacea47ec371829610fcbe0f84020c444a01262b1b5e74a6f04aece1e4346de6b79707c119d391040f2a582df9d3a4024cfa976b760", 0x9b}, {&(0x7f00000001c0)="a4772a35eab05e299dcf2ec51ccb8f361f76b6b166bed400ac1104ca6ec21610ffa5efdae9119b48dd1f716ae6a7249409b372242080e1f227425b406fc9886e9f0c3998030342233ef818d7c22365a533b2581d0c63523dbd57dc74f49a0d26a2ab0904eb401613dc9d88d273a137f2c49522b0f2182118ad01cb418ec1613ea06d020d5acb84878de030", 0x8b}, {&(0x7f0000000280)="7c4da4976a4640eb116ca121409f37b1298bab89aa5ac767812a5d78248635b3beecb5defa1cf5b2a3133cb03f24b8af5822032d99567c7db76f5ed542f481d2c0548dc763354709f2d84e4f54c839a9430f5cb61686df3da5cf48206e4d0f09f8d2d6412888da69432aca539dcf059786180731a754fbf7f129365a8d690a104e7bf50d795e086c7e6b97a7c3b60c340adf167213471ec143da2e412f953e44f64418a89b787a3541bed991e3bf5bd2232672eab04ecdb48ee153ae0793c11e5a8c3f3cb073a255ea6566c5f955005fec6591691c2c0794352ade", 0xdb}, {&(0x7f0000000380)="a2e520e04161beba17c694c76a24699cd820dc43dd69b7fcd3da6d1e4047bca9e34e5f72b144b1cbb3243e9795d5f250c6ac0a4d3f5c9ff6005e3af06cf89ff65baba1a094aa34086aeb89e4a2886d9e5ef81502889a25bb0472a3cdca82c7ec8d82211f329270f3d03dd53471cb74b73ac26a6cc0651c5513da9de40e8af058166aa4728fcb9e3d2ba1d109", 0x8c}, {&(0x7f0000000440)="d83d03d92c3a0eaca655df45244e9d0d74f07cfe13d2b5c4064381276d29333aed89c6b82810b70620b4f0992b56df94facf369619aaf76b", 0x38}], 0x5, &(0x7f0000000500), 0x0, 0x4084}, 0x40) (async) sendmsg$unix(r2, &(0x7f0000000540)={&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000100)="e546c0e87cf12ab74517ad68c972c7108e43597ac1577d016d9f75464098ac6cd854f2dd9294f1353ba0034e31fb2e7f6ee826a4c19463014a186af0f3d03467386b7ecc05dbe023d2bad62177678db9ae935eee86307c00fce05f20bca7d995c1f8a655e72dacea47ec371829610fcbe0f84020c444a01262b1b5e74a6f04aece1e4346de6b79707c119d391040f2a582df9d3a4024cfa976b760", 0x9b}, {&(0x7f00000001c0)="a4772a35eab05e299dcf2ec51ccb8f361f76b6b166bed400ac1104ca6ec21610ffa5efdae9119b48dd1f716ae6a7249409b372242080e1f227425b406fc9886e9f0c3998030342233ef818d7c22365a533b2581d0c63523dbd57dc74f49a0d26a2ab0904eb401613dc9d88d273a137f2c49522b0f2182118ad01cb418ec1613ea06d020d5acb84878de030", 0x8b}, {&(0x7f0000000280)="7c4da4976a4640eb116ca121409f37b1298bab89aa5ac767812a5d78248635b3beecb5defa1cf5b2a3133cb03f24b8af5822032d99567c7db76f5ed542f481d2c0548dc763354709f2d84e4f54c839a9430f5cb61686df3da5cf48206e4d0f09f8d2d6412888da69432aca539dcf059786180731a754fbf7f129365a8d690a104e7bf50d795e086c7e6b97a7c3b60c340adf167213471ec143da2e412f953e44f64418a89b787a3541bed991e3bf5bd2232672eab04ecdb48ee153ae0793c11e5a8c3f3cb073a255ea6566c5f955005fec6591691c2c0794352ade", 0xdb}, {&(0x7f0000000380)="a2e520e04161beba17c694c76a24699cd820dc43dd69b7fcd3da6d1e4047bca9e34e5f72b144b1cbb3243e9795d5f250c6ac0a4d3f5c9ff6005e3af06cf89ff65baba1a094aa34086aeb89e4a2886d9e5ef81502889a25bb0472a3cdca82c7ec8d82211f329270f3d03dd53471cb74b73ac26a6cc0651c5513da9de40e8af058166aa4728fcb9e3d2ba1d109", 0x8c}, {&(0x7f0000000440)="d83d03d92c3a0eaca655df45244e9d0d74f07cfe13d2b5c4064381276d29333aed89c6b82810b70620b4f0992b56df94facf369619aaf76b", 0x38}], 0x5, &(0x7f0000000500), 0x0, 0x4084}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r5, &(0x7f00000001c0)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r5, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000005c0)='=', 0x1}], 0x1}}], 0x1, 0x40008d0) (async) sendmmsg(r5, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000005c0)='=', 0x1}], 0x1}}], 0x1, 0x40008d0) recvmmsg(r5, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)=""/250, 0xfa}], 0x1}, 0xf}], 0x2, 0x10122, 0x0) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) (async) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r4, 0x89f5, &(0x7f0000000000)) (async) ioctl$sock_netdev_private(r4, 0x89f5, &(0x7f0000000000)) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001fc0)) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r6, &(0x7f0000000c40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c00)={&(0x7f00000009c0)={0x10, 0x3f6, 0x1, 0x70bd2c, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000814}, 0x4000000) socket(0x10, 0x80002, 0x0) (async) r7 = socket(0x10, 0x80002, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=ANY=[@ANYBLOB="80000000000201030000140000004f43fcb4e5f7508ed77db4cc95000005000002640001800c000280050001000100000006000340000000002c00018014000300fc00000000000000000000000000000014000400ff0200000000000000000000000000010c00028005000100110000000c000280050001002f00000006000340000000000600034000030000726bbdfe7eebdcb4cef6477d90aeacb5742c523dff9779ab59539bf848496d939068d1444c9dae204881fe65822b5be14095ebda97aa4a18d4258b51cf95c356aeefc0c18d359fcbbe55c56215a271ae93b70f0f042aac5d4124473f064f29270a3ff650fc392566a4accc2f82f5186e8cfbef8e0b352aa258f8f281d58dc2c623489f02406c0b4183fbf185436c27bcc0491b46ef73ec4e29a7"], 0x80}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r8 = socket(0x10, 0x803, 0x0) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0xfffffffffffffe36}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f00000006c0)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000b40)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xfffffffffffffe30}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)=@newqdisc={0x9c, 0x24, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x70, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xdf, 0x2, 0xde, 0x7, 0xfff, 0x2}, {0x9, 0x1, 0x6, 0x3, 0x3, 0x8000006}, 0x3, 0x0, 0x6ad}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf54bb7f573150c32}, @TCA_TBF_PBURST={0x8, 0x7, 0xe52}, @TCA_TBF_PBURST={0x8, 0x7, 0x2143}, @TCA_TBF_PARMS={0x28, 0x1, {{0xff, 0x2, 0x2, 0x4, 0x3, 0x81}, {0x7, 0x1, 0xfec, 0x24, 0x9cba, 0xffff}, 0x5, 0xffff, 0x1932}}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 1.472714029s ago: executing program 4 (id=267): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000100)={r3}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000080)={r3}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f00000000c0)) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x0, 0xf]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0xac}}, 0x48004) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="240000001e000100000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="00000000060005"], 0x24}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000003040)) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) setsockopt$ax25_SO_BINDTODEVICE(r7, 0x101, 0x19, &(0x7f0000000040)=@bpq0, 0x10) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e24, @remote}, 0x3, 0x3, 0x3, 0x4}}, 0x26) 1.43699762s ago: executing program 1 (id=268): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) (async) r0 = socket$inet(0x2, 0x6000000000000001, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001580)={0x2c, 0x3f, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}, @typed={0x4, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r0, 0x0) 1.341330213s ago: executing program 0 (id=269): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x22, 0x2, 0x24) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_MAX={0x8}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x44}}, 0x0) (async) listen(r1, 0x5) 1.321261907s ago: executing program 1 (id=270): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b40)="a2", 0xfffffd2a}], 0x1, 0x0, 0x0, 0x20000000}, 0x4000041) close(r1) close(r0) r2 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000002c0)=0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$kcm(0x29, 0x8, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000001080)={r1, r5}) setsockopt(r3, 0x84, 0x18, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) 1.250877444s ago: executing program 4 (id=271): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg$unix(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001940)=""/216, 0xd8}], 0x1}, 0x2) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}]}], {0x14}}, 0x6c}}, 0x0) 1.055974669s ago: executing program 2 (id=272): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8}]}]}, 0x58}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x403, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r2}, @IFLA_GTP_FD0={0x8, 0x1, @udp=r3}]}}}]}, 0x40}, 0x1, 0xba01}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f00000007c0)=@hci={0x1f, 0x300, 0x31}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000f40)="000000000000000000000000892f", 0xe}], 0x1}, 0x44000) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newtaction={0x7c, 0x30, 0xb, 0x0, 0x0, {}, [{0x68, 0x1, [@m_ct={0x64, 0x1, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}, @TCA_CT_NAT_PORT_MIN={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) 1.053666296s ago: executing program 0 (id=273): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000811278000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791038000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) close(r0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="80010000100001000000000000000000ac574400000000000000007f000001000000000000000000000000000000000000000002000000000a00ff8000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000000006c000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x180}}, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x298, 0x98, 0x168, 0x200, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x298}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x1}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000811278000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791038000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) close(r0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="80010000100001000000000000000000ac574400000000000000007f000001000000000000000000000000000000000000000002000000000a00ff8000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000000006c000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x180}}, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x298, 0x98, 0x168, 0x200, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x298}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x1}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) (async) 1.053128539s ago: executing program 4 (id=274): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}, 0x8103}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000002b00)=""/245, 0xf5}, {&(0x7f0000000740)=""/88, 0x58}, {&(0x7f0000003d40)=""/4097, 0x1001}, {&(0x7f00000016c0)=""/217, 0xd9}, {&(0x7f0000000440)=""/125, 0x7d}], 0x6}, 0x90000000}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000940)=""/129, 0x81}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000005080)=""/4090, 0xffa}, {&(0x7f0000006080)=""/4133, 0x1025}], 0x4}, 0xb0}, {{0x0, 0x0, 0x0}, 0xc}], 0x8, 0x10000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x1000}, 0xc) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000800030000000000140000004500801600660000000190780a010100ac1414aa05009078e0000002450b0f6c0068002f05330001ac1414bb640101018d97ed9116203799ba333b2e4ad363d74d26c79157f93519f12c1adc44360a010500000061bcccf5965e9b432389448fd07f4bc979cd5214a78ab12ec1aa091716fb41cd58fd0b6404fdad8dca32e31b25"], 0xfdef) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000100)={0x6c, @multicast1, 0x4e23, 0x1, 'lc\x00', 0x20, 0x7fff, 0x3b}, 0x2c) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000000000000c00078008001240000000060500010006000000050005000a00000005000400000000000900020073797a3000000000797a3000000000050004000200"/83], 0x60}}, 0x0) 1.052481012s ago: executing program 2 (id=275): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xbf}]}, &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x53}, 0x90) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000280)="fed68b827559728fe7e8228f91a651fc7b5e291f78d28871f512ca0e7240fe5169355c6212a003046ce127723fa0fdc1364c990de83a66a0aab183f897f488e7076dfeb1c30eabc85cdfd45918aa07a7905cc78a2d42bd8bf3b7e616d6973797eb66f825") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r2, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x40) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) setsockopt$ax25_SO_BINDTODEVICE(r6, 0x101, 0x19, &(0x7f0000000140)=@rose={'rose', 0x0}, 0x10) r7 = socket$rds(0x15, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) bind$can_j1939(r3, &(0x7f0000000300)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0x1}, 0x18) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x0, @phonet={0x23, 0xd, 0x8, 0x10}, @can={0x1d, r5}, @nl=@kern={0x10, 0x0, 0x0, 0x800000}, 0x5, 0x0, 0x0, 0x0, 0x1aff, 0x0, 0xff, 0x7, 0x6}) 1.052094554s ago: executing program 1 (id=276): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000800000000000000000000024000180060005004e230000060001000200000008000300ac1414aa0800060001000000"], 0x38}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r4, 0x8b2d, &(0x7f0000000040)) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x3ff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) socket$unix(0x1, 0x1, 0x0) write$tun(r7, &(0x7f00000004c0)=ANY=[@ANYBLOB="00006003aaaaaaaaaabbaaaaaaaaaa0288a8290081000100080045000024000000000001a0e2894e58ea0086dd00109078420900e08000000000000000000000000000e1f70895d62ef13dfc1b9b4fcfdd54f818c52fce113df11b91c8ce36ff15f28b3f5354efa37f553ad21e347a4bc5bd18d77cece739d4e2559f13ccef5c8801ca2c184303178028bafac195c600a81ef9238a72d55a367b1130b4c17c8291a9ce7c2cc7c65376cf894025506f50c4170d4d815796352daa0d08cf458743cbe4bf78e4d1508443ce591f99655359b7368ca1701a4e299e8affd03031ed18c7a01b2f7ceda93fa8d6950d3eff126d28"], 0x3e) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000000)={{0x2, 0x808, @remote}, {0x6, @local}, 0x24, {0x2, 0x80, @broadcast}, 'syz_tun\x00'}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r3, @ANYRES16=r1, @ANYRES32=r9, @ANYRES32=0x0, @ANYBLOB="14000400ff010000000000000000000000000001060005004e21a5be"], 0x58}}, 0x40c1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000040)) 957.376365ms ago: executing program 0 (id=277): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) readv(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="af", 0x1, 0x1840, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000340)=0x20000000, 0x4) ppoll(&(0x7f0000000000)=[{r1, 0x408a}], 0x1, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000080)={0x1, 0x6}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r2], 0x38}, 0x1, 0x0, 0x0, 0x40049}, 0x0) 908.737074ms ago: executing program 0 (id=278): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100ffffffff08000200020000002c00048005000300020000000500030000000000050003000000000005000300050000000500030001"], 0x50}}, 0x0) (async) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x5}, 0x8) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r1) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xa0000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r3, 0x20, 0x70bd2a, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000001914000000110001"], 0xd8}}, 0x80) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c000000210021002cbd7000fedbdf2502141007020000000000010008000100e0000001080006000a0000000c000c40000000000000001e0c000c4000000000000000061800020006"], 0x5c}, 0x1, 0x0, 0x0, 0x40d5}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100f05d7d5a000005000000060000000000000c040000000b0000000000001105000000010000000b000000010000130800000008000000070000000000200000300000008a0d9564275a91e26b8aab7294fff13c235e9354d28908cfadbfe4cc5c5fe6ce9e7f5407636af588d4febfdde5771be9d5a028c5e159ca504a86640e1ef7b1c8e0a6"], &(0x7f00000001c0)=""/56, 0x51, 0x38, 0x1, 0xe04, 0x10000}, 0x28) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000629d0c6eba619ad87bce530db911db80295967d473429f5d9548fbb45f003e2d88ed709fe7a678758cf01923ef7de0523477d7580355c3d4527ed51e96c4b17bf09738ef89c50aa4dcff06b272e4473036f98d2b82283d32626f00416b87f54b24ccd00edfe4b4579e71025b77e19cb095f1d684b0bf78b5d53bf5456b35cc94f0ff4194e3bf226c4d99a2831a77e2f66724c9a19dbed5b1dba818702d704e74"], &(0x7f0000000200)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x27, 0xe, 0x0, &(0x7f0000000040)="f8ad48cc02cb29fcc800775b86dd", 0x0, 0x7f, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 895.030532ms ago: executing program 2 (id=279): clock_gettime(0x8, &(0x7f0000006500)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x4001, 0x3, 0x458, 0x300, 0xb, 0x148, 0x308, 0x148, 0x3c0, 0x230, 0x242, 0x3c0, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {}, {}, 0x73}, 0x0, 0x2d0, 0x300, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0xe, 0x0, 0x6, './file0\x00'}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0xec010000, 0xa0, 0xc0, 0x0, {}, [@common=@ah={{0x30}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) 797.277669ms ago: executing program 4 (id=280): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x140000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x8c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xce}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xa}, @CTA_LABELS_MASK={0xc, 0x17, [0x400, 0x7]}, @CTA_PROTOINFO={0x40, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x3c, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x401}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0xba}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x3}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x6}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x801}, 0x90) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x2, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) 764.208002ms ago: executing program 2 (id=281): socket(0x2a, 0x2, 0x0) (async) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x8001, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000280)='blkio.bfq.empty_time\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/134, 0x86}], 0x1, 0x4, 0x2) r4 = socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@ifindex=r1, 0x2, 0x0, 0xfffffff7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0], 0x0}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r8}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@ifindex=r1, r3, 0x12, 0x14, 0x0, @void, @value=r8, @void, @void, r6}, 0x20) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="480000001000370429bd7000fcdbdf2500000000", @ANYRES32=r9, @ANYBLOB="0000000000280012800b000100697061ff494ecf78fd325c85e5c55ac46181000000000b1f8c"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880) (async) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x26}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x26}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) accept(r3, &(0x7f0000000100)=@xdp, &(0x7f0000000080)=0x80) (async) accept(r3, &(0x7f0000000100)=@xdp, &(0x7f0000000080)=0x80) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000680), r0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x44, r11, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xc4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40880}, 0x20000000) bind$inet6(r10, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2, 0xdd}, 0x1c) setsockopt$inet6_int(r10, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) r12 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) 654.70461ms ago: executing program 3 (id=282): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000001740)={0x0, 0x6, &(0x7f0000001700)={&(0x7f0000000440)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x30}}, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000000), &(0x7f0000000040)=0x8) (async) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'ipvlan0\x00'}) (async) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) (async) bind$tipc(r6, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) (async) bind$tipc(r6, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r7, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r6, 0x0, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x88, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0xfffffcb7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x88}}, 0x0) sendto(r3, 0x0, 0x0, 0x20000000, &(0x7f00000004c0)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x80) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8000000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="7000000000010104000000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002801400018008000100e000000108000200ac1e00010c00028005000100000000ff00000740000000000c0006800804010000000000"], 0x70}}, 0x0) 501.312165ms ago: executing program 2 (id=283): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) socket$unix(0x1, 0x5, 0x0) (async) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x400000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0xfffa, 0x7, 0x8, 0x8}, {0x6, 0x1, 0xd, 0x6, 0x6, 0xfb8e001}, 0x6, 0x4, 0x111e}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000011}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x9, 0x4, 0x78, 0x9}}}}]}, 0x48}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 499.828689ms ago: executing program 0 (id=284): syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x14, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, "78e1054910d8a0f0efd0d4c0ba321cff5db0aac6"}}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffff6487a2bed3d608004500005803000000006c907800000000000000000420880b0000000000000800000086dd080088be00ef29bad89077235e000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069001a000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f00000000c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x5c, r1, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xbb4c}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0xd}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008041}, 0x400c010) r4 = socket$key(0xf, 0x3, 0x2) close(r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IPT_SO_GET_ENTRIES(r5, 0x0, 0x41, &(0x7f0000000000)={'nat\x00', 0x4, "99161d83"}, &(0x7f0000000080)=0x28) 462.69676ms ago: executing program 4 (id=285): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0x9, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x2040) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x24000481}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}]}}]}, 0x3c}}, 0x20004055) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x400c050}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x68, 0x10, 0xffffff1f, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private0}, @IFLA_GRE_LOCAL={0x14, 0x6, @private2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 453.576263ms ago: executing program 3 (id=286): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x31}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES16=0x0], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x2004010) recvmmsg(r0, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/140, 0x8c}, {&(0x7f0000001740)=""/4090, 0xffa}, {&(0x7f00000001c0)=""/91, 0x5b}], 0x3}}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000000), 0x2a}, 0x8}], 0x3, 0x2, 0x0) 353.093113ms ago: executing program 0 (id=287): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xfbfd, 0x1}, 0x6) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000000)) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r3 = accept(r2, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r3) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="590000f6", @ANYRES16=0x0, @ANYBLOB="00042abd7000ffdbdf25020000003c00018038000400200001000a004e200000bd78fe800000000000000000000000000024050000001400020002004e24ac1e01010000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4004004}, 0x40) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000400)={"561d4362bf8f1986895d0dc33a868944", 0x0, 0x0, {0x101, 0xfff}, {0x9, 0x3acc}, 0x9, [0x6, 0x2, 0x6, 0x0, 0x1, 0x18, 0xb, 0x0, 0x400, 0x7ff, 0x3, 0xdc1b, 0x85d1, 0xfd, 0x8, 0x4]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@typedef={0x2, 0x0, 0x0, 0x8, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x1}]}]}, {0x0, [0x0, 0x61]}}, &(0x7f00000000c0)=""/209, 0x3c, 0xd1, 0x1}, 0x20) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000001400)={{r0}, r5, 0x2, @unused=[0x1f2, 0x0, 0x43b6eb95, 0x8], @subvolid=0x1}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@mss={0x2, 0x1400}, @window={0x3, 0x7, 0x13ce}], 0x2) r6 = socket$kcm(0x29, 0x469f99f9e55930af, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000002c0)={r0}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xb8, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0xff, 0x0, 'hsr0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r7, &(0x7f0000000300)={&(0x7f0000000040)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f0000000280)={0x0}, 0x7, 0x0, 0x0, 0x2004c004}, 0x0) 262.547698ms ago: executing program 1 (id=288): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @loopback=0x7f000300, @private=0xa010102}}}], 0x20}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r1 = socket$inet(0x2, 0x5, 0x6) socket$inet_icmp(0x2, 0x2, 0x1) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x4, @mcast1, 0x5}, @in6={0xa, 0x4e23, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x66}, @in6={0xa, 0x4e22, 0x2, @remote, 0x7ff}], 0x54) (async) accept$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @empty}, &(0x7f0000000080)=0x10) 108.757596ms ago: executing program 4 (id=289): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r2, 0x400454da, &(0x7f0000000000)) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000400)={'veth1_vlan\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8020000}, 0xc, &(0x7f0000000200)={&(0x7f0000001300)=ANY=[@ANYBLOB="00190000", @ANYRES16=r3, @ANYBLOB="040025bd7000ffdbdf258300000008cc0300", @ANYRES32=r4, @ANYBLOB="0c009900050000000c0000003802118034020580300200800c01038004000180040002000400020004000200980001800c00018005000700050000002c0001800500050006000000080002000000000005000500060000000600040008000000050006001400000020000180050005000700000005000300090000000400090004000a00040009000800018004000b0014000180080002000000000004000800040001002000018004000c000400010008000200010000000400080006000400faff00000400020004000200580001801000018004000800050005000c0000001800018004000b000800020004000000060004000500000024000180050005000b000000050007000100000004000100060004000800000004000b00080001800400090014000280050019010800000005001801360000000c000280080022016501000010000380040002000400020004000200a4000380380001803400018004000b00050003000400000004000c0004000b000500060013000000050005000c00000004000c00050006001b000000640001800c000180050003000c0000002c000180050005000300000004000b0004000a0004000b0004000a000800020003000000050006001e0000002800018004000c0005000600080000000600040004000000050006001d0000000500050008000000040002004c00028005001801370000000800a0000900000008009f000500000005001801160000000800a000a3000000080027000200000008002201c6030000050019010800000005001901050000000a000600080211000000000008001001030000003811118034110580c40300800a00010008021100000100000a000100ffffffffffff00000a00010008021100000100000a000100ffffffffffff00000c0002800800270002000000cc02038014000180100001800500030008000000040001001c000180180001800500070008000000060004000100000004000800040002000c0001800800018004000100280001802400018005000500030000000400090004000800060004000700000004000c0004000b00a000018010000180050005000a000000040001001c000180050003000100000004000800050005000500000004000a0028000180050007000300000004000c0004000100040009000500070004000000050007000400000018000180050006001f00000004000b000400010004000a00040001802c0001800500060012000000050003000b000000050003000f0000000400080004000900050003000b000000bc01018018000180060004000600000004000b0008000200030000003800018004000b00040008000400090004000800060004000400000004000b00050006001800000004000c0004000900050003000700000044000180050005000100000004000a00050007007200000004000a000500050001000000050005000100000005000600120000000400090004000a0006000400b10000002400018004000900050007000b000000050007004f0000000400090004000a00040001001c00018004000c0004000b00050006001800000004000a00040009002000018005000300000000000400010005000500050000000400090004000800400001800400010005000700030000000800020004000000050003000d000000040008000500050003000000050006000800000004000b0005000300050000003c000180050003000e000000050005000200000004000c0004000a00050003000100000004000800050005000000000004000b000500060016000000180001800500030005000000040009000600040005000000300001800400090004000a0004000b0004000c0005000600090000000400090004000b0004000a00050003000700000004000200b8000380b40001802c00018005000700bb00000004000900060004000500000004000a00050006000400000004000b0004000800380001800500060011000000050006001300000004000b00050007000900000004000a0004000100040001000400080005000500070000004000018004000c0004000b000400080008000200040000000500070001000000050007000100000004000c0005000700010000000400090005000600030000000c0001800500050001000000b40500802c0002800800a1000e00000008009f000400000008009f0000000000050019010500000008002700030000000a000100ffffffffffff0000bc02038004000200200001801c00018005000300030000000400010004000b000400090004000c00b000018044000180050006001d000000050007007f00000004000a00050007001000000004000b00080002000400000006000400ca0b0000050003000b000000050007000600000028000180040009000400090004000800080002000200000004000b000400090005000500040000003000018004000900050007007400000008000200010000000400010004000c00050006001d00000005000500010000001000018004000a0005000500090000004400018010000180050005000100000004000a002400018004000a00050006001c0000000400080004000c000600040000010000040009000c00018004000b00040009002c0001802800018005000300020000000400080004000a0004000b0006000400018000000400010004000a0004000200cc0001800c0001800500070006000000240001800600040000000000080002000100000004000c00050003000f00000004000a001000018004000c000400080004000c002400018005000500060000000400080005000600010000000500030007000000040009000800018004000c0030000180050007000500000006000400ff0700000400080004000a0004000900050005000900000005000600130000002c000180050006000300000004000a0004000c000500030007000000060004000c00000004000a0004000100a40001802000018005000300050000000500070005000000060004000200000004000a001400018004000b0004000b00050006001f0000000c00018004000b0004000b000800018004000a000c00018004000b0004000100180001800800020003000000060004008100000004000c0008000180040001002c00018004000900050005000400000004000a000400010006000400070000000400080004000c0004000c0030020380b0000180100001800400010004000b0004000a003000018004000900050005000d0000000800020002000000050005000700000004000900050003000600000004000c004000018004000100080002000100000004000900050005000f00000004000a0004000a00050006000b00000006000400001000000500060010000000040008002c000180050005000f00000004000c0004000800050006000000000004000c00060004000600000004000a002001018028000180050007000d000000050003000f0000000400080004000100040001000500070004000000240001800400080004000b000600040008000000040009000400010005000300080000000c000180080002000200000014000180080002000000000005000500000000003c000180050003000f000000050005000d00000004000a0004000a00060004000700000004000800040001000500030005000000050007009c00000040000180060004009a00000005000300090000000500030007000000050006001f0000000400010004000b0006000400820000000400080005000300000000000c00018004000a0004000c002800018004000c00060004000200000004000c00050003000e0000000400080004000800040001002400018014000180040001000800020022d1bc4604000b000c0001800500070002000000340001800800018004000a001c00018004000b00050003000d00000004000a0006000400070000000c00018004000b0004000a000400020044000280080026006c0900000800a00001000000050018010700000008002201b20100000800a10004000000080026007116000008002201ff01000005001801180000003800038034000180240001800500060016000000060004000800000004000c00060004000e000000040008000c00018004000100040008001000038004000200040002000400020090030080300003802c0001802800018006000400080000000500070006000000050006000f0000000400010004000b000400090074000380040002005c0001801800018004000b00050005000f00000006000400030000000800018004000b002400018004000800050005000400000004000b00060004000500000005000500050000001400018004000c00050007002100000004000900040002000400020004000200040001800a000100ffffffffffff0000dc02038004000200cc0001801c00018005000500060000000600040000000000050005000b0000003c000180050006001a0000000600040000100000060004003206000008000200010000000400090004000b0004000a0004000a000400010004000a00440001800400080005000700f80000000500050001000000050003000b0000000500070011000000050005000300000004000a0004000800050006001a00000004000c002c00018004000800050005000600000004000800040008000800020003000000050007000100000004000900400001801800018004000800050006000d000000050003000c000000040001802000018004000b0006000400ff07000006000400020000000500070008000000e80001803000018004000a000400090004000b000800020001000000050006001a000000080002000f000000050006001000000018000180040008000500070006000000050005000f00000030000180050006000800000005000300020000000500050006000000050007000800000004000b00050005000b00000020000180080002000400000004000a000500030002000000050005000f000000140001800800020000000000050005000c0000001c00018004000a00040001000400080004000a0004000c0004000900100001800400090006000400038100000c00018004000a0004000a00e00001802400018006000400080000000500050007000000050007000b00000004000800040008003000018005000700400000000800020002000000040009000400080008000200000000000500060012000000040001001c00018004000800080002000400000004000c000400080004000a00340001800500060005000000060004000e000000050003000b00000004000b00060004000700000004000c0004000b0004000b0008000180040001000c00018005000300030000002400018004000100050005000500000004000a00050006000000000004000a000400010030020080b00003800400020004000200140001801000018004000c00050005000e000000040002002400018020000180050006001a0000000500060000000000080002000100000004000900680001803000018004000c00050005000100000004000c0006000400e0020000050003000f00000004000a0004000c0004000c0034000180060004000300000004000a00050005000a00000004000100080002000000000004000800050005000200000004000b004c010380440001800800018004000c000c0001800400010004000c0010000180040008000500030001000000100001800400080004000c0004000a000c0001800600040001010000b00001802000018004000c0004000800050007008a000000060004000700000004000b001400018004000b0004000b00050006000b0000001000018004000b0004000c0004000800240001800800020002000000050005000b00000004000800050007001f00000004000c0034000180040009000400010004000100050005000400000004000b000500060014000000050006000f0000000400010004000b0010000180050006000e00000004000c00040002000400020004000200480001801000018004000a00050006000300000034000180050005000e00000004000a00040008000800020001000000050005000f000000050007004000000005000600190000000a00010008021100000000000a00010008021100000000000a00010008021100000100000a000100ffffffffffff0000f80100800a000100ffffffffffff00000a00010008021100000100000a000100ffffffffffff00003400028008002600a415000008009f00060000000800220143030000080022012c0100000800a100010800000800a100000400006c0003800400020004000200600001802400018004000a00080002000300000004000a00040009000800020000000000040001001000018004000b00050006001b00000020000180050006001f00000008000200040000000400080006000400010000000800018004000900bc000380b800018028000180080002000300000004000c0004000800050007007600000004000b00050003000200000048000180060004000200000005000700090000000500070003000000080002000400000008000200040000000500030009000000040001000800020007000000050003000a0000002400018008000200010000000400090004000c000400090006000400099d00000400090020000180050007004000000004000800040001000400010004000b00040008000a00010008021100000100006800038004000200040002005c00018038000180080002000400000004000a00050006000300000004000b00080002000400000004000a00080002000400000004000100040008002000018004000a0008000200020000000500060009000000050005000a00000008001001090000004c05118048050580200200800a00010008021100000100002c0002800500190105000000080027000200000008002201f2020000080027008cbc3b7205001801390000000a000100ffffffffffff0000b4000380b00001801800018004000a0004000a0004000800050006000a00000028000180050003000f000000050006001e000000050005000000000004000800040008000400090014000180050007000b0000000400010004000c0018000180050003000600000004000c00050003000b000000280001800400080004000c0005000500050000000400090004000c00040001000400010004000c001800018004000b0004000b00050006001800000004000100d8000380d400018038000180080002000200000004000100050003000a00000004000b00050003000500000004000100050005000e000000050003000d0000000c00018005000700c80000004000018004000c0006000400b405000004000a0004000a000400080008000200fdfe1878080002000100000004000900060004000900000006000400b408000020000180050006000a0000000400080004000c000400090005000300080000002c00018004000c00050003000900000004000c0004000c000500050005000000050003000500000004000a002c0002800800a100ff7f000008002201da010000080022018e02000008009f000200000008002700000000000a000100ffffffffffff0000140002800800a000060000000500180105000000ec020080540002800800a000f8ffffff050019010e000000080027000100000008002700020000000800270001000000050018011300000008009f000600000008002600b80700000800a1000b0000000800a1000900000060020380380001802c0001800500050003000000080002000200000004000c0006000400020000000400090005000300050000000800018004000c00180101800c000180050005000e0000001800018006000400060000000400080006000400fcff00001c0001800500070002000000050003000e000000060004000d0000001400018004000900050003000c0000000400010008000180040008000c0001800400010004000900240001800600040009000000050006001e000000050007000200000008000200040000003c00018004000900080002000200000004000100050007000500000005000700080000000600040009000000050005000b00000008000200000000003c00018004000a00050007000600000004000b00050005000a0000000500050005000000050006000100000005000700070000000400010004000c0010000180050007000500000004000b00800001800c000180050003000e000000280001800400010004000b00050006000a0000000400010008000200010000000500070040000000380001800400090008000200000000000800020001000000060004000800000004000100040001000500060018000000050006000200000010000180080002000400000004000800040001800400020080000180340001800600040006000000080002000200000005000700070000000400010004000a0005000500010000000500070003000000080001800400010018000180060004000600000008000200000000000400010028000180050006000000000008000200060000000500070009000000050003000b00000004000800040002000c00028008009f00020000000a000100ffffffffffff0000040003800c0002800800a000000100000c00028008002201d3000000200000801c0002800800a000020000000800a00008000000050019010d0000001800008008000380040002000a0001000802110000000000"], 0x1900}, 0x1, 0x0, 0x0, 0x4008045}, 0x80) r5 = socket(0x400000000010, 0x3, 0x0) accept4(r5, &(0x7f0000000480)=@ethernet, &(0x7f0000000380)=0x80, 0x800) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$netlink(0x10, 0x3, 0x15) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0202ff000040010000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000100ffffffff", 0x58}], 0x1) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r9 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r9, &(0x7f0000000240)={&(0x7f0000000780), 0x6, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {}, {0xfff3, 0xfff3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x101, 0x0, 0x5}, "0fdf77"}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) accept4(r5, &(0x7f00000002c0)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f0000000340)=0x80, 0x80800) 60.992618ms ago: executing program 1 (id=290): getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000080)=0x68) r0 = socket(0x22, 0x4, 0x1) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x4, 0x4f, 0x7, 0x7f}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'batadv_slave_0\x00', 0x400}) getsockopt$MRT(r0, 0x0, 0xce, &(0x7f0000000140), &(0x7f0000000180)=0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x218, r2, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf8, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1e4fb0d}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x13}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xae}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7818665a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x236857f2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b938d4f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4605be29}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x494f48b7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3affdb34}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b9dedf0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8d4fac1}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x467532d1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59d46054}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xba}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65d672f0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x53569e52}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x115203f6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x54}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x43}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xeb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x89}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4aa56c05}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x68, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xef}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57a8d3c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x97}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ab21e1e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x89}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x62}]}]}]}, 0x218}, 0x1, 0x0, 0x0, 0xc800}, 0x4000800) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000500)={0x2, 'macvtap0\x00'}, 0x18) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000540)={r0}) setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000580)=0x1, 0x4) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000600), r1) sendmsg$NFC_CMD_LLC_SDREQ(r1, &(0x7f0000000940)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000900)={&(0x7f0000000640)={0x2ac, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_LLC_SDP={0x194, 0x13, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [{0xd, 0x1, 'macvtap0\x00'}, {0x6, 0x1, '/y'}, {0x13, 0x1, 'batadv_slave_0\x00'}, {0x7, 0x1, '-\'-'}, {0x5, 0x1, '$'}, {0xa, 0x1, '{[\xc2\\\\['}, {0x6, 0x1, '^{'}]}, {0x54, 0x0, 0x0, 0x1, [{0x13, 0x1, 'batadv_slave_0\x00'}, {0x7, 0x1, '}{\''}, {0x4}, {0x4}, {0xd, 0x1, 'macvtap0\x00'}, {0x7, 0x1, '+)\''}, {0x11, 0x1, 'NLBL_CIPSOv4\x00'}]}, {0x34, 0x0, 0x0, 0x1, [{0x11, 0x1, 'NLBL_CIPSOv4\x00'}, {0x6, 0x1, '#%'}, {0x11, 0x1, 'NLBL_CIPSOv4\x00'}]}, {0x10, 0x0, 0x0, 0x1, [{0x6, 0x1, '#\x00'}, {0x4}]}, {0x28, 0x0, 0x0, 0x1, [{0x11, 0x1, 'NLBL_CIPSOv4\x00'}, {0xd, 0x1, 'macvtap0\x00'}]}, {0x7c, 0x0, 0x0, 0x1, [{0x4}, {0xd, 0x1, '$%@#!\xd9}*\xc2'}, {0xd, 0x1, 'macvtap0\x00'}, {0xa, 0x1, '/-+-,^'}, {0x13, 0x1, 'batadv_slave_0\x00'}, {0x11, 0x1, 'NLBL_CIPSOv4\x00'}, {0xd, 0x1, 'macvtap0\x00'}, {0xd, 0x1, 'macvtap0\x00'}]}]}, @NFC_ATTR_LLC_SDP={0xfc, 0x13, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [{0x9, 0x1, '({.]@'}]}, {0x50, 0x0, 0x0, 0x1, [{0x13, 0x1, 'batadv_slave_0\x00'}, {0x7, 0x1, ')#)'}, {0x13, 0x1, 'batadv_slave_0\x00'}, {0x9, 0x1, '#^\'#-'}, {0x7, 0x1, ')-\x00'}, {0x8, 0x1, '&\xb6#\x00'}]}, {0x98, 0x0, 0x0, 0x1, [{0x11, 0x1, 'NLBL_CIPSOv4\x00'}, {0xd, 0x1, 'macvtap0\x00'}, {0x4}, {0x11, 0x1, 'NLBL_CIPSOv4\x00'}, {0xd, 0x1, 'macvtap0\x00'}, {0x8, 0x1, '.\\\'&'}, {0x5, 0x1, '\\'}, {0xd, 0x1, 'macvtap0\x00'}, {0x11, 0x1, 'NLBL_CIPSOv4\x00'}, {0x13, 0x1, 'batadv_slave_0\x00'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x4000080}, 0x1) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp=r0}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x4081) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_SOCK_GET(r5, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0xc0, 0x0, 0x103, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000c00), &(0x7f0000000c40)=0x8) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000cc0), r1) sendmsg$NL802154_CMD_GET_INTERFACE(r1, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x1c, r6, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000010) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000e00)=@generic={&(0x7f0000000dc0)='./file0\x00', 0x0, 0x8}, 0x18) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001000)={0x6, 0x8, &(0x7f0000000e80)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @map_fd={0x18, 0x9}, @map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6e65}], &(0x7f0000000ec0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000f00)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000f40)={0x4, 0xc, 0x8000000, 0x1}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000f80)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000fc0)=[{0x2, 0x1, 0x8, 0x7}, {0x4, 0x2, 0x5, 0x4}, {0x3, 0x1, 0xd, 0xc}], 0x10, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001100)={{r7}, &(0x7f0000000e40), &(0x7f00000010c0)=r8}, 0x20) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001180)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000011c0)=0x0) sendmsg$NFC_CMD_DEP_LINK_UP(r1, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x2c, r4, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_COMM_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x2048095) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), r0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f0000001440)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x50, r11, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IE={0x34, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x3}, @mesh_chsw={0x76, 0x6, {0xff, 0x5, 0x3c, 0x9}}, @rann={0x7e, 0x15, {{0x0, 0x7}, 0xff, 0x5, @device_a, 0xfffffff3, 0x800, 0x1ff}}, @random_vendor={0xdd, 0x7, "828c22b57d05ff"}, @channel_switch={0x25, 0x3, {0x1, 0xb2}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000005}, 0x40012) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f00000014c0), r3) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x80, r13, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x79}]}]}, 0x80}}, 0x1) 35.103562ms ago: executing program 2 (id=291): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)={0x250, 0x0, 0x0, 0x70bd2d, 0x25dfdbff, {}, [{{0x8}, {0xa8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x2, 0x6, 0xe, 0x1}, {0x100, 0xfd, 0x17}, {0x0, 0xfc, 0x4, 0x4}, {0x4, 0x1, 0xbc, 0x4}, {0x81, 0x6, 0x9}, {0x101, 0x0, 0xe8, 0x3}]}}}]}}, {{0x8, 0x1, r1}, {0x184, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x212b, 0x9, 0x4, 0x9}, {0x11, 0x80, 0x80, 0x6c5}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r2}}}]}}]}, 0x250}, 0x1, 0x0, 0x0, 0x1}, 0x20004800) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc) poll(&(0x7f0000000480)=[{r0, 0x80}], 0x1, 0x5) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000980)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000940)={&(0x7f0000000540)=@newtfilter={0x3f0, 0x2c, 0x300, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xa, 0xe}, {0xffff, 0x9}}, [@TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x3, 0x1b}}]}}, @filter_kind_options=@f_u32={{0x8}, {0x398, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x6}, @TCA_U32_LINK={0x8, 0x3, 0x1}, @TCA_U32_FLAGS={0x8, 0xb, 0x4}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_SEL={0x364, 0x5, {0x7, 0x5, 0xb, 0x9, 0x40, 0x1, 0x5, 0x9, [{0x174, 0x81, 0x9, 0x586}, {0x9, 0x499b, 0x7, 0x7}, {0x2, 0x9, 0x7a, 0x10001}, {0x1, 0x0, 0x53, 0x2}, {0x0, 0x8, 0x800, 0x3}, {0x0, 0x3, 0x2, 0x3}, {0xffffffff, 0x3, 0x0, 0x8001}, {0x8, 0x6, 0x1, 0x1ff}, {0x1, 0x5, 0x2, 0xfffffff7}, {0x80000000, 0x0, 0x3, 0x1}, {0x0, 0x6, 0x2, 0x5}, {0x9, 0x7, 0x7, 0x5}, {0x17, 0x3, 0x6, 0x180000}, {0x7fff, 0x1, 0x1, 0x931}, {0x9f, 0xd69, 0x0, 0x5}, {0x7fffffff, 0x0, 0x6, 0xbc}, {0x4, 0x2, 0x8, 0x9}, {0x6, 0x192, 0x5, 0xa}, {0x80, 0xa, 0xa0b, 0x7}, {0x9, 0x7fa05058, 0x1, 0x9}, {0xffffff1f, 0x6, 0xa988, 0x6}, {0x0, 0x1, 0x0, 0x7}, {0x3, 0x2, 0x1, 0x8e}, {0x3cb9, 0x18fa7e1a, 0x4, 0x1a}, {0xe, 0x5, 0xfffffffa, 0x1}, {0x8, 0x3, 0x7, 0x4}, {0x80000000, 0x101, 0x3, 0x8}, {0x6, 0x80000000, 0x9, 0x8}, {0xd18b, 0xf, 0x8}, {0xc, 0x13d, 0x10001, 0x3}, {0xaa, 0x4, 0x6}, {0x3f, 0x4, 0x0, 0xfd90}, {0x5, 0x400, 0x4, 0x3}, {0xe, 0x5f8, 0x3, 0x9}, {0x1000, 0x3ff, 0x9, 0x8}, {0x10001, 0x5, 0x6, 0x5}, {0x9, 0x6, 0xa, 0xd1}, {0x4, 0x9, 0x3, 0x6}, {0xb, 0xf2, 0x3, 0x1}, {0xffffffff, 0x7, 0x3}, {0x1, 0x7fff, 0x0, 0xa}, {0x0, 0x7, 0x8, 0x2}, {0xfffffff6, 0x7ff, 0x800, 0x9e}, {0xc00, 0x1000, 0x3, 0x9}, {0x3, 0x7, 0x10000, 0xc0}, {0x1, 0x6, 0x3ff, 0x8}, {0x3, 0x8, 0x2, 0x19c3}, {0x7ee329a8, 0x2, 0xffff, 0x8}, {0x5, 0x806f, 0x65c, 0x9}, {0x6, 0xfff, 0x400, 0x8}, {0x9, 0x9f9, 0xc, 0x9}, {0xb79, 0x2, 0x8, 0x1ff}, {0x4, 0x7, 0xea, 0x7ff}]}}, @TCA_U32_HASH={0x8, 0x2, 0xcac}, @TCA_U32_FLAGS={0x8, 0xb, 0x7}]}}]}, 0x3f0}}, 0x300040c0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r4) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x58, r6, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xc, 0xcd, [0xffff, 0xfff9, 0x0, 0xfff7]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x630}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x364}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1449}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c845}, 0x4000800) r7 = accept4$bt_l2cap(r4, &(0x7f0000000b40), &(0x7f0000000b80)=0xe, 0x80000) setsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, &(0x7f0000000bc0)={0x5, 0xfc}, 0x2) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), r0) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x54, r8, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x40b7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040000}, 0x800) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x487, &(0x7f0000000d80), &(0x7f0000000dc0)=0x30) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000f80)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x1000008}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e40)={0xc4, r6, 0x30295c9a1cd6b6a5, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="5754a8762ead13f50379baa3dbffa671"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="311850638c19caf7dd9b973f0a355450"}]}, @NL80211_ATTR_REKEY_DATA={0x4}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9f466f1ca0e6dc2c"}]}, @NL80211_ATTR_REKEY_DATA={0x68, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="a55861f5383d8aea7bf882c13fe8ff9355ca3b7e43a5022906ee09750ab19de1"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x757}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "39ce3202952c096d"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="93678be4b52f75bbc4ec375ca89fe829"}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4800}, 0x14) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r9, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x30, r10, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000080}, 0x410) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r11, &(0x7f0000001300)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000012c0)={&(0x7f0000001140)={0x144, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x10c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x15dd5e0a}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5527016}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x190e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb2ba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb3e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x193d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x34d11afd}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x67eefa38}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6babbcdc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x276a439b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1a78}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3186cece}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x318bec9f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc876}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56a3a246}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b6c34ff}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x23caa82e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a13c897}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1280dfb3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x150e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x19774f63}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf09c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe33c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x70f1}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa979}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd8cd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xecf0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5b4c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x417d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66fde455}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}]}]}, 0x144}}, 0x4004044) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000001380), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x3c, r12, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x40) r13 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000015c0), r11) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r11, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x28, r13, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001700), r11) sendmsg$IEEE802154_ADD_IFACE(r11, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x14, r14, 0x200, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) 0s ago: executing program 1 (id=292): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000200), &(0x7f0000000140)=0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 64) socket$inet6(0xa, 0x1, 0x100) (async, rerun: 64) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000004000000040000120a0000ba5ff264000da7f1ba7c842f34ae62815ff6e09a918086b99a6aac1244f8303384137ab288c9ca2b15c5bc4a4ed58d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.164' (ED25519) to the list of known hosts. [ 65.955386][ T5817] cgroup: Unknown subsys name 'net' [ 66.130576][ T5817] cgroup: Unknown subsys name 'cpuset' [ 66.139024][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.517652][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.918905][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.939839][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.950797][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.958653][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.967747][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.975894][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.983485][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.991403][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.999959][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.000732][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.007354][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.016880][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.022191][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.036938][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.044919][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.045772][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.053181][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.070742][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.078038][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.078192][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.088012][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.099710][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.103330][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.109788][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.116798][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.709022][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 70.827253][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 70.840362][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 71.082947][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.092497][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.100439][ T5838] bridge_slave_0: entered allmulticast mode [ 71.108557][ T5838] bridge_slave_0: entered promiscuous mode [ 71.124819][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 71.146839][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.154063][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.161347][ T5830] bridge_slave_0: entered allmulticast mode [ 71.168433][ T5830] bridge_slave_0: entered promiscuous mode [ 71.179881][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.187007][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.194468][ T5838] bridge_slave_1: entered allmulticast mode [ 71.201764][ T5838] bridge_slave_1: entered promiscuous mode [ 71.221825][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.229065][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.236180][ T5830] bridge_slave_1: entered allmulticast mode [ 71.243344][ T5830] bridge_slave_1: entered promiscuous mode [ 71.250444][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 71.368688][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.381295][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.391242][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.398554][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.405719][ T5832] bridge_slave_0: entered allmulticast mode [ 71.412812][ T5832] bridge_slave_0: entered promiscuous mode [ 71.433647][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.440133][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.454509][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.466804][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.476313][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.483573][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.490948][ T5832] bridge_slave_1: entered allmulticast mode [ 71.498043][ T5832] bridge_slave_1: entered promiscuous mode [ 71.617001][ T5830] team0: Port device team_slave_0 added [ 71.624734][ T5838] team0: Port device team_slave_0 added [ 71.637983][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.647741][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.654868][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.662528][ T5827] bridge_slave_0: entered allmulticast mode [ 71.669851][ T5827] bridge_slave_0: entered promiscuous mode [ 71.692269][ T5830] team0: Port device team_slave_1 added [ 71.699431][ T5838] team0: Port device team_slave_1 added [ 71.707851][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.717507][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.724650][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.731918][ T5827] bridge_slave_1: entered allmulticast mode [ 71.738925][ T5827] bridge_slave_1: entered promiscuous mode [ 71.745402][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.752774][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.760151][ T5840] bridge_slave_0: entered allmulticast mode [ 71.767547][ T5840] bridge_slave_0: entered promiscuous mode [ 71.823320][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.834685][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.842199][ T5840] bridge_slave_1: entered allmulticast mode [ 71.849213][ T5840] bridge_slave_1: entered promiscuous mode [ 71.866642][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.873713][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.899874][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.962327][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.969674][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.995900][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.007674][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.014624][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.040674][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.053516][ T5832] team0: Port device team_slave_0 added [ 72.062065][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.091840][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.099071][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.125831][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.139268][ T5832] team0: Port device team_slave_1 added [ 72.147998][ T5152] Bluetooth: hci1: command tx timeout [ 72.148003][ T5843] Bluetooth: hci4: command tx timeout [ 72.148218][ T5152] Bluetooth: hci2: command tx timeout [ 72.153655][ T5843] Bluetooth: hci3: command tx timeout [ 72.160963][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.182489][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.195683][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.237280][ T5843] Bluetooth: hci0: command tx timeout [ 72.311827][ T5830] hsr_slave_0: entered promiscuous mode [ 72.318336][ T5830] hsr_slave_1: entered promiscuous mode [ 72.326445][ T5840] team0: Port device team_slave_0 added [ 72.333022][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.340652][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.366766][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.379981][ T5827] team0: Port device team_slave_0 added [ 72.411054][ T5840] team0: Port device team_slave_1 added [ 72.423171][ T5838] hsr_slave_0: entered promiscuous mode [ 72.429737][ T5838] hsr_slave_1: entered promiscuous mode [ 72.435776][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 72.441757][ T5838] Cannot create hsr debugfs directory [ 72.448019][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.454964][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.481122][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.493393][ T5827] team0: Port device team_slave_1 added [ 72.570674][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.578575][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.604946][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.617894][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.624845][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.650817][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.669331][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.676293][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.702605][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.750312][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.757381][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.783736][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.860642][ T5832] hsr_slave_0: entered promiscuous mode [ 72.867934][ T5832] hsr_slave_1: entered promiscuous mode [ 72.874009][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 72.879881][ T5832] Cannot create hsr debugfs directory [ 72.937797][ T5840] hsr_slave_0: entered promiscuous mode [ 72.944068][ T5840] hsr_slave_1: entered promiscuous mode [ 72.950601][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 72.956349][ T5840] Cannot create hsr debugfs directory [ 73.038258][ T5827] hsr_slave_0: entered promiscuous mode [ 73.044485][ T5827] hsr_slave_1: entered promiscuous mode [ 73.050915][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 73.056643][ T5827] Cannot create hsr debugfs directory [ 73.463949][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.476476][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.498045][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.521930][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.561388][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.580691][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.593263][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.604310][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.674939][ T5832] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.699990][ T5832] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.724166][ T5832] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.751375][ T5832] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.815600][ T5840] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.859064][ T5840] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.869293][ T5840] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.880825][ T5840] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.969913][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.996308][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.019888][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.028545][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.041557][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.069459][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.091075][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.106517][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.142312][ T3005] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.149750][ T3005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.160322][ T3005] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.167514][ T3005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.193621][ T3005] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.200752][ T3005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.210865][ T3005] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.218004][ T3005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.227319][ T5843] Bluetooth: hci3: command tx timeout [ 74.232754][ T5843] Bluetooth: hci2: command tx timeout [ 74.238508][ T5845] Bluetooth: hci4: command tx timeout [ 74.239571][ T5152] Bluetooth: hci1: command tx timeout [ 74.307717][ T5152] Bluetooth: hci0: command tx timeout [ 74.325375][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.414670][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.425499][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.483033][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.490250][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.532667][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.539915][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.601776][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.649645][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.679710][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.686882][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.749436][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.756599][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.773845][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.788480][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.810442][ T3015] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.817619][ T3015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.842816][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.849938][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.900876][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.970652][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.144386][ T5830] veth0_vlan: entered promiscuous mode [ 75.189787][ T5830] veth1_vlan: entered promiscuous mode [ 75.210487][ T5838] veth0_vlan: entered promiscuous mode [ 75.262360][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.290862][ T5838] veth1_vlan: entered promiscuous mode [ 75.349471][ T5830] veth0_macvtap: entered promiscuous mode [ 75.390559][ T5830] veth1_macvtap: entered promiscuous mode [ 75.453382][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.465771][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.492948][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.504036][ T5838] veth0_macvtap: entered promiscuous mode [ 75.542207][ T3005] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.562898][ T5838] veth1_macvtap: entered promiscuous mode [ 75.580532][ T3005] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.592537][ T3005] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.613906][ T3005] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.664278][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.689470][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.720792][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.764771][ T5840] veth0_vlan: entered promiscuous mode [ 75.771424][ T44] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.781133][ T44] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.820918][ T44] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.850183][ T44] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.872165][ T5840] veth1_vlan: entered promiscuous mode [ 75.895302][ T3033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.905443][ T3033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.923693][ T5827] veth0_vlan: entered promiscuous mode [ 75.975560][ T5827] veth1_vlan: entered promiscuous mode [ 75.994172][ T3005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.008567][ T3005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.065802][ T5832] veth0_vlan: entered promiscuous mode [ 76.075627][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.084818][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.103398][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.105921][ T5832] veth1_vlan: entered promiscuous mode [ 76.198172][ T5840] veth0_macvtap: entered promiscuous mode [ 76.226981][ T5827] veth0_macvtap: entered promiscuous mode [ 76.242750][ T3033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.245184][ T5840] veth1_macvtap: entered promiscuous mode [ 76.256840][ T3033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.276193][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.298987][ T5827] veth1_macvtap: entered promiscuous mode [ 76.307648][ T5152] Bluetooth: hci3: command tx timeout [ 76.309361][ T5843] Bluetooth: hci1: command tx timeout [ 76.313064][ T5152] Bluetooth: hci2: command tx timeout [ 76.319197][ T5845] Bluetooth: hci4: command tx timeout [ 76.339500][ T5832] veth0_macvtap: entered promiscuous mode [ 76.356971][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.382731][ T5945] Zero length message leads to an empty skb [ 76.397952][ T5845] Bluetooth: hci0: command tx timeout [ 76.418972][ T5832] veth1_macvtap: entered promiscuous mode [ 76.430770][ T3033] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.476107][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.505334][ T3033] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.535155][ T3033] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.554538][ T5950] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 76.584526][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.605833][ T3033] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.624439][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.633701][ T5950] syzkaller1: entered promiscuous mode [ 76.640777][ T5950] syzkaller1: entered allmulticast mode [ 76.673853][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.684662][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.714272][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.724289][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.763167][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.805502][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.848447][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.889546][ T5955] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9'. [ 76.905252][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.907659][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.915070][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.924270][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.991202][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.017312][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.052024][ T5957] netlink: 'syz.2.9': attribute type 2 has an invalid length. [ 77.065872][ T5957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9'. [ 77.099254][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.120975][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.145000][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.159196][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.266292][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.283418][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.326240][ T3005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.342135][ T3005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.542669][ T5973] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5'. [ 77.783728][ T5981] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16'. [ 77.795072][ T5977] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.890951][ T5984] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16'. [ 77.910310][ T5980] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 78.037228][ T5980] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4'. [ 78.117027][ T6002] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20'. [ 78.388509][ T5845] Bluetooth: hci4: command tx timeout [ 78.393998][ T5843] Bluetooth: hci1: command tx timeout [ 78.394028][ T5834] Bluetooth: hci3: command tx timeout [ 78.413237][ T5152] Bluetooth: hci2: command tx timeout [ 78.505580][ T6020] xt_CT: You must specify a L4 protocol and not use inversions on it [ 78.635946][ T6023] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.751696][ T6023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23'. [ 78.776599][ T6023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23'. [ 78.799446][ T6030] IPVS: length: 253 != 24 [ 78.840216][ T6023] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 79.205545][ T6057] Bluetooth: MGMT ver 1.23 [ 79.264388][ T6057] Bluetooth: hci0: unsupported parameter 512 [ 79.307014][ T6064] netlink: 'syz.4.33': attribute type 21 has an invalid length. [ 79.314497][ T6057] Bluetooth: hci0: invalid length 0, exp 2 for type 5 [ 79.367511][ T6067] netlink: 'syz.2.34': attribute type 11 has an invalid length. [ 79.577272][ T6075] netem: change failed [ 79.932729][ T6097] bond1: Removing last arp target with arp_interval on [ 80.244111][ T6116] IPv6: Can't replace route, no match found [ 80.366707][ T6089] infiniband syz0: set down [ 80.371813][ T6089] infiniband syz0: added ipvlan1 [ 80.433964][ T6089] RDS/IB: syz0: added [ 80.438994][ T6089] smc: adding ib device syz0 with port count 1 [ 80.445477][ T6089] smc: ib device syz0 port 1 has no pnetid [ 80.483025][ T6123] syzkaller1: entered promiscuous mode [ 80.509904][ T6123] syzkaller1: entered allmulticast mode [ 80.669362][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 80.676115][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.684081][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.691939][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.699903][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.707748][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.715657][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.723532][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.731539][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.739389][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.747463][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.755307][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.763284][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.771138][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.779104][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.786928][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.794888][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.802742][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.810709][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.818560][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.826481][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.834351][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.842303][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.850171][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.858107][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.865934][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.873897][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.881751][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.889701][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.897550][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.905472][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.913365][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.921319][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.929188][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.937151][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.944980][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.952950][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.960809][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.968779][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.976596][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.984553][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 80.992391][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 81.000331][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 81.008165][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 81.019274][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 81.027154][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 81.035077][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 81.042973][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 81.050947][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 81.058813][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 81.066718][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 81.074593][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 81.082539][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 81.090389][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 81.098322][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 81.106136][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 81.114083][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 81.121926][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 81.129849][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 81.137691][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 81.145569][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 81.153421][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 81.161318][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 81.169152][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 81.177080][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 81.184901][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 81.192834][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 81.200697][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 81.208641][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 81.216457][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 81.224380][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 81.232211][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 81.240144][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 81.247980][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 81.255846][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 81.263688][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 81.271627][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 81.279560][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 81.287508][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 81.295328][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 81.303260][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 81.311095][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 81.319054][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 81.326886][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 81.334876][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 81.342717][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 81.350638][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 81.358483][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 81.500325][ T6143] xt_TPROXY: Can be used only with -p tcp or -p udp [ 81.528351][ T6143] netlink: 'syz.4.52': attribute type 3 has an invalid length. [ 81.558336][ T6141] tipc: Started in network mode [ 81.563284][ T6141] tipc: Node identity eedf012b6a45, cluster identity 4711 [ 81.605803][ T6141] tipc: Enabled bearer , priority 0 [ 81.628792][ T6148] netlink: 'syz.0.53': attribute type 11 has an invalid length. [ 81.630322][ T6141] syzkaller0: entered promiscuous mode [ 81.655875][ T6141] syzkaller0: entered allmulticast mode [ 81.713926][ T6152] net veth1_virt_wifi .: renamed from virt_wifi0 [ 81.809865][ T6141] tipc: Resetting bearer [ 81.849852][ T6140] tipc: Resetting bearer [ 81.932606][ T6140] tipc: Disabling bearer [ 82.185305][ T6167] Bluetooth: hci0: invalid length 39, exp 2 for type 16 [ 82.460536][ T6174] ipt_REJECT: TCP_RESET invalid for non-tcp [ 83.094465][ T6197] __nla_validate_parse: 7 callbacks suppressed [ 83.094485][ T6197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.70'. [ 83.115185][ T6197] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 83.128919][ T6197] netlink: 148 bytes leftover after parsing attributes in process `syz.3.70'. [ 83.142007][ T6197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.70'. [ 83.155276][ T6155] lo speed is unknown, defaulting to 1000 [ 83.162970][ T6155] lo speed is unknown, defaulting to 1000 [ 83.169533][ T6197] netlink: 148 bytes leftover after parsing attributes in process `syz.3.70'. [ 83.180265][ T6155] lo speed is unknown, defaulting to 1000 [ 83.192532][ T6155] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 83.252593][ T6155] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 83.322483][ T6155] lo speed is unknown, defaulting to 1000 [ 83.334153][ T6155] lo speed is unknown, defaulting to 1000 [ 83.349451][ T6155] lo speed is unknown, defaulting to 1000 [ 83.358316][ T6155] lo speed is unknown, defaulting to 1000 [ 83.366159][ T6155] lo speed is unknown, defaulting to 1000 [ 83.494641][ T6210] netlink: 'syz.3.74': attribute type 1 has an invalid length. [ 83.537617][ T6211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.75'. [ 83.549550][ T6210] netlink: 224 bytes leftover after parsing attributes in process `syz.3.74'. [ 83.748752][ T6224] openvswitch: netlink: IP tunnel dst address not specified [ 83.766402][ T6228] netlink: 'syz.2.79': attribute type 6 has an invalid length. [ 83.794037][ T6228] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.79'. [ 84.364486][ T6256] warning: `syz.4.90' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 84.427195][ T6261] netlink: 16 bytes leftover after parsing attributes in process `syz.2.92'. [ 84.758829][ T6275] tipc: Enabled bearer , priority 0 [ 84.768078][ T6237] syz.1.84: vmalloc error: size 4198400, failed to allocated page array size 8200, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 84.797718][ T6275] syzkaller0: entered promiscuous mode [ 84.803232][ T6275] syzkaller0: entered allmulticast mode [ 84.814721][ T6237] CPU: 0 UID: 0 PID: 6237 Comm: syz.1.84 Not tainted syzkaller #0 PREEMPT(full) [ 84.814747][ T6237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 84.814763][ T6237] Call Trace: [ 84.814770][ T6237] [ 84.814778][ T6237] dump_stack_lvl+0x189/0x250 [ 84.814811][ T6237] ? __pfx_dump_stack_lvl+0x10/0x10 [ 84.814830][ T6237] ? __pfx__printk+0x10/0x10 [ 84.814847][ T6237] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 84.814866][ T6237] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 84.814887][ T6237] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 84.814908][ T6237] warn_alloc+0x214/0x310 [ 84.814933][ T6237] ? __pfx_warn_alloc+0x10/0x10 [ 84.814961][ T6237] ? __get_vm_area_node+0x28f/0x300 [ 84.814979][ T6237] ? hash_ipportnet_create+0x358/0xfe0 [ 84.815003][ T6237] __vmalloc_node_range_noprof+0x690/0x12d0 [ 84.815045][ T6237] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 84.815062][ T6237] ? hash_ipportnet_create+0x358/0xfe0 [ 84.815091][ T6237] ? rcu_is_watching+0x15/0xb0 [ 84.815113][ T6237] ? hash_ipportnet_create+0x358/0xfe0 [ 84.815133][ T6237] __kvmalloc_node_noprof+0x674/0x910 [ 84.815154][ T6237] ? hash_ipportnet_create+0x358/0xfe0 [ 84.815174][ T6237] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 84.815193][ T6237] ? hash_ipportnet_create+0x2fe/0xfe0 [ 84.815220][ T6237] hash_ipportnet_create+0x358/0xfe0 [ 84.815248][ T6237] ? __nla_parse+0x40/0x60 [ 84.815266][ T6237] ? __pfx_hash_ipportnet_create+0x10/0x10 [ 84.815284][ T6237] ip_set_create+0xa97/0x1940 [ 84.815304][ T6237] ? ip_set_create+0x4a2/0x1940 [ 84.815331][ T6237] ? __pfx_ip_set_create+0x10/0x10 [ 84.815384][ T6237] nfnetlink_rcv_msg+0xb4d/0x1130 [ 84.815408][ T6237] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 84.815447][ T6237] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 84.815466][ T6237] ? kasan_save_track+0x4f/0x80 [ 84.815532][ T6237] netlink_rcv_skb+0x208/0x470 [ 84.815554][ T6237] ? lockdep_hardirqs_on+0x9c/0x150 [ 84.815572][ T6237] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 84.815595][ T6237] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 84.815629][ T6237] ? bpf_lsm_capable+0x9/0x20 [ 84.815645][ T6237] ? security_capable+0x7e/0x2e0 [ 84.815669][ T6237] nfnetlink_rcv+0x282/0x2590 [ 84.815693][ T6237] ? __dev_queue_xmit+0x27b/0x3b50 [ 84.815713][ T6237] ? __dev_queue_xmit+0x1d79/0x3b50 [ 84.815728][ T6237] ? kasan_save_track+0x3e/0x80 [ 84.815743][ T6237] ? __kasan_slab_alloc+0x6c/0x80 [ 84.815768][ T6237] ? __dev_queue_xmit+0x27b/0x3b50 [ 84.815794][ T6237] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 84.815812][ T6237] ? __pfx___dev_queue_xmit+0x10/0x10 [ 84.815844][ T6237] ? ref_tracker_free+0x63a/0x7d0 [ 84.815863][ T6237] ? __asan_memcpy+0x40/0x70 [ 84.815879][ T6237] ? __pfx_ref_tracker_free+0x10/0x10 [ 84.815894][ T6237] ? __skb_clone+0x63/0x7a0 [ 84.815916][ T6237] ? __skb_clone+0x483/0x7a0 [ 84.815939][ T6237] ? skb_clone+0x246/0x3a0 [ 84.815959][ T6237] ? __netlink_deliver_tap+0x807/0x850 [ 84.815981][ T6237] ? netlink_deliver_tap+0x2e/0x1b0 [ 84.816010][ T6237] ? netlink_deliver_tap+0x2e/0x1b0 [ 84.816040][ T6237] netlink_unicast+0x82f/0x9e0 [ 84.816071][ T6237] ? __pfx_netlink_unicast+0x10/0x10 [ 84.816101][ T6237] ? netlink_sendmsg+0x642/0xb30 [ 84.816122][ T6237] ? skb_put+0x11b/0x210 [ 84.816148][ T6237] netlink_sendmsg+0x805/0xb30 [ 84.816181][ T6237] ? __pfx_netlink_sendmsg+0x10/0x10 [ 84.816207][ T6237] ? aa_sock_msg_perm+0xf1/0x1d0 [ 84.816229][ T6237] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 84.816249][ T6237] ? __pfx_netlink_sendmsg+0x10/0x10 [ 84.816272][ T6237] __sock_sendmsg+0x21c/0x270 [ 84.816296][ T6237] ____sys_sendmsg+0x505/0x830 [ 84.816327][ T6237] ? __pfx_____sys_sendmsg+0x10/0x10 [ 84.816362][ T6237] ? import_iovec+0x74/0xa0 [ 84.816389][ T6237] ___sys_sendmsg+0x21f/0x2a0 [ 84.816409][ T6237] ? __pfx____sys_sendmsg+0x10/0x10 [ 84.816462][ T6237] ? __fget_files+0x2a/0x420 [ 84.816481][ T6237] ? __fget_files+0x3a0/0x420 [ 84.816511][ T6237] __x64_sys_sendmsg+0x19b/0x260 [ 84.816527][ T6237] ? _raw_spin_unlock_irq+0x23/0x50 [ 84.816552][ T6237] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 84.816586][ T6237] ? do_syscall_64+0xbe/0xfa0 [ 84.816606][ T6237] do_syscall_64+0xfa/0xfa0 [ 84.816621][ T6237] ? lockdep_hardirqs_on+0x9c/0x150 [ 84.816638][ T6237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.816654][ T6237] ? clear_bhb_loop+0x60/0xb0 [ 84.816675][ T6237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.816691][ T6237] RIP: 0033:0x7f31c6b8efc9 [ 84.816714][ T6237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.816727][ T6237] RSP: 002b:00007f31c7a3d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 84.816746][ T6237] RAX: ffffffffffffffda RBX: 00007f31c6de6090 RCX: 00007f31c6b8efc9 [ 84.816758][ T6237] RDX: 0000000000004020 RSI: 0000200000000040 RDI: 0000000000000003 [ 84.816769][ T6237] RBP: 00007f31c6c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 84.816780][ T6237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.816790][ T6237] R13: 00007f31c6de6128 R14: 00007f31c6de6090 R15: 00007ffed6ca1cf8 [ 84.816820][ T6237] [ 84.816832][ T6237] Mem-Info: [ 84.974185][ T6275] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 85.297859][ T6237] active_anon:5921 inactive_anon:0 isolated_anon:0 [ 85.297859][ T6237] active_file:2576 inactive_file:39872 isolated_file:0 [ 85.297859][ T6237] unevictable:768 dirty:1522 writeback:0 [ 85.297859][ T6237] slab_reclaimable:10447 slab_unreclaimable:97619 [ 85.297859][ T6237] mapped:36310 shmem:1356 pagetables:1202 [ 85.297859][ T6237] sec_pagetables:0 bounce:0 [ 85.297859][ T6237] kernel_misc_reclaimable:0 [ 85.297859][ T6237] free:1320091 free_pcp:24920 free_cma:0 [ 85.411842][ T6237] Node 0 active_anon:23684kB inactive_anon:0kB active_file:10304kB inactive_file:159284kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:145240kB dirty:6076kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12572kB pagetables:4856kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 85.471925][ T6237] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 85.502473][ T6237] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 85.530093][ T6296] tipc: Resetting bearer [ 85.550472][ T6237] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 85.556359][ T6237] Node 0 DMA32 free:1366316kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23684kB inactive_anon:0kB active_file:10304kB inactive_file:159284kB unevictable:1536kB writepending:6076kB zspages:0kB present:3129332kB managed:2561620kB mlocked:0kB bounce:0kB free_pcp:83708kB local_pcp:38364kB free_cma:0kB [ 85.591771][ T6237] lowmem_reserve[]: 0 0 1 1 1 [ 85.596532][ T6237] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 85.648945][ T6237] lowmem_reserve[]: 0 0 0 0 0 [ 85.653908][ T6237] Node 1 Normal free:3898048kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:12kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16512kB local_pcp:7904kB free_cma:0kB [ 85.667340][ T6273] tipc: Resetting bearer [ 85.692879][ T6237] lowmem_reserve[]: 0 0 0 0 0 [ 85.699214][ T6237] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 85.717937][ T6237] Node 0 DMA32: 401*4kB (UM) 199*8kB (UME) 51*16kB (UME) 7*32kB (UME) 7*64kB (UM) 15*128kB (UME) 15*256kB (UME) 10*512kB (UM) 9*1024kB (UM) 7*2048kB (UME) 324*4096kB (M) = 1366220kB [ 85.745039][ T6237] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 85.758868][ T6273] tipc: Disabling bearer [ 85.759006][ T6237] Node 1 Normal: 192*4kB (UME) 54*8kB (UME) 37*16kB (UME) 66*32kB (UME) 24*64kB (UME) 9*128kB (UME) 3*256kB (ME) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (UE) 948*4096kB (M) = 3898048kB [ 85.784992][ T6237] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 85.796030][ T6237] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 85.805958][ T6237] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 85.822589][ T6237] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 85.832737][ T6237] 43800 total pagecache pages [ 85.837758][ T6237] 0 pages in swap cache [ 85.842227][ T6237] Free swap = 124996kB [ 85.846682][ T6237] Total swap = 124996kB [ 85.860536][ T6237] 2097051 pages RAM [ 85.864382][ T6237] 0 pages HighMem/MovableOnly [ 85.917764][ T6237] 424556 pages reserved [ 85.929076][ T6237] 0 pages cma reserved [ 86.110987][ T6326] netlink: 'syz.2.103': attribute type 12 has an invalid length. [ 86.130449][ T6326] netlink: 'syz.2.103': attribute type 29 has an invalid length. [ 86.172078][ T6326] netlink: 148 bytes leftover after parsing attributes in process `syz.2.103'. [ 86.193942][ T6332] netlink: 'syz.1.105': attribute type 1 has an invalid length. [ 86.216027][ T6326] netlink: 'syz.2.103': attribute type 2 has an invalid length. [ 86.262292][ T6326] netlink: 23 bytes leftover after parsing attributes in process `syz.2.103'. [ 86.499302][ T6345] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 86.512846][ T6349] netlink: 'syz.2.109': attribute type 11 has an invalid length. [ 86.682274][ T6356] : renamed from bridge_slave_0 (while UP) [ 86.850378][ T980] cfg80211: failed to load regulatory.db [ 87.602332][ T6394] gretap0: entered promiscuous mode [ 87.629950][ T6394] gretap0: left promiscuous mode [ 87.692374][ T6399] netlink: 'syz.0.120': attribute type 1 has an invalid length. [ 87.692750][ T6401] C: renamed from lo (while UP) [ 87.726497][ T6399] netlink: 'syz.0.120': attribute type 1 has an invalid length. [ 88.044264][ T6409] macvlan0: entered promiscuous mode [ 88.061428][ T6409] batadv0: entered promiscuous mode [ 88.102145][ T6409] hsr1: entered allmulticast mode [ 88.138648][ T6409] macvlan0: entered allmulticast mode [ 88.207668][ T6409] veth1_vlan: entered allmulticast mode [ 88.237396][ T6409] batadv0: entered allmulticast mode [ 88.300520][ T6409] macvlan0: left promiscuous mode [ 88.338851][ T6409] batadv0: left promiscuous mode [ 88.533359][ T6442] __nla_validate_parse: 11 callbacks suppressed [ 88.533377][ T6442] netlink: 16 bytes leftover after parsing attributes in process `syz.4.131'. [ 88.762915][ T6446] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1191 [ 88.975538][ T6456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.136'. [ 89.055775][ T6456] netlink: 'syz.1.136': attribute type 9 has an invalid length. [ 89.077464][ T6464] openvswitch: netlink: Duplicate or invalid key (type 0). [ 89.084829][ T6464] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 89.137256][ T6469] netlink: 'syz.0.140': attribute type 1 has an invalid length. [ 89.173422][ T6469] netlink: 'syz.0.140': attribute type 2 has an invalid length. [ 89.184214][ T6468] openvswitch: netlink: Duplicate or invalid key (type 0). [ 89.227173][ T6468] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 89.417029][ T6486] ipt_REJECT: ECHOREPLY no longer supported. [ 89.434342][ T6481] netlink: 16 bytes leftover after parsing attributes in process `syz.2.141'. [ 89.564415][ T6492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.144'. [ 89.622207][ T6488] netlink: 40 bytes leftover after parsing attributes in process `syz.1.142'. [ 89.754769][ T6492] hsr_slave_0 (unregistering): left promiscuous mode [ 90.209443][ T6526] tipc: Started in network mode [ 90.214355][ T6526] tipc: Node identity ba6003575a39, cluster identity 4711 [ 90.255249][ T6526] tipc: Enabled bearer , priority 0 [ 90.343859][ T6536] workqueue: name exceeds WQ_NAME_LEN. Truncating to: .寿$ULvjڇv[Dwz [ 90.390705][ T6526] tipc: Disabling bearer [ 90.756498][ T6550] syzkaller1: entered promiscuous mode [ 90.777111][ T6550] syzkaller1: entered allmulticast mode [ 90.902892][ T6554] Bluetooth: MGMT ver 1.23 [ 90.957700][ T6559] netlink: 12 bytes leftover after parsing attributes in process `syz.2.160'. [ 91.620642][ T6594] netlink: 12 bytes leftover after parsing attributes in process `syz.3.171'. [ 91.843110][ T6605] bond2: (slave bond_slave_1): Device is not our slave [ 91.860308][ T6605] bond2: option active_slave: invalid value (bond_slave_1) [ 91.877655][ T6611] netlink: 64 bytes leftover after parsing attributes in process `syz.0.173'. [ 91.932773][ T6609] netlink: 48 bytes leftover after parsing attributes in process `syz.2.172'. [ 91.996610][ T6605] bond2 (unregistering): Released all slaves [ 92.620958][ T6631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.783064][ T6659] netlink: 24 bytes leftover after parsing attributes in process `syz.3.184'. [ 93.341871][ T6692] trusted_key: syz.3.190 sent an empty control message without MSG_MORE. [ 93.548403][ T6703] __nla_validate_parse: 4 callbacks suppressed [ 93.548420][ T6703] netlink: 12 bytes leftover after parsing attributes in process `syz.2.194'. [ 93.733301][ T6715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.198'. [ 93.871907][ T6712] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 93.945802][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059827000: rx timeout, send abort [ 94.185493][ T6739] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 94.381819][ T6752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.207'. [ 94.445940][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059827400: rx timeout, send abort [ 94.455022][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059827000: abort rx timeout. Force session deactivation [ 94.899089][ T6730] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 94.954262][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059827400: abort rx timeout. Force session deactivation [ 95.104075][ T6774] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 95.138343][ T6774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.210'. [ 95.696827][ T6811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.221'. [ 95.733998][ T6814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.223'. [ 95.769919][ T6817] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 95.779858][ T6817] tipc: Enabling of bearer rejected, failed to enable media [ 95.782725][ T6814] netlink: 'syz.4.223': attribute type 18 has an invalid length. [ 95.804084][ T6814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.223'. [ 95.861870][ T6814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.223'. [ 95.897261][ T6814] netlink: 'syz.4.223': attribute type 18 has an invalid length. [ 95.928843][ T6814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.223'. [ 95.961035][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.975352][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.991898][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.002130][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.011069][ T6826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.229'. [ 96.084544][ T6819] bond1: option miimon: invalid value (18446744073709551585) [ 96.110783][ T6819] bond1: option miimon: allowed values 0 - 2147483647 [ 96.119735][ T6830] netlink: ct family unspecified [ 96.129721][ T6830] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.180678][ T6819] bond1 (unregistering): Released all slaves [ 96.246166][ T6832] tipc: Cannot configure node identity twice [ 96.335839][ T6842] 8021q: VLANs not supported on ip6gre0 [ 96.897252][ T6859] syz.1.241 (6859) used greatest stack depth: 17552 bytes left [ 96.997018][ T6861] syz.1.241 (6861) used greatest stack depth: 15096 bytes left [ 97.220463][ T6892] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.282047][ T6895] netlink: 'syz.0.253': attribute type 1 has an invalid length. [ 97.330956][ T6895] netlink: 'syz.0.253': attribute type 1 has an invalid length. [ 97.340389][ T6895] netlink: 'syz.0.253': attribute type 4 has an invalid length. [ 97.350464][ T6895] NCSI netlink: No device for ifindex 830110067 [ 97.560099][ T6914] wireguard: wg1: Could not create IPv4 socket [ 97.731439][ T6924] tipc: Started in network mode [ 97.778348][ T6924] tipc: Node identity 2f6, cluster identity 4711 [ 97.804327][ T6924] tipc: Node number set to 758 [ 97.857353][ T6931] veth0: entered promiscuous mode [ 97.881516][ T6930] veth0: left promiscuous mode [ 97.971278][ T6929] netlink: 'syz.3.264': attribute type 10 has an invalid length. [ 98.009743][ T6929] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 98.053826][ T6945] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 98.074523][ T6943] delete_channel: no stack [ 98.078579][ T6939] veth1_to_hsr: default FDB implementation only supports local addresses [ 98.229371][ T6955] Cannot find add_set index 0 as target [ 98.333411][ T6961] syzkaller1: entered promiscuous mode [ 98.345548][ T6961] syzkaller1: entered allmulticast mode [ 98.537460][ T6971] xt_bpf: check failed: parse error [ 98.750807][ T6980] __nla_validate_parse: 7 callbacks suppressed [ 98.750822][ T6980] netlink: 40 bytes leftover after parsing attributes in process `syz.2.281'. [ 98.773673][ T6984] netlink: 'syz.3.282': attribute type 3 has an invalid length. [ 98.985057][ T6991] tipc: Enabled bearer , priority 0 [ 99.021384][ T6996] netlink: 'syz.4.285': attribute type 1 has an invalid length. [ 99.038434][ T6993] syzkaller0: entered promiscuous mode [ 99.044016][ T6993] syzkaller0: entered allmulticast mode [ 99.079200][ T6991] sch_tbf: burst 127 is lower than device veth1_to_bond mtu (1514) ! [ 99.139021][ T6996] bond2: (slave ip6gretap1): making interface the new active one [ 99.148087][ T6996] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 99.156307][ T6996] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 99.165763][ T6996] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 99.183481][ T6993] tipc: Resetting bearer [ 99.194269][ T6990] tipc: Resetting bearer [ 99.231753][ T6990] tipc: Disabling bearer [ 99.409052][ T7013] netlink: 72 bytes leftover after parsing attributes in process `syz.4.289'. [ 99.441321][ T7018] Oops: general protection fault, probably for non-canonical address 0xfbd5a5d5a0000003: 0000 [#1] SMP KASAN PTI [ 99.453240][ T7018] KASAN: maybe wild-memory-access in range [0xdead4ead00000018-0xdead4ead0000001f] [ 99.462505][ T7018] CPU: 1 UID: 0 PID: 7018 Comm: syz.1.292 Not tainted syzkaller #0 PREEMPT(full) [ 99.471678][ T7018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 99.481718][ T7018] RIP: 0010:smc_diag_dump_proto+0x4bc/0x1fc0 [ 99.487687][ T7018] Code: 80 3c 2f 00 74 08 48 89 df e8 20 f5 29 f7 4c 8b 23 4d 85 e4 0f 84 26 02 00 00 48 89 5c 24 30 49 83 c4 18 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 f5 f4 29 f7 4d 8b 2c 24 49 83 c5 [ 99.507272][ T7018] RSP: 0018:ffffc900036d6f60 EFLAGS: 00010a06 [ 99.513325][ T7018] RAX: 1bd5a9d5a0000003 RBX: ffff8880343d0648 RCX: ffff8880254fbc80 [ 99.521278][ T7018] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 99.529235][ T7018] RBP: ffffc900036d72b0 R08: ffff8880343d005f R09: 1ffff1100687a00b [ 99.537194][ T7018] R10: dffffc0000000000 R11: ffffed100687a00c R12: dead4ead00000018 [ 99.545146][ T7018] R13: dffffc0000000000 R14: ffff8880343d0000 R15: 1ffff1100687a0c9 [ 99.553098][ T7018] FS: 00007f31c7a3d6c0(0000) GS:ffff888125e0c000(0000) knlGS:0000000000000000 [ 99.562009][ T7018] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 99.568574][ T7018] CR2: 00007f867f9b12f8 CR3: 0000000030fdc000 CR4: 00000000003526f0 [ 99.576528][ T7018] Call Trace: [ 99.579796][ T7018] [ 99.582718][ T7018] ? __pfx_smc_diag_dump_proto+0x10/0x10 [ 99.588366][ T7018] ? __lruvec_stat_mod_folio+0x6f/0x2e0 [ 99.593906][ T7018] ? __lruvec_stat_mod_folio+0x6f/0x2e0 [ 99.599440][ T7018] ? __phys_addr+0xd3/0x180 [ 99.603923][ T7018] ? __kasan_kmalloc_large+0x85/0xa0 [ 99.609198][ T7018] ? rcu_is_watching+0x15/0xb0 [ 99.613949][ T7018] ? rcu_is_watching+0x15/0xb0 [ 99.618698][ T7018] ? trace_kmalloc+0x1f/0xd0 [ 99.623268][ T7018] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 99.629842][ T7018] ? __alloc_skb+0x142/0x2d0 [ 99.634421][ T7018] ? __build_skb_around+0x262/0x3f0 [ 99.639607][ T7018] smc_diag_dump+0x59/0xa0 [ 99.644013][ T7018] netlink_dump+0x6e4/0xe90 [ 99.648504][ T7018] ? __pfx_netlink_dump+0x10/0x10 [ 99.653535][ T7018] ? __netlink_lookup+0x7db/0x8a0 [ 99.658560][ T7018] ? netlink_lookup+0x30/0x200 [ 99.663307][ T7018] ? netlink_lookup+0x30/0x200 [ 99.668056][ T7018] ? netlink_lookup+0x30/0x200 [ 99.672805][ T7018] __netlink_dump_start+0x5cb/0x7e0 [ 99.678021][ T7018] smc_diag_handler_dump+0x178/0x210 [ 99.683296][ T7018] ? __pfx_smc_diag_handler_dump+0x10/0x10 [ 99.689089][ T7018] ? __pfx_smc_diag_dump+0x10/0x10 [ 99.694187][ T7018] ? sock_diag_lock_handler+0x19/0x290 [ 99.699631][ T7018] ? sock_diag_lock_handler+0x19/0x290 [ 99.705076][ T7018] sock_diag_rcv_msg+0x4cc/0x600 [ 99.710003][ T7018] netlink_rcv_skb+0x208/0x470 [ 99.714757][ T7018] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 99.720212][ T7018] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 99.725488][ T7018] ? netlink_deliver_tap+0x2e/0x1b0 [ 99.730672][ T7018] netlink_unicast+0x82f/0x9e0 [ 99.735423][ T7018] ? __pfx_netlink_unicast+0x10/0x10 [ 99.740723][ T7018] ? netlink_sendmsg+0x642/0xb30 [ 99.745649][ T7018] ? skb_put+0x11b/0x210 [ 99.749887][ T7018] netlink_sendmsg+0x805/0xb30 [ 99.754638][ T7018] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.759911][ T7018] ? aa_sock_msg_perm+0xf1/0x1d0 [ 99.764830][ T7018] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 99.770103][ T7018] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.775375][ T7018] __sock_sendmsg+0x21c/0x270 [ 99.780037][ T7018] ____sys_sendmsg+0x505/0x830 [ 99.784791][ T7018] ? __pfx_____sys_sendmsg+0x10/0x10 [ 99.790065][ T7018] ? import_iovec+0x74/0xa0 [ 99.794554][ T7018] ___sys_sendmsg+0x21f/0x2a0 [ 99.799210][ T7018] ? __pfx____sys_sendmsg+0x10/0x10 [ 99.804401][ T7018] ? __fget_files+0x2a/0x420 [ 99.808976][ T7018] ? __fget_files+0x3a0/0x420 [ 99.813639][ T7018] __x64_sys_sendmsg+0x19b/0x260 [ 99.818562][ T7018] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 99.824009][ T7018] ? do_syscall_64+0xbe/0xfa0 [ 99.828669][ T7018] do_syscall_64+0xfa/0xfa0 [ 99.833168][ T7018] ? lockdep_hardirqs_on+0x9c/0x150 [ 99.838347][ T7018] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.844395][ T7018] ? clear_bhb_loop+0x60/0xb0 [ 99.849055][ T7018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.854930][ T7018] RIP: 0033:0x7f31c6b8efc9 [ 99.859331][ T7018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.878923][ T7018] RSP: 002b:00007f31c7a3d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.887322][ T7018] RAX: ffffffffffffffda RBX: 00007f31c6de6090 RCX: 00007f31c6b8efc9 [ 99.895276][ T7018] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000045 [ 99.903228][ T7018] RBP: 00007f31c6c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 99.911180][ T7018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.919131][ T7018] R13: 00007f31c6de6128 R14: 00007f31c6de6090 R15: 00007ffed6ca1cf8 [ 99.927090][ T7018] [ 99.930090][ T7018] Modules linked in: [ 99.935230][ T7018] ---[ end trace 0000000000000000 ]--- [ 99.942041][ T7018] RIP: 0010:smc_diag_dump_proto+0x4bc/0x1fc0 [ 99.948200][ T7018] Code: 80 3c 2f 00 74 08 48 89 df e8 20 f5 29 f7 4c 8b 23 4d 85 e4 0f 84 26 02 00 00 48 89 5c 24 30 49 83 c4 18 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 f5 f4 29 f7 4d 8b 2c 24 49 83 c5 [ 99.967855][ T7018] RSP: 0018:ffffc900036d6f60 EFLAGS: 00010a06 [ 99.973912][ T7018] RAX: 1bd5a9d5a0000003 RBX: ffff8880343d0648 RCX: ffff8880254fbc80 [ 99.981881][ T7018] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 99.989922][ T7018] RBP: ffffc900036d72b0 R08: ffff8880343d005f R09: 1ffff1100687a00b [ 99.997893][ T7018] R10: dffffc0000000000 R11: ffffed100687a00c R12: dead4ead00000018 [ 100.006284][ T7018] R13: dffffc0000000000 R14: ffff8880343d0000 R15: 1ffff1100687a0c9 [ 100.014623][ T7018] FS: 00007f31c7a3d6c0(0000) GS:ffff888125e0c000(0000) knlGS:0000000000000000 [ 100.023570][ T7018] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 100.030151][ T7018] CR2: 00007f867f9b12f8 CR3: 0000000030fdc000 CR4: 00000000003526f0 [ 100.038134][ T7018] Kernel panic - not syncing: Fatal exception [ 100.044451][ T7018] Kernel Offset: disabled [ 100.048782][ T7018] Rebooting in 86400 seconds..