last executing test programs: 2.833722357s ago: executing program 0 (id=794): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="09090000002000000000019bc5c67e6bf0c982410000004c00180000006062726f6164636173742d6c696e6b000000000000000000000000000000000000000000000000000000000000000000000000000000000000002855000000000000000000"], 0x68}}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETBE(r6, 0x400454de, &(0x7f0000000000)=0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x2, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x3b}}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x1000, &(0x7f0000001c80)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, r4, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r5, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r8, 0x8) (async) r9 = accept4(r8, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r9, 0x84, 0xd, &(0x7f0000000100), 0x4) (async) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r7) (async, rerun: 32) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r7) (rerun: 32) r10 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) connect$can_bcm(r10, &(0x7f0000001ff0), 0x10) sendmsg$can_raw(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000580)=@can={{0x3, 0x0, 0x0, 0x1}, 0x4, 0x3, 0x0, 0x0, "486f79bbd5b32287"}, 0x10}, 0xee, 0x0, 0x0, 0x40041}, 0x0) (async) recvmmsg(r7, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x105}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000680)=""/153, 0x99}, {&(0x7f0000005c40)=""/4096, 0x1000}, {&(0x7f0000000340)=""/196, 0xc4}], 0x3}, 0x7}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000004c40)=""/4096, 0x1000}, {&(0x7f0000000540)=""/153, 0x99}, {&(0x7f00000008c0)=""/229, 0xe5}, {&(0x7f0000000240)=""/105, 0x69}, {&(0x7f00000000c0)=""/17, 0x11}, {&(0x7f0000000480)=""/124, 0x7c}, {&(0x7f0000003c40)=""/4092, 0xffc}, {&(0x7f00000018c0)=""/147, 0x93}], 0x8}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x5}], 0x5, 0x40008022, 0x0) (async) r11 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r11, &(0x7f0000000440)={0x2, 0x4e24, @broadcast}, 0x10) 2.693556472s ago: executing program 2 (id=796): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800b9920400007b8ae4ff00000000bfa200000000000007020000687ea1d2b3dc218508000000b7043d020000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRESDEC=r0, @ANYRES8=r0], 0x7c}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}], {0x14, 0x14}}, 0x64}}, 0x0) (async, rerun: 64) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x3f}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000029000000040000002b0000000000000712"], 0x30}, 0x0) 2.624916798s ago: executing program 0 (id=798): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x2, 0x10000, 0xbf5, 0x7, 0x4}, 0x4, 0x1, 0xfffffffb, 0x3, 0x8, 0xc, 0x6, 0x14, 0x1, 0xff, {0x9a0, 0x3ff, 0x6, 0x3, 0x5, 0x2}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_bpf={0x2c, 0xa, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x41}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 2.358865365s ago: executing program 0 (id=801): r0 = socket(0x1d, 0xa, 0x6) r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x6c20}, 0x1, 0x0, 0x0, 0x24048890}, 0x4019054) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) syz_emit_ethernet(0x7a, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd60ffff0000442f00fe88000000000000000000000000ff01fe8000000000000000000000000000aa042088be0000000000000800000086dd080088be"], 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32], 0x20) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c", 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000140), 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa63b}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x40010) recvmmsg(r9, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000000340)=""/196, 0xc4}], 0x3}, 0x7}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000004c40)=""/4096, 0x1000}, {&(0x7f0000000540)=""/163, 0xa3}, {&(0x7f00000008c0)=""/229, 0xe5}, {&(0x7f0000000240)=""/105, 0x69}, {&(0x7f00000000c0)=""/17, 0x11}, {&(0x7f0000000480)=""/124, 0x7c}, {&(0x7f0000003c40)=""/4092, 0xffc}, {&(0x7f00000018c0)=""/147, 0x93}], 0x8}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x5}], 0x5, 0x40008062, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000100)=0x4) 2.328660153s ago: executing program 4 (id=802): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, &(0x7f0000000340), 0x4) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1c, r1, 0x230, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008804}, 0x44047) 2.248012059s ago: executing program 2 (id=803): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20) unshare(0x22020400) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000001c0)={0x0, 0x10000, 0x1000, 0x6, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000280)={0x0, 0x92, "85dc2816d2d092baf57b6fe42fa7b1ad076c981166f25664f1356600c4ab1227a313f9f2097ffd3f37b5dbf99ca0e0356303cb6d57d1fcdd06fa0e17d5b35392973fdf345cea3c6758fe43bdd40e8d0e09781ea11db7dc6cd6f9555af1929024f048b0fd23fcbf3257e334b0e19a03c183fab90cd1aa279e95a4a04fa3fd2c06204586d937f90f6682f297b02b207360958d"}, &(0x7f0000000080)=0x9a) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e24, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffb14}}}, 0x84) 2.247395166s ago: executing program 1 (id=804): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x80002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x40, r2, 0x1, 0x0, 0x0, {0x1b}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}]}, 0x40}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = socket(0x10, 0x803, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56741, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0xf}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x21}}]}}]}, 0x48}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1503}}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0xb0b}, 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r4) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000000000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r9, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="03008000", @ANYRES16=r12, @ANYBLOB="08002abd7000ffdbdf250a00000008000300", @ANYRES32=r14, @ANYBLOB="08003700000000000a000600ffffffffffff00100800090001ac0effeb000700f851cc1083000000040028000a00060008021100000100be0b30e870fd9a4a53fdc9552e0008003700020000"], 0x68}, 0x1, 0x0, 0x0, 0x44}, 0x801) 2.164025007s ago: executing program 3 (id=805): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000840), r0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000880)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, ')\'\'--+'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x400c0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d42400000000000000290000003e000000", 0xfe60) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYRES64=r0], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) 2.163598918s ago: executing program 4 (id=806): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) getsockopt$rose(r0, 0x104, 0x2, &(0x7f0000000080), &(0x7f0000000140)=0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet(0x2, 0x3, 0x33) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) (async) unshare(0x66000080) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000010000104000020000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b12020000000000280012800b00010067656e6576650000180002"], 0x58}}, 0x0) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b705000000000000611059000000000004000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r6, &(0x7f0000000380), 0x20000000}, 0x20) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x11, @loopback, 0x0, 0x0, 'sh\x00', 0x3b, 0x0, 0x73}, 0x2c) (async) sendto$packet(r3, &(0x7f0000000180)="0b032200e0ff251202a6475400f6a13bb100c117080008004803", 0x10000, 0xffffffffffffc117, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000440)={0x80000001, {{0x2, 0x4e22, @local}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) 2.051937609s ago: executing program 0 (id=807): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) unshare(0x62040200) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0500000008000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000172c58b21bac8b1f41855e2eea000000000000000000000000000000000000000000001fac76b05feac87a5cdc2d1341bcd562a6e2f7e6982e4862a963284f752fff00d7ec7d196edb7ab57afe60c10d7d36745ce98aa02daade1e"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth1\x00', 0x6bf1c2d5adba8c32}) write$tun(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x3e) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xffffffffffffffff, 0x100000, 0x800000000000, 0x8}, 0x0, 0x0, 0x0, 0x0) write(r4, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000380)=0x1, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES32=r6], 0x188}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r7, 0x10f, 0x8a, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1e00000006000000876e00004000000040100200", @ANYRES32=r5, @ANYBLOB='9\x00'/19, @ANYRES32=0x0, @ANYRESOCT=0x0, @ANYBLOB="05000020000100000000000007000000bc14b768e62690b19b4db100d3a2433c7fa6061795e7178817387284e8cbe58b9525ad5ecf063d02920a2eb303faf2636b81d149985e9ec5f3afa137e8522fddcad7a126831b44e6ea70db"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0) 2.003786768s ago: executing program 3 (id=808): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async, rerun: 64) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000040)={r1}) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) (async) r4 = getpid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001580)=0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000015c0)={0x0, 0x0, 0x0}, &(0x7f0000001600)=0xc) (async) r7 = getpid() (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001640)={0x0, 0x0, 0x0}, &(0x7f0000001680)=0xc) (async, rerun: 32) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async, rerun: 32) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000016c0)=0x0) (rerun: 64) r12 = getgid() sendmsg$unix(r3, &(0x7f00000017c0)={&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001500)=[{&(0x7f00000001c0)="81e25e6a1e21acbd5fe2abab357f22f9322fa8eda96c0e7dfd30a68fff78337681e6350ee48271b4a8d443c09bbf4d12184b45e0a31340cb89909225e030f91c764ad6320a3db772fa3de34059eab0f0a3aaf94b157f393a61797bcd3a72d490089269e227752bc7881cbab261c47900530018be1c4c6fbb527ef5056f659355ecc4d85d74866670fdb970f7ba391f659bcd6e6fb80b874d986fdb08e2709e213e793a6937fbb88adb8e253a4621bba60893661a66107c64cbd7661db24dc072535a8359cff2148a2ce98ccca358b81c7f918b907b5e35ef2557ebab859ca1c066231c96ec30c3d1541ad3ded69f8402080146e4ada71041", 0xf8}, {&(0x7f00000002c0)="61435de281737721c4ea1d4f5be84311d42460f7cb7bbad0a180de0e97f01c2569a903c9ad36971c21349987385513eb6a01f130358077622999cfff25795f23bd6f7cfcb6f94633ca9d8ac7f8d6bbeaf1246ba0b7e66c00703fc56a1a70cec3c91c42ff0355488ccb4ffd908e8884036ca37c0ab2b0670eaca0df941704b79bfb1014df48f0cb678c9eaf5096eda3463575b47bef284ea36b3277d1421f996c7139ccc27bcbe151e12111487e50d965f84a448554c967ef45a97ef274dc2c4eb632c320", 0xc4}, {&(0x7f00000003c0)="0eeb14f2909f569e7ae7d21ada069d7a9b05672f2f886d4ad5e9609ee241a077ac4e4e43f233d18ae7c59d99f28758c30159b871a85456e726747ddf302c258022bc3573a66ede82e7fd2df3ff7c672027618b234b5d78bad6edd01666cd13d7b428bcf8a610baa75a31aba125a823b01ec27f3902247a359ae09b31aecb61a203c3929ef16c3b5859e8c92e8979cf4f1471f0ae0c8c066c45f9e76663229944d71e91ec83c9fc1c79f8493f3b3232fe3536385d7a8dbe2e1302e5d7f38c99e576f32e11943deb487737bb5d27f89336ab0ba0de7ad927", 0xd7}, {&(0x7f00000004c0)="666fd1f23aff80aea8eae9cb8003d9c55beabd6625c42c66605a4caaf7cca7a06a1fd48ee632", 0x26}, {&(0x7f0000000500)="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", 0x1000}], 0x5, &(0x7f0000001700)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {r7, 0xee00, r8}}}, @rights={{0x30, 0x1, 0x1, [r1, r2, r2, r1, r9, r1, r2, r1]}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r10, r0, r1, r2, r0]}}, @cred={{0x1c, 0x1, 0x2, {r11, 0xee01, r12}}}], 0xc0, 0x4880}, 0x4000084) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001ac0)={0xffffffffffffffff, 0xe0, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001880)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x39, &(0x7f00000018c0)=[{}], 0x8, 0x10, &(0x7f0000001900), &(0x7f0000001940), 0x8, 0xe0, 0x8, 0x8, &(0x7f0000001980)}}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000001b00)={{{@in=@loopback, @in=@multicast1, 0x4e24, 0x5, 0x4e21, 0x1, 0xa, 0x20, 0x80, 0x33, r13, r5}, {0xfffffffffffffffe, 0x9, 0x3699fcab, 0xa258, 0xb3a, 0x1, 0x8, 0x4}, {0xfffffffffffffff7, 0xd, 0x8000000000000001, 0x4}, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d3, 0x33}, 0x2, @in=@loopback, 0x3503, 0x1, 0x1, 0xfd, 0x2, 0x66, 0x6}}, 0xe8) (async) r14 = bpf$ITER_CREATE(0x21, &(0x7f0000001c40), 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000001c00), r14) (async, rerun: 32) r15 = socket$inet6(0xa, 0x4, 0x8) (rerun: 32) r16 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c80)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendmsg$sock(r3, &(0x7f0000001f80)={&(0x7f0000001cc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x4, 0x2, 0x0, 0x1, {0xa, 0x4e21, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}}}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001d40)="94dfb73f76c151820ec6ddb7f4941e787dec2032984220", 0x17}, {&(0x7f0000001d80)="a8633f99bc3711fe4abb5653927400194cad1220ee847543ac0cb5da", 0x1c}, {&(0x7f0000001dc0)="f140577bab32931ee9aa49f959dfb88fe7643d38bf714d168b194e137ef7e0da069090e3ee56b64dab295edb3ae33e71973527a40a9596d887b4b9b1ef289a703d038ea497daebf2ff84101ae978c8a72610988c8c82fba9ad77279fe161851971bb4b55a93794029e339799a40316c397d1709f47a239d8a6112bb24d1a79a5c241ca18c4cbe2b5046287717454b1c4df233f1fe34227a1f2f98a7cec570ff062e3149585fdb5852201dbb802f2c2cef419d26af069c420c46491b82b4c9e8e0241f5ff598559e041f2bbf4c9fb646b255cb9f40a8ec7909fde3a87a632dc766c14bc3e", 0xe4}, {&(0x7f0000001ec0)="56db4c1467ce82f31d0a1ac4830c3891579725e1e6720fe04cb316", 0x1b}], 0x4, &(0x7f0000001f40)=[@mark={{0x14, 0x1, 0x24, 0x5}}], 0x18}, 0x80) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r14, &(0x7f0000002080)={&(0x7f0000001fc0), 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x30, 0x140e, 0x100, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x8d1) (async) ioctl$int_in(r1, 0x233d118b98059d57, &(0x7f00000020c0)=0x2) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000002140)=@o_path={&(0x7f0000002100)='./file0\x00', 0x0, 0x4008, r15}, 0x18) ioctl$sock_proto_private(r0, 0x89e8, &(0x7f0000002180)="4362c012f358bf4d2e8df57c915b31ac078a5657c1d1be2c0a6b5c959703770ab92041e5100f90d13ff1ffb298ee6aed659bb533ce7188dc64e2b47abaa5c47a3bd4cc6cc50603caaccffafbbeca56cf58879fed2fb1596074f05256c71e60f4b3aa7281f3f3aa4bb450f01a986d35a64d1c68179675996188d43531359178e08570b9401c4d3e76ed9eb849b78bd15681628056ff022a4fbbfa7b95a3e67feeed87") (async) r17 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r17, 0x114, 0x8, &(0x7f0000002240), 0x4) (async, rerun: 64) accept4$llc(r14, 0x0, &(0x7f0000002280), 0x80800) (rerun: 64) mkdirat$cgroup(r16, &(0x7f00000022c0)='syz1\x00', 0x1ff) 1.923975178s ago: executing program 1 (id=809): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e24, 0x7fff, @empty, 0x9}}, 0xe5, 0x4, 0x0, 0xe, 0x1, 0x5, 0x9}, 0x9c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff9ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b24df41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b318e2ec0e1a00897a74a0091ff110026e6d2ef831ab7ea0c34f17efd36ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0cb82d2789cb132b8667c21476619f28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e1019c12a73748b049604fa72c64ed858e8327ef01fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6e97180aabc18cae2ed4b4390af9a9ceafd07ed00b0000002cab154ad029a119ca3c972780870014601c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f4b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f19afc91b47683db01a469398685211bbae0e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bde792c88c5b8dcdcc22ee17476d738992533ac2a9b5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffffd7917f23837a6b24db0e067345560942fa629fbef2461c96a08707671315c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e48455b588b90dfae158b94f50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859ac8e3c177b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2498d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d4a3e1a9e90d76c1993e0799d4894ee7f8249dc1e342892129369ee1b85afa1a5be5f6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90501b0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355b17402a500587b603306a5af8d867d80a07f10b854b1c8c768c001496fa99ce5b5040be9194123e918914a71ad5a8521fb956dbc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c6775e19f0b7e70803000000b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989172a1bcd1e30280bc5867dd4e27b6ef206660090bb2164474cef378f97ca33fccf363361dcdba10c1547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2d7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aa0000000000000000532ff181c985f54b7ae20aa5e63055b4d6a36fa98a44e379d2bccf977c3e88538f406b598307c9912fb097601f3f88a2ea6fd1f9320cfe7f09aed4d1e72d26e5c7a93854c8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eafeffffffffffffff000000070000000000000000000000005333c6199c12dcd92689192727a7267c47cf897853d160100b39b613faefe16bd91fc105dddd77ab929b95032d3717fa9fbdc2bdc0e98ae2c3f23a6131e2879f0484ee3bfe30b92dd493be66c2242f8184733b80ba28e824910844df31f3d4bb2f89049c5f6d63956995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99a40b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc1758763f0000009c927da38d83314480b15e23eb8c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab602000000000000000000113a3065a478d1de98be3a66f6fbf68f2f5693050fa56db62e2f99cf916059ee36cdad078fc88d17cbde37a2270f90a60afe8548d4c579b09c333382c6e7a316ac03aa23d379836b96173a5541fa96c27e7fb6d2585d828aa330f3438d8487912bb7742be1502e706644f7a937451beb7a5f6ca3ef21e8cb8f841af6d54334d82a8b816b6daccf0c66162f897623ee325d714f9f10636a7573582ff31c7f9c6f767c806ef4af486cc19a5355bdc814cb5557c6fa6404179c865980b0815b907a7f268e97828c196f5ac033d395a217b4e1e45663023a0292003c36a3b7461fc2c8566e0f3f693bfacae26aa2b7d17962989ccb943633c080aacc9b7d311c251686fc66aa80bf41a5bf6cd72d5aa995820fb318fad61a79a61d0a969fd6018ac9f131fe02fe31d565723cbf9b63841e21417fc29a3e7a03886d80566ae001861799a4aad91c72139e681ced8625b675dfbd6d458d4b2d9e6d565430248172ad942cdb41639f4113896827c8806e049218cd1eef89d6b9b14dd707da40705c07f878263ff9b71ccf28ec50178c7aac83bef7bd10459e2f2e267f82bafd5b4c7b481ea5e4bcb6cfe05e2ac3e17c1f8f12ddf5b6770ce0da8cb3aba3a935a6b737b6d3ebf2c715dcc11c5759bd0acdecf333f2b77c52fb2251336bbd92f73ad1a30bb9162bd9d699c49d824b827f3e7c1096354946e09922db25904c83262c6dcb87457e4abefa0e9dcb17d79c173895b74aae2ed4419662690a16494e7b27d0d2688c69b4be3d21b783195f6a5e5dc5c07c73f0d0f0670db10ac9ef5b8295ff88df734e3c6ab8555c0390f962cbf559bce9c42e1034dba78997b2877b485d9d4ae2fcd3e757b84319879d0337785773c940af6e57d162f4606d101def01199325c8676a32e26303560271b720216d95e0013265a45b02bd2414bebda89b7b5e71e70e0000000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x10000000, &(0x7f0000000100)="b9ff03006044238cb89e142786dd1bff88a800008100630677fbac141442e934a0a662079f4b4dfe87e5feca6aab845013f288a81a3908020b098da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) 1.884192771s ago: executing program 2 (id=810): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000100)='-', 0x1, 0x40801, &(0x7f00000000c0)={0xa, 0x4e21, 0x100, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x15}, 0x1c) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x7, 0x4, 0x3, 0x7b3}, 0x8) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x6, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x13) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r1, &(0x7f0000000940), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) sendmmsg(r2, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000f40)=@vsock={0x28, 0x0, 0xfffffffe}, 0x80, 0x0}}], 0x2, 0x100) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000020000000000000000008500000017000000850000000700000095", @ANYBLOB="111a1134ec8d28f0656a7bf61074", @ANYRESDEC=r0], &(0x7f0000000200)='syzkaller\x00', 0x200, 0x0, 0x0, 0x41100, 0x29, '\x00', r3, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000040)=@in6={0x21, 0x1, 0x2, 0x24, {0xa, 0x4e21, 0x7, @private0}}, 0x24) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f00000001c0)={0x2, 'netpci0\x00', {0xffffded0}, 0x598}) r5 = socket$caif_seqpacket(0x25, 0x5, 0x0) sendmmsg(r5, &(0x7f0000002080)=[{{&(0x7f0000000040)=@l2tp={0x2, 0x0, @empty}, 0x80, 0x0}}], 0x1, 0x48044) r6 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="02", 0x33fe0}, {0x0}], 0x2}, 0x400c010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae", 0x800, 0x4c44, 0x8000}, 0x3c) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r9) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES64=r10, @ANYRES16=r0], 0x44}, 0x1, 0x1000000, 0x0, 0x4000080}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) 1.764054034s ago: executing program 1 (id=811): unshare(0x62040200) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000040)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) unshare(0x62040200) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000040)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) (async) 1.741696078s ago: executing program 3 (id=812): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b04000000000000000002000004380004803400018009000100686173680000000024000280080007400000000108000440fdfffff70800024000000010080006402f0000080900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b04000000000000000002000004380004803400018009000100686173680000000024000280080007400000000108000440fdfffff70800024000000010080006402f0000080900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2b0, 0xffffffff, 0x180, 0xb0, 0x180, 0xffffffff, 0xffffffff, 0x218, 0x218, 0x218, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x4ca, 0xb, [0x10, 0x2a, 0x36, 0x10, 0x7, 0x200f, 0xb, 0x22, 0x39, 0x33, 0x17, 0x36, 0x806, 0xe, 0xa, 0x1a], 0x0, 0xb, 0x681}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00', {0xff}}, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) (async) pwritev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) (async) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="140100002d0001000000000000000000040100800c0000000000000000000000140001000100000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0447bde68bf84b36ec707001265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9661dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee9235973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cc58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe30700000000000000061dc35817c8a66c29be82fd3f8cd115b1d77b4ee669bd96d7d1889fa37e4da822e96102fa6e7a5e46f68aa6428b5b8db4361057978d588cf8970fe91c650b51ec5b81ac1208671dea0e3f1e92fef9d3fbf912c3268efe7c9541f957f08ad4244886094c9c5abaec25e74f66"], 0x114}], 0x1}, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_extract_tcp_res(&(0x7f0000000380)={0x41424344}, 0x0, 0x10000) syz_emit_ethernet(0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r7, 0x6, 0xc, 0x0, 0x0) sendmmsg$inet(r7, 0x0, 0x0, 0x2000c000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r3) bind$inet(r7, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r7, 0x6, 0xc, 0x0, 0x0) (async) setsockopt$inet_tcp_TLS_TX(r7, 0x6, 0xc, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x401c, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) (async) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x401c, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r5], 0x238}}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.209715899s ago: executing program 4 (id=813): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x109, 0x0, &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x10) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000340)=ANY=[@ANYRESHEX=r0, @ANYBLOB="ea6305b710b780275f879d1db49bd46eb2ddd3c18fd50db1475cca198a803069ee8bf85bff40ac201f1f9d54078b1d9675798d6d5e446ff84e5e4a48e9f367162b28ed8913dad9d5837317111e3036d93c1e886f5feba2620440b4", @ANYRESOCT=r1, @ANYRES8], 0xfffffffffffffdb7) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000007c0)={0x0, 0x9, 0x8}, 0xc) 1.087859714s ago: executing program 3 (id=814): unshare(0x22020600) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@ifindex, r0, 0x37, 0x0, 0x0, @void, @value}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000140)={0x1, 0x1, [@random="b67adc663f22"]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900012073797a30000000000900030073797a32000000009c000000060a010400000000000000000100000008000b4000000000f4000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002205000200070000003c0001800c00010062697477697365002c000280080003400000000208000140000000140800024000000012080007800400010008000640000000030900baf9d3d81cb991956ed5010073797a300000000014000000110001000000"], 0x110}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xa}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x8000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r7}, 0x4) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001500)=""/4068, 0xfe4}, {&(0x7f0000002500)=""/4094, 0xffe}], 0x2}, 0x40000020) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000a9009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x29, 0x7, 0xf1, 0xa, 0x52, @empty, @mcast1, 0x1, 0x8000, 0xc1e, 0x9}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.058490471s ago: executing program 4 (id=815): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x28, 0x1, 0x0) connect$packet(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xfffffcf0, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) connect$inet(r5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa000000000000007000000080000002d1501000000000095000000000000006916000000000000bf67000000000000350607000fff07206706000003000000160302000ee60060bf350000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dc725f431bcab0ef59b8f0e431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa0100000000000000b93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4ffcae1a8a793a7795a9214a92f66e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc3086936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154baa8e51489a614e69722bac30000000000000000000000000000a006b178438e930b2494db1bf624a70a19a45b8b71869afb13cb2ac1d2f3ec0d93a3e4fd0ad076c7d826f218aa6ba8ec5e58b7c64dc8616127087901dc65418a4b25bfa7ae8b5ad9642815f319230425e8bd89c6983d816d97d81a739917eecd26f9a3aecaf0acdaf6cffab38eae3b10b122b4bf521a46bf01a0c136f745113b589459fbe1666087a7c554a55e2b42ab7e405a77f405a348a64e356b7fb61e48ea9c87bf13f97052c51fdd49f3dbccf9874cf61807ae4b1665ccdd026d4580a068395e8cb851eeadb1da6d1009513ca73a685c66fb15f27eb74a7a4eb5966e3ef4be3ca8ba81b2d17d797265390ce616c3d7b566fe956fb93c6a43f4dc6bfc194daeb7b998d550773bc14aca"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 885.35107ms ago: executing program 0 (id=816): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0xfffffffffffffe20, r1, 0xde6bcce13c096341, 0x70bd27, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0xfffffffffffffe20, r1, 0xde6bcce13c096341, 0x70bd27, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) (async) 776.047942ms ago: executing program 2 (id=817): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x1a, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000700)={0x0, @in6={{0xa, 0x4e20, 0xd, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xd}}, 0x4}, 0x90) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r2) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x4c, r3, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x4c}, 0x2, 0x34005}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20) getsockopt(r1, 0x7, 0xa9ad, &(0x7f0000000540)=""/141, &(0x7f0000000180)=0x8d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x92bb, 0x1, 0x3, 0x9, 0x3, 0x1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r4, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0xf, &(0x7f0000001840)=ANY=[@ANYBLOB="1806000000000000200000000000000018110800", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b5020000000000002800000000000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) 775.572667ms ago: executing program 1 (id=818): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r3 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0x70, 0x2c, 0xd27, 0x303d29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) (async, rerun: 64) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@allocspi={0x120, 0x16, 0x1, 0x0, 0xfffffffe, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x0, 0x33}, @in6=@mcast1, {0x5, 0x1}, {0x0, 0x4, 0x2, 0x7}, {0x0, 0x1}, 0x0, 0x0, 0xa}, 0x5, 0x5}, [@address_filter={0x28, 0x1a, {@in=@local, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0xa, 0x40, 0x2e}}]}, 0x120}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) (rerun: 64) 706.440297ms ago: executing program 0 (id=819): socket(0x11, 0x4, 0x9) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000001aa80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x1a, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x2329000, 0x800}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000000000203000000000000000000000d00000000000000000000000a020000000000000000000003000000000300000003"], &(0x7f0000000140)=""/240, 0x56, 0xf0, 0x1, 0x0, 0x0, @void, @value}, 0x20) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x8000, 0x700, 0x9, 0x0, {{0xf, 0x4, 0x2, 0x2b, 0x3c, 0x68, 0x0, 0x6, 0x4, 0x0, @empty, @broadcast, {[@noop, @rr={0x7, 0xb, 0x7d, [@empty, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x1c, 0x38, 0x3, 0x8, [{@multicast1, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@rand_addr=0x64010100, 0x9}]}]}}}}}) r3 = socket$inet6(0xa, 0x80003, 0xff) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r4, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x0, 0x0) accept4$ax25(r5, &(0x7f00000000c0)={{0x3, @rose}, [@rose, @default, @bcast, @rose, @remote, @null, @bcast, @netrom]}, &(0x7f0000000140)=0x48, 0x0) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000000040), 0xfffffceb) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) unshare(0x62040200) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 677.748263ms ago: executing program 2 (id=820): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r1, 0x107, 0x18, &(0x7f0000000800)={0x0, 0x1, 0x6}, 0x10) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x4, 0xa, 0xdf, 0x7, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}, @loopback, 0x8, 0x1, 0x2, 0x6}}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r8) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r8, 0x8b2b, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\\ \x00'}) (async, rerun: 64) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0xfff, 0x0, 0x1, 0x3f, '\x00', r7, r8, 0x1, 0x4, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r9 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000014c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r10, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="01002bbd7000fbdbdf257c00000008000300", @ANYRES32=r12, @ANYBLOB="d4e9c30ca10ad876a40f722efbe672088d17c2d51b4cdebbb9655bba8afae5efbe595c6e6e5bf342031c98c82b8e16368aa7a47830a54b7e79987a85e15eac0d8fc3464d540014ec11de92e4ab84447d8efc404b8a4b7694ab7d30445eb0713f35e9debd15587e29b8468770240b2af29b2b0d94e58f530d5112dfe531ed61e5"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async, rerun: 64) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (rerun: 64) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty, 0x8}, 0x1c) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'dvmrp0\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x30}, 0x0, 0x238, 0x268, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@rt={{0x138}, {0xf, [0xd, 0x4], 0x0, 0x4, 0x6, [@empty, @private0, @loopback, @ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @mcast2, @empty, @dev={0xfe, 0x80, '\x00', 0x2d}, @mcast2, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @loopback, @loopback, @mcast2], 0xa}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x200}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468) (async, rerun: 64) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd8}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) (rerun: 64) 628.122279ms ago: executing program 4 (id=821): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000017c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@struct={0x2, 0x0, 0x0, 0x4, 0x0, 0x3}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28, 0x0, 0x1, 0x5, 0x0, @void, @value}, 0x28) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/time\x00') socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r3], 0x24}}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x82, &(0x7f0000000040)={0xffff, 0xfc9b1b96cb5ac3c8, 0xf09, 0x7}, &(0x7f0000000080)=0x10) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000000040)={{0x3}, 0x5}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b80)=@security={'security\x00', 0x64, 0x4, 0x398, 0x100000c, 0x1e0, 0x1e0, 0xc0, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @rand_addr=0x64010100, 0xff000000, 0x0, 'veth0_vlan\x00', 'pimreg\x00', {}, {0xff}, 0xff, 0x3}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0xfe}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0xc, 0x2, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0xfff8, 0x2, [0x30, 0x3, 0x1, 0x37, 0x811, 0x33, 0x37, 0x1a, 0x17, 0x3d, 0x4, 0x4, 0x2b, 0x21, 0x1c, 0x5], 0x0, 0x8000, 0x2004927}}}, {{@uncond, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xfffd, 0x1}}, @common=@unspec=@ipvs={{0x48}, {@ipv4=@private=0xa010102, [0xffffffff, 0x7fffffff, 0xffffff00, 0xffffff00], 0x4e20, 0x67, 0x3, 0x4, 0x1, 0x2}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7d, 0x9, 0x4, 0x6, 0x1, 0x7f, 0x1, 0x40]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) 627.212863ms ago: executing program 3 (id=822): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @loopback}, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x82680027, r1}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x24, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x401}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x2}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x85}]}}]}, 0x50}}, 0x0) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x82680027, r6}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='memory.events\x00', 0x275a, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="ff", 0x1}], 0x1) syz_emit_ethernet(0x1a, &(0x7f0000002540)=ANY=[@ANYBLOB="bbbbbb000000000000810000000004aa018342c0e10011"], 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="180500000000000000000000000000001801000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b70300000000000085000000190000009500000000000000f06c13d181abdbf0e55bb2df442ab209f2414c7d7067cbb28f62d3461ca821326b4e47b2edf45e15fdc062ba0f2f6e4b27c3a9ffd1a17a7bbef77ca7bdc565bd22e395ed518672e1270632c3b309005c2e85bf923879b00e"], &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 422.919345ms ago: executing program 3 (id=823): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000006000000010001000900000401000000", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500"/28], 0x50) unshare(0x400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x4, r1}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x4, r1}, 0x38) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @multicast}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x20, 0xcf, 0x0, 0xfffff00c}, {0x20, 0x0, 0x5, 0xfffff038}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x20, 0xcf, 0x0, 0xfffff00c}, {0x20, 0x0, 0x5, 0xfffff038}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) pipe(&(0x7f0000000080)) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000019c0)=0x20000000) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000100)="240000005a001f001007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24) (async) write(r7, &(0x7f0000000100)="240000005a001f001007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24) write$tun(r3, &(0x7f00000000c0)=ANY=[], 0xffe) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)="ecaa9cd9623a538287eb9b845f13b6a3591206cb283079b6866646e9e9aea96d7e9478c25a01b9e050442a93d579f90df963304c4dc3306969d8810428fe10ab9d26fde035704b657e24d135393c390270db", 0x52}, {&(0x7f0000000180)="0f9aae5e25941f454b4a7a23e65ec6b289a2710e48ca98747be09c247ee89f10d71a3dbbe4f664059be6701c21b3928dfe3a4f5bb9085d86df030a893d3861ec54bdfe", 0x43}, {&(0x7f0000000000)="e0", 0x1}], 0x3, 0x9, 0x7b) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8, 0x3}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}}, 0x8000) epoll_create1(0x80000) 399.275381ms ago: executing program 1 (id=824): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x4001, 0x1, 0x0, 0x9}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001600010027bd7000fcdbdf250a000000", @ANYRES32=0x0, @ANYBLOB="0823080018000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000730113000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)={0x14, 0x5e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x1}]}, 0x14}], 0x1}, 0x0) sendto$inet6(r1, &(0x7f0000000140)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000e80)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @private2, 0x9}, 0xffffffe6, &(0x7f0000000880)=[{&(0x7f00000003c0)="e3", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x7, 0x7, 0xc, 0x9, 0x0, 0xc, 0x4, 0x6, 0x8, 0x2, 0xa1, 0x4, 0x3, 0x80}, 0xe) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000010000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, 0x0, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r4}, 0x20) r7 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x8, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @multicast2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20084000}, 0x4000880) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r5, &(0x7f0000000040)}, 0x20) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) preadv(r10, &(0x7f0000000180)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1, 0x6, 0x2) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0x15, 0x1, 0x3, 0x100000}, {0x60, 0x4}, {}]}) socket$nl_netfilter(0x10, 0x3, 0xc) 295.977186ms ago: executing program 4 (id=825): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x50, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xfffffbff}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5}, @NFULA_CFG_MODE={0xa, 0x2, {0xf2f}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x138}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) (async, rerun: 64) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0xa4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x10, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x4, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}]}]}, 0xa4}}, 0x0) (rerun: 64) 289.33927ms ago: executing program 2 (id=826): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)="198ad8c0b0c9fed6adbc55b5d0c4a6741466c8d3cd4e441ba7e89424463a3618b5866bf7887330482d3feb8510b01b16711ef631657a270cac4de29edc72e9050373a2f98d7065c9f7467bb813fab5b09f38c3b660f39d429c19a8fd7bb6e9153ced3270cf2498d8e506918ca36c3d784f2463ceba739adc6242", 0x7a}, 0x1, 0x0, 0x0, 0x40841}, 0x854) ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000006a0001032bbd7000fbdbdf25020000400000000008000a"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8014) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}], 0x1c) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}], 0x1c) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x78, 0x4) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x78, 0x4) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x12020) (async) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x12020) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="310300000000000000000500000008000300", @ANYRES32], 0x1c}}, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000001ac0), 0x6) ioctl$sock_bt_hci(r6, 0x800448d2, &(0x7f0000000000)) setsockopt(r5, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r5, &(0x7f0000000000), 0x10) (async) bind$can_raw(r5, &(0x7f0000000000), 0x10) close(r5) (async) close(r5) 0s ago: executing program 1 (id=827): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x38, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0xac}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x38, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0xac}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.175' (ED25519) to the list of known hosts. [ 79.414168][ T5818] cgroup: Unknown subsys name 'net' [ 79.605099][ T5818] cgroup: Unknown subsys name 'cpuset' [ 79.614058][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.176976][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.090411][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.094560][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.098880][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.105546][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.112301][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.119882][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.126705][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.148433][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.164843][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.172540][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.190301][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.201612][ T5141] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.210849][ T5141] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.223713][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.231473][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.242806][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.250915][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.259896][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.266835][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.267717][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.281807][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.282287][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.296235][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.309086][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.316982][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.758758][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 84.947055][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 85.053251][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 85.182832][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.190048][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.199188][ T5829] bridge_slave_0: entered allmulticast mode [ 85.206412][ T5829] bridge_slave_0: entered promiscuous mode [ 85.214822][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 85.254396][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.261934][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.269077][ T5829] bridge_slave_1: entered allmulticast mode [ 85.276602][ T5829] bridge_slave_1: entered promiscuous mode [ 85.332254][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 85.363693][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.370908][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.378047][ T5840] bridge_slave_0: entered allmulticast mode [ 85.385309][ T5840] bridge_slave_0: entered promiscuous mode [ 85.392960][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.400042][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.407329][ T5840] bridge_slave_1: entered allmulticast mode [ 85.414877][ T5840] bridge_slave_1: entered promiscuous mode [ 85.465239][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.499851][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.509015][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.516925][ T5837] bridge_slave_0: entered allmulticast mode [ 85.525243][ T5837] bridge_slave_0: entered promiscuous mode [ 85.547200][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.585789][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.593366][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.600947][ T5837] bridge_slave_1: entered allmulticast mode [ 85.608770][ T5837] bridge_slave_1: entered promiscuous mode [ 85.641889][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.654810][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.689368][ T5829] team0: Port device team_slave_0 added [ 85.698577][ T5829] team0: Port device team_slave_1 added [ 85.799079][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.812060][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.863022][ T5840] team0: Port device team_slave_0 added [ 85.869227][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.876593][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.883927][ T5828] bridge_slave_0: entered allmulticast mode [ 85.894265][ T5828] bridge_slave_0: entered promiscuous mode [ 85.914201][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.921577][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.928798][ T5836] bridge_slave_0: entered allmulticast mode [ 85.940795][ T5836] bridge_slave_0: entered promiscuous mode [ 85.948820][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.956405][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.982454][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.997131][ T5840] team0: Port device team_slave_1 added [ 86.003252][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.010997][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.018182][ T5828] bridge_slave_1: entered allmulticast mode [ 86.025905][ T5828] bridge_slave_1: entered promiscuous mode [ 86.058215][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.065685][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.073180][ T5836] bridge_slave_1: entered allmulticast mode [ 86.080743][ T5836] bridge_slave_1: entered promiscuous mode [ 86.088269][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.096534][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.122582][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.168716][ T5837] team0: Port device team_slave_0 added [ 86.174867][ T5835] Bluetooth: hci0: command tx timeout [ 86.231978][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.244787][ T5837] team0: Port device team_slave_1 added [ 86.250970][ T5835] Bluetooth: hci1: command tx timeout [ 86.262445][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.276657][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.286417][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.293407][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.319335][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.330433][ T5835] Bluetooth: hci4: command tx timeout [ 86.336034][ T5141] Bluetooth: hci3: command tx timeout [ 86.336636][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.342076][ T5141] Bluetooth: hci2: command tx timeout [ 86.348719][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.380558][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.393853][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.503285][ T5829] hsr_slave_0: entered promiscuous mode [ 86.509697][ T5829] hsr_slave_1: entered promiscuous mode [ 86.532662][ T5836] team0: Port device team_slave_0 added [ 86.555815][ T5828] team0: Port device team_slave_0 added [ 86.565254][ T5828] team0: Port device team_slave_1 added [ 86.571623][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.578584][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.604844][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.618434][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.625653][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.651851][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.665013][ T5836] team0: Port device team_slave_1 added [ 86.771081][ T5840] hsr_slave_0: entered promiscuous mode [ 86.777854][ T5840] hsr_slave_1: entered promiscuous mode [ 86.788713][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.796825][ T5840] Cannot create hsr debugfs directory [ 86.835650][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.846973][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.876946][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.894205][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.901205][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.931780][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.946478][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.955706][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.990155][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.072726][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.079801][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.106137][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.218365][ T5837] hsr_slave_0: entered promiscuous mode [ 87.226026][ T5837] hsr_slave_1: entered promiscuous mode [ 87.232388][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.239957][ T5837] Cannot create hsr debugfs directory [ 87.306773][ T5828] hsr_slave_0: entered promiscuous mode [ 87.313822][ T5828] hsr_slave_1: entered promiscuous mode [ 87.319896][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.327563][ T5828] Cannot create hsr debugfs directory [ 87.378780][ T5836] hsr_slave_0: entered promiscuous mode [ 87.385417][ T5836] hsr_slave_1: entered promiscuous mode [ 87.393100][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.400840][ T5836] Cannot create hsr debugfs directory [ 87.827586][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.864749][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.876538][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.909398][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.979960][ T5837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.997103][ T5837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.007749][ T5837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.018409][ T5837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.100459][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.122227][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.146482][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.157361][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.251901][ T5141] Bluetooth: hci0: command tx timeout [ 88.272314][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.285944][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.297079][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.309013][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.330445][ T5141] Bluetooth: hci1: command tx timeout [ 88.411182][ T5141] Bluetooth: hci2: command tx timeout [ 88.412097][ T5835] Bluetooth: hci4: command tx timeout [ 88.416636][ T5141] Bluetooth: hci3: command tx timeout [ 88.445125][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.474001][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.495318][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.504691][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.519042][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.551611][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.587593][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.598214][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.635154][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.642429][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.653758][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.660958][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.683306][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.690866][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.735664][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.752018][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.759151][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.905454][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.939406][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.009094][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.016335][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.075757][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.103666][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.117872][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.125111][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.187905][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.195471][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.233464][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.240673][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.258907][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.325710][ T2967] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.332937][ T2967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.375583][ T2967] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.382812][ T2967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.447366][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.515328][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.769928][ T5829] veth0_vlan: entered promiscuous mode [ 89.827995][ T5829] veth1_vlan: entered promiscuous mode [ 89.943920][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.022610][ T5829] veth0_macvtap: entered promiscuous mode [ 90.058797][ T5829] veth1_macvtap: entered promiscuous mode [ 90.147096][ T5840] veth0_vlan: entered promiscuous mode [ 90.157408][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.174994][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.212803][ T5829] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.223773][ T5829] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.233049][ T5829] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.242690][ T5829] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.257319][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.273414][ T5840] veth1_vlan: entered promiscuous mode [ 90.330658][ T5141] Bluetooth: hci0: command tx timeout [ 90.368517][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.411336][ T5141] Bluetooth: hci1: command tx timeout [ 90.475690][ T2995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.477944][ T5828] veth0_vlan: entered promiscuous mode [ 90.490589][ T5141] Bluetooth: hci3: command tx timeout [ 90.492714][ T5835] Bluetooth: hci4: command tx timeout [ 90.496005][ T5141] Bluetooth: hci2: command tx timeout [ 90.517896][ T2995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.540104][ T5837] veth0_vlan: entered promiscuous mode [ 90.559362][ T5840] veth0_macvtap: entered promiscuous mode [ 90.595057][ T5837] veth1_vlan: entered promiscuous mode [ 90.605808][ T5836] veth0_vlan: entered promiscuous mode [ 90.613170][ T5840] veth1_macvtap: entered promiscuous mode [ 90.633049][ T5828] veth1_vlan: entered promiscuous mode [ 90.645057][ T5836] veth1_vlan: entered promiscuous mode [ 90.665985][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.674736][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.697329][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.708478][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.721863][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.746019][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.756853][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.768814][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.814295][ T5836] veth0_macvtap: entered promiscuous mode [ 90.832306][ T5840] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.842701][ T5840] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.852862][ T5840] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.865580][ T5840] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.871756][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.884731][ T5837] veth0_macvtap: entered promiscuous mode [ 90.899788][ T5828] veth0_macvtap: entered promiscuous mode [ 90.922831][ T5836] veth1_macvtap: entered promiscuous mode [ 90.930017][ T5828] veth1_macvtap: entered promiscuous mode [ 90.942329][ T5837] veth1_macvtap: entered promiscuous mode [ 91.032612][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.039747][ T5923] Zero length message leads to an empty skb [ 91.048276][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.056248][ T5923] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4'. [ 91.061743][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.081740][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.094553][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.116468][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.127842][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.141154][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.152274][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.162165][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.172894][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.184492][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.202371][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.213753][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.224812][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.235401][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.245261][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.256009][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.265927][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.276407][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.288304][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.314347][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.325067][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.335251][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.346089][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.357304][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.365184][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.376983][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.386847][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.397328][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.407210][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.417718][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.430658][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.462362][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.477038][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.487137][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.504668][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.532559][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.543123][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.552991][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.564054][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.575864][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.595576][ T5828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.604704][ T5828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.613803][ T5828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.625201][ T5828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.644476][ T5836] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.650658][ T5927] x_tables: duplicate underflow at hook 2 [ 91.653347][ T5836] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.671206][ T5836] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.679925][ T5836] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.692225][ T5837] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.701314][ T5837] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.710023][ T5837] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.719124][ T5837] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.738329][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.752208][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.852231][ T1207] cfg80211: failed to load regulatory.db [ 91.862042][ T2995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.871980][ T2995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.053371][ T5933] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 92.098652][ T2967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.126711][ T2967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.270087][ T30] audit: type=1804 audit(1747027361.288:2): pid=5939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3" name="memory.events" dev="tmpfs" ino=18 res=1 errno=0 [ 92.330372][ T2995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.351668][ T30] audit: type=1800 audit(1747027361.318:3): pid=5939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3" name="memory.events" dev="tmpfs" ino=18 res=0 errno=0 [ 92.370165][ T2995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.397525][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.410601][ T5141] Bluetooth: hci0: command tx timeout [ 92.418563][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.475027][ T2995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.486487][ T2995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.491611][ T5141] Bluetooth: hci1: command tx timeout [ 92.569234][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.571409][ T5141] Bluetooth: hci2: command tx timeout [ 92.577551][ T5835] Bluetooth: hci4: command tx timeout [ 92.582767][ T5141] Bluetooth: hci3: command tx timeout [ 92.613280][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.767321][ T5950] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8'. [ 92.798995][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.834242][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.924931][ T5955] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1'. [ 93.061631][ T5955] pimreg: entered allmulticast mode [ 93.091543][ T5959] pimreg: left allmulticast mode [ 93.300700][ T5965] smc: net device bond0 applied user defined pnetid SYZ2 [ 93.429538][ T5970] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2'. [ 93.670544][ T5977] netlink: 'syz.0.11': attribute type 11 has an invalid length. [ 93.678247][ T5977] netlink: 224 bytes leftover after parsing attributes in process `syz.0.11'. [ 94.043199][ T5987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15'. [ 94.150724][ T5993] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.304475][ T5998] syz.2.18 uses obsolete (PF_INET,SOCK_PACKET) [ 94.327616][ T5998] netlink: 120 bytes leftover after parsing attributes in process `syz.2.18'. [ 94.506567][ T6000] geneve2: entered promiscuous mode [ 94.511029][ T6003] netlink: 'syz.0.20': attribute type 1 has an invalid length. [ 94.725410][ T6011] netdevsim netdevsim3: Direct firmware load for . [ 94.725410][ T6011] failed with error -2 [ 94.738564][ T6011] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 94.738564][ T6011] [ 95.098598][ T6022] netlink: 32 bytes leftover after parsing attributes in process `syz.1.25'. [ 95.157346][ T121] IPVS: starting estimator thread 0... [ 95.165719][ T6026] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 95.273309][ T6030] IPVS: using max 27 ests per chain, 64800 per kthread [ 95.392181][ T6036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29'. [ 95.554163][ T6043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.30'. [ 96.073871][ T6067] __nla_validate_parse: 2 callbacks suppressed [ 96.073893][ T6067] netlink: 20 bytes leftover after parsing attributes in process `syz.3.36'. [ 96.220654][ T6071] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 96.375083][ T6036] Bluetooth: MGMT ver 1.23 [ 96.398376][ T6084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.43'. [ 96.407330][ T6083] veth0: entered promiscuous mode [ 96.884103][ T6107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.46'. [ 96.903308][ T6106] netlink: 44 bytes leftover after parsing attributes in process `syz.4.47'. [ 96.935768][ T6108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.46'. [ 97.301521][ T6128] netlink: 28 bytes leftover after parsing attributes in process `syz.3.53'. [ 97.919614][ T6142] Bluetooth: MGMT ver 1.23 [ 98.065757][ T6148] netlink: 'syz.3.60': attribute type 1 has an invalid length. [ 98.122429][ T6158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.61'. [ 98.282011][ T6168] netlink: 16 bytes leftover after parsing attributes in process `syz.2.62'. [ 98.311273][ T6169] netlink: 16 bytes leftover after parsing attributes in process `syz.2.62'. [ 98.400568][ T6168] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.794669][ T6190] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.802885][ T6190] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.904130][ T6199] netlink: 'syz.3.72': attribute type 4 has an invalid length. [ 98.954429][ T6200] netlink: 'syz.3.72': attribute type 4 has an invalid length. [ 98.983948][ T6190] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.985682][ T6202] netlink: 20 bytes leftover after parsing attributes in process `syz.4.73'. [ 99.001645][ T6202] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 99.007495][ T6190] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.149869][ T6190] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.159322][ T6190] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.168748][ T6190] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.177853][ T6190] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.229797][ T6191] netlink: 'syz.1.70': attribute type 3 has an invalid length. [ 99.266896][ T6184] veth3: entered allmulticast mode [ 99.289330][ T6184] bridge0: port 3(veth3) entered blocking state [ 99.307291][ T6184] bridge0: port 3(veth3) entered disabled state [ 99.329087][ T6184] veth3: entered promiscuous mode [ 99.360940][ T6209] sch_tbf: burst 3552 is lower than device lo mtu (65550) ! [ 99.465474][ T6200] syz.3.72 (6200) used greatest stack depth: 20168 bytes left [ 99.545457][ T6218] warning: `syz.0.76' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 100.010614][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 100.016916][ T5141] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 101.108295][ T5941] udevd[5941]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 101.873035][ T6318] __nla_validate_parse: 9 callbacks suppressed [ 101.873054][ T6318] netlink: 16 bytes leftover after parsing attributes in process `syz.2.103'. [ 102.122289][ T6329] netlink: 40 bytes leftover after parsing attributes in process `syz.3.106'. [ 102.314574][ T6337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.109'. [ 102.385685][ T6340] tap0: tun_chr_ioctl cmd 1074025677 [ 102.433852][ T6340] tap0: linktype set to 778 [ 102.558978][ T6349] netlink: 12 bytes leftover after parsing attributes in process `syz.4.113'. [ 102.864889][ T6349] ip6tnl1: entered promiscuous mode [ 102.882389][ T6349] ip6tnl1: entered allmulticast mode [ 102.946435][ T6357] tipc: Enabling not permitted [ 102.972819][ T6357] tipc: Enabling of bearer rejected, failed to enable media [ 103.190778][ T6373] netlink: 416 bytes leftover after parsing attributes in process `syz.2.119'. [ 103.447847][ T6380] netlink: 12 bytes leftover after parsing attributes in process `syz.2.122'. [ 103.501212][ T6386] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.124'. [ 103.508471][ T30] audit: type=1804 audit(1747027372.508:4): pid=6378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.123" name="memory.events" dev="tmpfs" ino=161 res=1 errno=0 [ 103.557118][ T30] audit: type=1800 audit(1747027372.508:5): pid=6378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.123" name="memory.events" dev="tmpfs" ino=161 res=0 errno=0 [ 103.570067][ T6388] netlink: 12 bytes leftover after parsing attributes in process `syz.1.125'. [ 103.652154][ T6388] netlink: 20 bytes leftover after parsing attributes in process `syz.1.125'. [ 103.854336][ T6401] Illegal XDP return value 618511360 on prog (id 49) dev N/A, expect packet loss! [ 104.033486][ T6412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.130'. [ 104.969168][ T6426] openvswitch: netlink: Key type 30 is not supported [ 105.813341][ T121] IPVS: starting estimator thread 0... [ 105.824408][ T6439] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 105.934167][ T6447] IPVS: using max 31 ests per chain, 74400 per kthread [ 105.981194][ T6440] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.433940][ T6470] syzkaller1: entered promiscuous mode [ 106.448896][ T6470] syzkaller1: entered allmulticast mode [ 107.056344][ T6507] __nla_validate_parse: 5 callbacks suppressed [ 107.056362][ T6507] netlink: 64 bytes leftover after parsing attributes in process `syz.3.159'. [ 107.105163][ T6507] netlink: 64 bytes leftover after parsing attributes in process `syz.3.159'. [ 107.363621][ T6521] netlink: 'syz.3.162': attribute type 2 has an invalid length. [ 107.377782][ T6521] netlink: 'syz.3.162': attribute type 1 has an invalid length. [ 107.408559][ T6521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.162'. [ 107.485069][ T6524] netlink: 12 bytes leftover after parsing attributes in process `syz.1.164'. [ 107.983977][ T6540] !: renamed from dummy0 [ 108.043479][ T6549] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 108.094503][ T6544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.172'. [ 108.520362][ T6557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.173'. [ 108.717948][ T6568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.176'. [ 108.840076][ T6572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.177'. [ 108.987724][ T6576] IPVS: length: 101 != 8 [ 109.016990][ T6581] IPVS: length: 101 != 8 [ 109.911213][ T6616] netlink: 12 bytes leftover after parsing attributes in process `syz.3.190'. [ 110.068386][ T6619] netlink: 'syz.0.192': attribute type 2 has an invalid length. [ 110.098672][ T6619] netlink: 'syz.0.192': attribute type 4 has an invalid length. [ 110.124020][ T6619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.192'. [ 110.394579][ T6633] syz.0.196: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 110.457547][ T6633] CPU: 1 UID: 0 PID: 6633 Comm: syz.0.196 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 110.457578][ T6633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 110.457595][ T6633] Call Trace: [ 110.457607][ T6633] [ 110.457617][ T6633] dump_stack_lvl+0x189/0x250 [ 110.457666][ T6633] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.457698][ T6633] ? __pfx__printk+0x10/0x10 [ 110.457719][ T6633] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 110.457740][ T6633] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 110.457764][ T6633] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 110.457788][ T6633] warn_alloc+0x214/0x310 [ 110.457818][ T6633] ? __pfx___schedule+0x10/0x10 [ 110.457853][ T6633] ? __pfx_warn_alloc+0x10/0x10 [ 110.457881][ T6633] ? kasan_save_track+0x4f/0x80 [ 110.457904][ T6633] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 110.457928][ T6633] ? xskq_create+0x56/0x170 [ 110.457961][ T6633] ? __x64_sys_setsockopt+0x18b/0x220 [ 110.457995][ T6633] ? do_syscall_64+0xf6/0x210 [ 110.458013][ T6633] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.458046][ T6633] __vmalloc_node_range_noprof+0x125/0x12c0 [ 110.458110][ T6633] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 110.458143][ T6633] ? __kasan_kmalloc+0x93/0xb0 [ 110.458174][ T6633] vmalloc_user_noprof+0x74/0x80 [ 110.458203][ T6633] ? xskq_create+0xbf/0x170 [ 110.458232][ T6633] xskq_create+0xbf/0x170 [ 110.458266][ T6633] xsk_init_queue+0xb0/0x110 [ 110.458300][ T6633] xsk_setsockopt+0x43f/0x710 [ 110.458333][ T6633] ? __pfx_xsk_setsockopt+0x10/0x10 [ 110.458374][ T6633] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 110.458398][ T6633] ? __pfx_xsk_setsockopt+0x10/0x10 [ 110.458428][ T6633] do_sock_setsockopt+0x257/0x3e0 [ 110.458474][ T6633] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 110.458516][ T6633] ? __fget_files+0x2a/0x420 [ 110.458544][ T6633] ? __fget_files+0x3a0/0x420 [ 110.458567][ T6633] ? __fget_files+0x2a/0x420 [ 110.458599][ T6633] __x64_sys_setsockopt+0x18b/0x220 [ 110.458631][ T6633] do_syscall_64+0xf6/0x210 [ 110.458651][ T6633] ? clear_bhb_loop+0x45/0xa0 [ 110.458674][ T6633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.458691][ T6633] RIP: 0033:0x7f36c7d8e969 [ 110.458715][ T6633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.458730][ T6633] RSP: 002b:00007f36c5bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 110.458751][ T6633] RAX: ffffffffffffffda RBX: 00007f36c7fb5fa0 RCX: 00007f36c7d8e969 [ 110.458764][ T6633] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 110.458775][ T6633] RBP: 00007f36c7e10ab1 R08: 0000000000000004 R09: 0000000000000000 [ 110.458786][ T6633] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.458797][ T6633] R13: 0000000000000000 R14: 00007f36c7fb5fa0 R15: 00007ffe286826d8 [ 110.458824][ T6633] [ 110.458836][ T6633] Mem-Info: [ 110.818541][ T6643] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 110.843374][ T6643] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5) [ 110.871031][ T6633] active_anon:7174 inactive_anon:0 isolated_anon:0 [ 110.871031][ T6633] active_file:1493 inactive_file:39828 isolated_file:0 [ 110.871031][ T6633] unevictable:768 dirty:658 writeback:0 [ 110.871031][ T6633] slab_reclaimable:9759 slab_unreclaimable:106666 [ 110.871031][ T6633] mapped:33283 shmem:3181 pagetables:960 [ 110.871031][ T6633] sec_pagetables:0 bounce:0 [ 110.871031][ T6633] kernel_misc_reclaimable:0 [ 110.871031][ T6633] free:1339171 free_pcp:1087 free_cma:0 [ 110.938487][ T6639] pim6reg: entered allmulticast mode [ 111.013796][ T6633] Node 0 active_anon:31428kB inactive_anon:0kB active_file:5972kB inactive_file:159112kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:135920kB dirty:2628kB writeback:0kB shmem:13860kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11012kB pagetables:3788kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 111.143501][ T6642] pim6reg: left allmulticast mode [ 111.226500][ T6633] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 111.350202][ T6633] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 111.465069][ T6633] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 111.480267][ T6633] Node 0 DMA32 free:1422784kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:32720kB inactive_anon:0kB active_file:5972kB inactive_file:159020kB unevictable:1536kB writepending:1428kB present:3129332kB managed:2564056kB mlocked:0kB bounce:0kB free_pcp:1728kB local_pcp:280kB free_cma:0kB [ 111.586351][ T6633] lowmem_reserve[]: 0 0 0 0 0 [ 111.593386][ T6633] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 111.621929][ T6633] lowmem_reserve[]: 0 0 0 0 0 [ 111.627130][ T6633] Node 1 Normal free:3911848kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 111.662322][ T6633] lowmem_reserve[]: 0 0 0 0 0 [ 111.667471][ T6633] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 111.684648][ T6633] Node 0 DMA32: 669*4kB (UE) 912*8kB (UME) 459*16kB (UE) 1098*32kB (UE) 867*64kB (UME) 168*128kB (UM) 33*256kB (UE) 15*512kB (UME) 3*1024kB (UM) 7*2048kB (UME) 307*4096kB (M) = 1420452kB [ 111.708142][ T6633] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 111.725756][ T6633] Node 1 Normal: 212*4kB (UME) 67*8kB (UME) 44*16kB (UME) 222*32kB (UME) 99*64kB (UME) 30*128kB (UME) 11*256kB (UME) 11*512kB (UME) 3*1024kB (UME) 3*2048kB (UE) 946*4096kB (M) = 3911848kB [ 111.747092][ T6633] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 111.758058][ T6633] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 111.768146][ T6633] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 111.779150][ T6633] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 111.796816][ T6633] 45541 total pagecache pages [ 111.803909][ T6633] 0 pages in swap cache [ 111.823030][ T6633] Free swap = 124996kB [ 111.827616][ T6633] Total swap = 124996kB [ 111.840264][ T6633] 2097051 pages RAM [ 111.851600][ T6633] 0 pages HighMem/MovableOnly [ 111.856798][ T6633] 424379 pages reserved [ 111.869016][ T6633] 0 pages cma reserved [ 111.897126][ T6678] xt_limit: Overflow, try lower: 0/0 [ 112.015421][ T6640] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 112.166111][ T6685] __nla_validate_parse: 4 callbacks suppressed [ 112.166130][ T6685] netlink: 84 bytes leftover after parsing attributes in process `syz.4.209'. [ 112.327860][ T6690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.211'. [ 112.688976][ T6711] netlink: 40 bytes leftover after parsing attributes in process `syz.2.216'. [ 112.967293][ T6717] netlink: 'syz.4.218': attribute type 6 has an invalid length. [ 113.232783][ T6723] netlink: 12 bytes leftover after parsing attributes in process `syz.0.219'. [ 113.295233][ T6731] netlink: 16 bytes leftover after parsing attributes in process `syz.1.222'. [ 113.343122][ T6731] netlink: 124 bytes leftover after parsing attributes in process `syz.1.222'. [ 113.353059][ C0] hrtimer: interrupt took 720955 ns [ 114.387161][ T6774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.614902][ T6782] netlink: 12 bytes leftover after parsing attributes in process `syz.4.235'. [ 114.834638][ T6789] netlink: 84 bytes leftover after parsing attributes in process `syz.2.238'. [ 114.863469][ T6789] netlink: 28 bytes leftover after parsing attributes in process `syz.2.238'. [ 115.230549][ T6800] netlink: 24 bytes leftover after parsing attributes in process `syz.4.242'. [ 115.654151][ T6816] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.706503][ T6822] netlink: 'syz.4.250': attribute type 10 has an invalid length. [ 115.747858][ T6822] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 115.839361][ T6822] lo: entered promiscuous mode [ 115.845012][ T6822] lo: entered allmulticast mode [ 115.856722][ T6822] tunl0: entered promiscuous mode [ 115.862284][ T6822] tunl0: entered allmulticast mode [ 115.874586][ T6822] gre0: entered promiscuous mode [ 115.884229][ T6822] gre0: entered allmulticast mode [ 115.902681][ T6822] gretap0: entered promiscuous mode [ 115.908453][ T6822] gretap0: entered allmulticast mode [ 115.921545][ T6822] erspan0: entered promiscuous mode [ 115.927064][ T6822] erspan0: entered allmulticast mode [ 115.957187][ T6822] ip_vti0: entered promiscuous mode [ 115.963132][ T6822] ip_vti0: entered allmulticast mode [ 115.973085][ T6822] ip6_vti0: entered promiscuous mode [ 115.978872][ T6822] ip6_vti0: entered allmulticast mode [ 115.991111][ T6822] sit0: entered promiscuous mode [ 116.006362][ T6822] sit0: entered allmulticast mode [ 116.023552][ T6822] ip6tnl0: entered promiscuous mode [ 116.029346][ T6822] ip6tnl0: entered allmulticast mode [ 116.040726][ T6822] ip6gre0: entered promiscuous mode [ 116.046598][ T6822] ip6gre0: entered allmulticast mode [ 116.057920][ T6822] syz_tun: entered promiscuous mode [ 116.064545][ T6822] syz_tun: entered allmulticast mode [ 116.086352][ T6822] ip6gretap0: entered promiscuous mode [ 116.093026][ T6822] ip6gretap0: entered allmulticast mode [ 116.108779][ T6822] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.117202][ T6822] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.126719][ T6822] bridge0: entered promiscuous mode [ 116.132931][ T6822] bridge0: entered allmulticast mode [ 116.144600][ T6822] vcan0: entered promiscuous mode [ 116.150925][ T6822] vcan0: entered allmulticast mode [ 116.161783][ T6822] bond0: entered promiscuous mode [ 116.166967][ T6822] bond_slave_0: entered promiscuous mode [ 116.186711][ T6822] bond_slave_1: entered promiscuous mode [ 116.193880][ T6822] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 116.204927][ T6822] bond0: entered allmulticast mode [ 116.212632][ T6822] bond_slave_0: entered allmulticast mode [ 116.218537][ T6822] bond_slave_1: entered allmulticast mode [ 116.224693][ T6822] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 116.238173][ T6822] team0: entered promiscuous mode [ 116.243572][ T6822] team_slave_0: entered promiscuous mode [ 116.249568][ T6822] team_slave_1: entered promiscuous mode [ 116.256750][ T6822] team0: entered allmulticast mode [ 116.262098][ T6822] team_slave_0: entered allmulticast mode [ 116.268017][ T6822] team_slave_1: entered allmulticast mode [ 116.277945][ T6822] dummy0: entered promiscuous mode [ 116.287043][ T6822] dummy0: entered allmulticast mode [ 116.297171][ T6822] nlmon0: entered promiscuous mode [ 116.302803][ T6822] nlmon0: entered allmulticast mode [ 116.312197][ T6822] caif0: entered promiscuous mode [ 116.317275][ T6822] caif0: entered allmulticast mode [ 116.325078][ T6822] batadv0: entered promiscuous mode [ 116.331377][ T6822] batadv0: entered allmulticast mode [ 116.343041][ T6822] vxcan0: entered promiscuous mode [ 116.348405][ T6822] vxcan0: entered allmulticast mode [ 116.355461][ T6822] vxcan1: entered promiscuous mode [ 116.360953][ T6822] vxcan1: entered allmulticast mode [ 116.368044][ T6822] wg0: entered promiscuous mode [ 116.373493][ T6822] wg0: entered allmulticast mode [ 116.382881][ T6822] wg1: entered promiscuous mode [ 116.388028][ T6822] wg1: entered allmulticast mode [ 116.397497][ T6822] wg2: entered promiscuous mode [ 116.402768][ T6822] wg2: entered allmulticast mode [ 116.412002][ T6822] veth0_to_bridge: entered promiscuous mode [ 116.418921][ T6822] veth0_to_bridge: entered allmulticast mode [ 116.437085][ T6822] veth1_to_bridge: entered promiscuous mode [ 116.444567][ T6822] veth1_to_bridge: entered allmulticast mode [ 116.459310][ T6822] veth0_to_bond: entered promiscuous mode [ 116.465825][ T6822] veth0_to_bond: entered allmulticast mode [ 116.487664][ T6822] veth1_to_bond: entered promiscuous mode [ 116.494211][ T6822] veth1_to_bond: entered allmulticast mode [ 116.505981][ T6822] veth0_to_team: entered promiscuous mode [ 116.512627][ T6822] veth0_to_team: entered allmulticast mode [ 116.530751][ T6822] veth1_to_team: entered promiscuous mode [ 116.544438][ T6822] veth1_to_team: entered allmulticast mode [ 116.559002][ T6822] veth0_to_batadv: entered promiscuous mode [ 116.566264][ T6822] veth0_to_batadv: entered allmulticast mode [ 116.577568][ T6822] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.586059][ T6822] batadv_slave_0: entered promiscuous mode [ 116.592937][ T6822] batadv_slave_0: entered allmulticast mode [ 116.604099][ T6822] veth1_to_batadv: entered promiscuous mode [ 116.610508][ T6822] veth1_to_batadv: entered allmulticast mode [ 116.622399][ T6822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.630851][ T6822] batadv_slave_1: entered promiscuous mode [ 116.636975][ T6822] batadv_slave_1: entered allmulticast mode [ 116.647522][ T6822] xfrm0: entered promiscuous mode [ 116.654917][ T6822] xfrm0: entered allmulticast mode [ 116.665982][ T6822] veth0_to_hsr: entered promiscuous mode [ 116.671977][ T6822] veth0_to_hsr: entered allmulticast mode [ 116.682344][ T6822] hsr_slave_0: entered allmulticast mode [ 116.691896][ T6822] veth1_to_hsr: entered promiscuous mode [ 116.697856][ T6822] veth1_to_hsr: entered allmulticast mode [ 116.707781][ T6822] hsr_slave_1: entered allmulticast mode [ 116.718671][ T6822] hsr0: entered promiscuous mode [ 116.724804][ T6822] hsr0: entered allmulticast mode [ 116.734166][ T6822] veth1_virt_wifi: entered promiscuous mode [ 116.740500][ T6822] veth1_virt_wifi: entered allmulticast mode [ 116.751737][ T6822] veth0_virt_wifi: entered promiscuous mode [ 116.757691][ T6822] veth0_virt_wifi: entered allmulticast mode [ 116.767744][ T6822] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 116.775730][ T6822] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 116.784308][ T6822] veth1_vlan: entered allmulticast mode [ 116.796235][ T6822] veth0_vlan: entered allmulticast mode [ 116.819016][ T6822] vlan0: entered promiscuous mode [ 116.825062][ T6822] vlan0: entered allmulticast mode [ 116.830696][ T6822] vlan1: entered promiscuous mode [ 116.835947][ T6822] vlan1: entered allmulticast mode [ 116.843158][ T6822] macvlan0: entered promiscuous mode [ 116.848494][ T6822] macvlan0: entered allmulticast mode [ 116.859236][ T6822] macvlan1: entered promiscuous mode [ 116.865260][ T6822] macvlan1: entered allmulticast mode [ 116.875399][ T6822] ipvlan0: entered promiscuous mode [ 116.880789][ T6822] ipvlan0: entered allmulticast mode [ 116.886276][ T6822] ipvlan1: entered promiscuous mode [ 116.892042][ T6822] ipvlan1: entered allmulticast mode [ 116.898224][ T6822] veth1_macvtap: entered allmulticast mode [ 116.908198][ T6822] veth0_macvtap: entered allmulticast mode [ 116.919297][ T6822] macvtap0: entered promiscuous mode [ 116.926405][ T6822] macvtap0: entered allmulticast mode [ 116.938025][ T6822] macsec0: entered promiscuous mode [ 116.944067][ T6822] macsec0: entered allmulticast mode [ 116.954055][ T6822] geneve0: entered promiscuous mode [ 116.959322][ T6822] geneve0: entered allmulticast mode [ 116.969237][ T6822] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.978853][ T6822] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.988025][ T6822] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.997059][ T6822] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.006841][ T6822] geneve1: entered promiscuous mode [ 117.014415][ T6822] geneve1: entered allmulticast mode [ 117.024543][ T6822] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 117.033172][ T6822] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 117.043609][ T6822] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 117.051978][ T6822] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 117.064634][ T6822] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 117.072720][ T6822] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 117.083618][ T6822] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 117.092010][ T6822] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 117.117316][ T6822] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 117.125337][ T6822] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 117.145533][ T6822] bridge1: entered promiscuous mode [ 117.152871][ T6822] bridge1: entered allmulticast mode [ 117.186991][ T6830] __nla_validate_parse: 2 callbacks suppressed [ 117.187005][ T6830] netlink: 12 bytes leftover after parsing attributes in process `syz.1.251'. [ 117.623395][ T6847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.255'. [ 117.779727][ T6851] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.257'. [ 118.366857][ T6878] netlink: 12 bytes leftover after parsing attributes in process `syz.4.264'. [ 118.530306][ T6885] netlink: 40 bytes leftover after parsing attributes in process `syz.3.265'. [ 118.539333][ T6885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.265'. [ 118.751160][ T6892] netlink: 'syz.0.267': attribute type 12 has an invalid length. [ 118.787208][ T6891] netlink: 104 bytes leftover after parsing attributes in process `syz.3.268'. [ 118.891884][ T6902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.268'. [ 119.117795][ T6914] C: renamed from team_slave_0 (while UP) [ 119.163503][ T6914] netlink: 'syz.1.273': attribute type 1 has an invalid length. [ 119.210944][ T6914] netlink: 152 bytes leftover after parsing attributes in process `syz.1.273'. [ 119.305639][ T6914] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 119.369794][ T6925] netlink: 'syz.0.277': attribute type 27 has an invalid length. [ 119.397541][ T6926] netlink: 'syz.0.277': attribute type 27 has an invalid length. [ 119.458997][ T6931] netlink: 12 bytes leftover after parsing attributes in process `syz.4.279'. [ 119.518530][ T6935] FAULT_INJECTION: forcing a failure. [ 119.518530][ T6935] name failslab, interval 1, probability 0, space 0, times 1 [ 119.632458][ T6935] CPU: 1 UID: 0 PID: 6935 Comm: syz.2.278 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 119.632486][ T6935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 119.632501][ T6935] Call Trace: [ 119.632508][ T6935] [ 119.632516][ T6935] dump_stack_lvl+0x189/0x250 [ 119.632551][ T6935] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.632577][ T6935] ? __pfx__printk+0x10/0x10 [ 119.632601][ T6935] ? __pfx___might_resched+0x10/0x10 [ 119.632623][ T6935] should_fail_ex+0x414/0x560 [ 119.632647][ T6935] should_failslab+0xa8/0x100 [ 119.632672][ T6935] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 119.632696][ T6935] ? __alloc_skb+0x112/0x2d0 [ 119.632723][ T6935] __alloc_skb+0x112/0x2d0 [ 119.632749][ T6935] qrtr_port_remove+0x80/0x430 [ 119.632770][ T6935] ? qrtr_release+0x186/0x2b0 [ 119.632798][ T6935] qrtr_release+0x1f1/0x2b0 [ 119.632823][ T6935] sock_close+0xc0/0x240 [ 119.632841][ T6935] ? __pfx_sock_close+0x10/0x10 [ 119.632858][ T6935] __fput+0x449/0xa70 [ 119.632897][ T6935] fput_close_sync+0x119/0x200 [ 119.632925][ T6935] ? dnotify_flush+0x1db/0x5e0 [ 119.632949][ T6935] ? __pfx_fput_close_sync+0x10/0x10 [ 119.632984][ T6935] ? do_raw_spin_unlock+0x122/0x240 [ 119.633012][ T6935] __x64_sys_close+0x7f/0x110 [ 119.633031][ T6935] do_syscall_64+0xf6/0x210 [ 119.633050][ T6935] ? clear_bhb_loop+0x45/0xa0 [ 119.633073][ T6935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.633090][ T6935] RIP: 0033:0x7f2b1e98e969 [ 119.633106][ T6935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.633120][ T6935] RSP: 002b:00007f2b1f75e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 119.633139][ T6935] RAX: ffffffffffffffda RBX: 00007f2b1ebb5fa0 RCX: 00007f2b1e98e969 [ 119.633152][ T6935] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 119.633162][ T6935] RBP: 00007f2b1f75e090 R08: 0000000000000000 R09: 0000000000000000 [ 119.633173][ T6935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.633186][ T6935] R13: 0000000000000000 R14: 00007f2b1ebb5fa0 R15: 00007ffeb2e02e38 [ 119.633215][ T6935] [ 120.524822][ T6968] tap0: tun_chr_ioctl cmd 1074025677 [ 120.547705][ T6968] tap0: linktype set to 769 [ 120.677773][ T6965] netlink: 'syz.2.288': attribute type 4 has an invalid length. [ 122.998660][ T7058] netlink: 'syz.2.315': attribute type 7 has an invalid length. [ 123.026529][ T7057] __nla_validate_parse: 11 callbacks suppressed [ 123.026549][ T7057] netlink: 12 bytes leftover after parsing attributes in process `syz.3.316'. [ 123.147535][ T7060] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.157206][ T7060] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.166879][ T7060] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.176182][ T7060] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.265580][ T7066] netlink: 'syz.2.318': attribute type 1 has an invalid length. [ 123.302313][ T7066] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 123.309803][ T7070] netlink: 12 bytes leftover after parsing attributes in process `syz.3.319'. [ 123.595487][ T7077] netlink: 28 bytes leftover after parsing attributes in process `syz.3.321'. [ 123.790379][ T7083] netlink: 32 bytes leftover after parsing attributes in process `syz.2.320'. [ 124.131963][ T7095] netlink: 24 bytes leftover after parsing attributes in process `syz.4.325'. [ 124.574169][ T7112] netlink: 24 bytes leftover after parsing attributes in process `syz.0.331'. [ 124.768221][ T7114] ip6tnl2: entered promiscuous mode [ 124.794566][ T7114] ip6tnl2: entered allmulticast mode [ 124.801553][ T7121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.331'. [ 124.869144][ T7123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.335'. [ 124.924729][ T7123] FAULT_INJECTION: forcing a failure. [ 124.924729][ T7123] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 124.967903][ T7123] CPU: 0 UID: 0 PID: 7123 Comm: syz.2.335 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 124.967933][ T7123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 124.967946][ T7123] Call Trace: [ 124.967954][ T7123] [ 124.967962][ T7123] dump_stack_lvl+0x189/0x250 [ 124.967999][ T7123] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.968027][ T7123] ? __pfx__printk+0x10/0x10 [ 124.968060][ T7123] should_fail_ex+0x414/0x560 [ 124.968086][ T7123] _copy_to_user+0x31/0xb0 [ 124.968115][ T7123] simple_read_from_buffer+0xe1/0x170 [ 124.968145][ T7123] proc_fail_nth_read+0x1df/0x250 [ 124.968176][ T7123] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 124.968207][ T7123] ? rw_verify_area+0x258/0x650 [ 124.968228][ T7123] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 124.968257][ T7123] vfs_read+0x1fd/0x980 [ 124.968284][ T7123] ? __pfx___mutex_lock+0x10/0x10 [ 124.968305][ T7123] ? __pfx_vfs_read+0x10/0x10 [ 124.968329][ T7123] ? __fget_files+0x2a/0x420 [ 124.968359][ T7123] ? __fget_files+0x3a0/0x420 [ 124.968382][ T7123] ? __fget_files+0x2a/0x420 [ 124.968417][ T7123] ksys_read+0x145/0x250 [ 124.968437][ T7123] ? rcu_is_watching+0x15/0xb0 [ 124.968469][ T7123] ? __pfx_ksys_read+0x10/0x10 [ 124.968495][ T7123] ? do_syscall_64+0xba/0x210 [ 124.968519][ T7123] do_syscall_64+0xf6/0x210 [ 124.968540][ T7123] ? clear_bhb_loop+0x45/0xa0 [ 124.968564][ T7123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.968583][ T7123] RIP: 0033:0x7f2b1e98d37c [ 124.968600][ T7123] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 124.968615][ T7123] RSP: 002b:00007f2b1f75e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 124.968635][ T7123] RAX: ffffffffffffffda RBX: 00007f2b1ebb5fa0 RCX: 00007f2b1e98d37c [ 124.968649][ T7123] RDX: 000000000000000f RSI: 00007f2b1f75e0a0 RDI: 0000000000000008 [ 124.968661][ T7123] RBP: 00007f2b1f75e090 R08: 0000000000000000 R09: 0000000000000000 [ 124.968672][ T7123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.968683][ T7123] R13: 0000000000000000 R14: 00007f2b1ebb5fa0 R15: 00007ffeb2e02e38 [ 124.968714][ T7123] [ 125.303768][ T7132] netlink: 32 bytes leftover after parsing attributes in process `syz.1.337'. [ 125.327457][ T7134] netlink: 56 bytes leftover after parsing attributes in process `syz.3.340'. [ 126.160489][ T7163] netlink: 'syz.2.347': attribute type 309 has an invalid length. [ 126.216836][ T7163] netlink: 'syz.2.347': attribute type 9 has an invalid length. [ 126.237799][ T7163] hsr0: entered promiscuous mode [ 126.290635][ T7163] macvlan2: entered promiscuous mode [ 126.328778][ T7163] macvlan2: entered allmulticast mode [ 126.362051][ T7163] hsr0: entered allmulticast mode [ 126.396170][ T7163] hsr_slave_0: entered allmulticast mode [ 126.419872][ T7163] hsr_slave_1: entered allmulticast mode [ 127.459898][ T7209] batadv_slave_1: entered promiscuous mode [ 127.578999][ T7204] batadv_slave_1: left promiscuous mode [ 127.880021][ T7224] netlink: 'syz.2.363': attribute type 1 has an invalid length. [ 128.138295][ T7224] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.195032][ T7233] __nla_validate_parse: 4 callbacks suppressed [ 128.195051][ T7233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.363'. [ 128.346547][ T7225] bond1: (slave veth5): Enslaving as an active interface with a down link [ 128.455746][ T7228] bond1: (slave veth0_to_bond): making interface the new active one [ 128.497952][ T7228] veth0_to_bond: entered promiscuous mode [ 128.523281][ T7228] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 128.636433][ T7222] vlan2: entered allmulticast mode [ 128.649760][ T7222] bond1: entered allmulticast mode [ 128.657453][ T7222] veth0_to_bond: entered allmulticast mode [ 128.673964][ T7222] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 129.059936][ T7256] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 129.074169][ T7256] openvswitch: netlink: Message has 8 unknown bytes. [ 129.675313][ T7277] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.700821][ T7277] netlink: 24 bytes leftover after parsing attributes in process `syz.2.379'. [ 129.797876][ T7284] xt_hashlimit: invalid interval [ 129.842324][ T7286] xt_CT: You must specify a L4 protocol and not use inversions on it [ 129.895552][ T7289] openvswitch: netlink: Message has 24 unknown bytes. [ 129.930018][ T7289] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.167642][ T5891] IPVS: starting estimator thread 0... [ 130.224356][ T7305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.383'. [ 130.270682][ T7304] IPVS: using max 25 ests per chain, 60000 per kthread [ 130.355271][ T7307] netlink: 'syz.0.384': attribute type 11 has an invalid length. [ 130.396697][ T7307] netlink: 224 bytes leftover after parsing attributes in process `syz.0.384'. [ 130.529159][ T7315] netlink: 84 bytes leftover after parsing attributes in process `syz.4.386'. [ 130.594133][ T7316] netlink: 84 bytes leftover after parsing attributes in process `syz.4.386'. [ 131.684594][ T7366] Cannot find add_set index 4 as target [ 131.736783][ T7370] netlink: 40 bytes leftover after parsing attributes in process `syz.4.399'. [ 131.815818][ T7366] netlink: 40 bytes leftover after parsing attributes in process `syz.4.399'. [ 132.828115][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.838487][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.929047][ T7417] netlink: 'syz.2.412': attribute type 6 has an invalid length. [ 132.972846][ T7411] vxcan1: Master is either lo or non-ether device [ 133.344799][ T7428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.413'. [ 133.955290][ T7459] netlink: 12 bytes leftover after parsing attributes in process `syz.3.420'. [ 134.184402][ T7468] netlink: 44 bytes leftover after parsing attributes in process `syz.2.422'. [ 134.826685][ T7484] geneve0: entered allmulticast mode [ 135.079351][ T7490] xt_CT: No such helper "pptp" [ 135.499621][ T7504] netlink: 12 bytes leftover after parsing attributes in process `syz.3.434'. [ 135.559913][ T7504] netlink: 'syz.3.434': attribute type 10 has an invalid length. [ 135.571007][ T7504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.434'. [ 135.613402][ T7506] bridge2: entered promiscuous mode [ 135.630199][ T7506] bridge2: entered allmulticast mode [ 135.694531][ T7514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.437'. [ 135.734129][ T7514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.437'. [ 135.775519][ T7514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.437'. [ 135.818966][ T7514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.437'. [ 135.854383][ T7514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.437'. [ 136.556432][ T7542] sctp: [Deprecated]: syz.2.445 (pid 7542) Use of int in max_burst socket option. [ 136.556432][ T7542] Use struct sctp_assoc_value instead [ 136.954583][ T7563] netlink: 'syz.0.450': attribute type 4 has an invalid length. [ 137.789476][ T7597] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 137.808019][ T7597] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 137.990956][ T7605] syz.3.461 uses old SIOCAX25GETINFO [ 138.596997][ T7629] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 139.233621][ T7655] x_tables: duplicate underflow at hook 1 [ 139.275748][ T7655] netlink: 'syz.2.475': attribute type 4 has an invalid length. [ 139.565484][ T7663] netlink: 'syz.3.477': attribute type 4 has an invalid length. [ 139.671566][ T7661] __nla_validate_parse: 74 callbacks suppressed [ 139.671588][ T7661] netlink: 12 bytes leftover after parsing attributes in process `syz.3.477'. [ 139.719024][ T7661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.477'. [ 139.730213][ T2995] veth0_to_bond: left promiscuous mode [ 139.985874][ T7679] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 57939 - 0 [ 140.011055][ T7679] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 57939 - 0 [ 140.048618][ T7679] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 57939 - 0 [ 140.100320][ T7679] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 57939 - 0 [ 140.106553][ T7682] netlink: 12 bytes leftover after parsing attributes in process `syz.3.479'. [ 140.128713][ T7679] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 38245 - 0 [ 140.171596][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 140.180729][ T7679] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 38245 - 0 [ 140.224049][ T7679] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 38245 - 0 [ 140.286197][ T7679] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 38245 - 0 [ 140.299958][ T7686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.480'. [ 140.326766][ T7679] geneve2: entered promiscuous mode [ 140.362614][ T7679] geneve2: entered allmulticast mode [ 140.635922][ T7698] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 140.997079][ T7706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.483'. [ 141.013740][ T7706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.483'. [ 141.023694][ T7706] netlink: 'syz.4.483': attribute type 12 has an invalid length. [ 141.032196][ T7706] netlink: 'syz.4.483': attribute type 11 has an invalid length. [ 141.199169][ T7712] netlink: 'syz.4.487': attribute type 15 has an invalid length. [ 141.520767][ T7722] netlink: 96 bytes leftover after parsing attributes in process `syz.4.490'. [ 141.559212][ T7722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.490'. [ 141.570823][ T7723] netlink: 12 bytes leftover after parsing attributes in process `syz.3.491'. [ 141.571056][ T7724] netlink: 4 bytes leftover after parsing attributes in process `syz.4.490'. [ 142.798353][ T7763] smc: net device bond0 erased user defined pnetid SYZ2 [ 144.676994][ T7822] netlink: 'syz.3.515': attribute type 3 has an invalid length. [ 144.726291][ T7822] __nla_validate_parse: 2 callbacks suppressed [ 144.726309][ T7822] netlink: 132 bytes leftover after parsing attributes in process `syz.3.515'. [ 145.156036][ T7832] bridge_slave_0: left allmulticast mode [ 145.180289][ T7832] bridge_slave_0: left promiscuous mode [ 145.192160][ T7832] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.235288][ T7832] bridge_slave_1: left promiscuous mode [ 145.278043][ T7832] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.335093][ T7832] bond1: (slave veth0_to_bond): Releasing active interface [ 145.353416][ T7832] veth0_to_bond: left allmulticast mode [ 145.401421][ T7832] bond0: (slave bond_slave_0): Releasing backup interface [ 145.464216][ T7832] bond0: (slave bond_slave_1): Releasing backup interface [ 145.563040][ T7832] team0: Port device team_slave_0 removed [ 145.607573][ T7832] team0: Port device team_slave_1 removed [ 145.629074][ T7832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.645981][ T7832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.657480][ T7832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.685113][ T7832] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.749341][ T7832] bond1: (slave veth5): Releasing active interface [ 146.126456][ T7870] netlink: 1 bytes leftover after parsing attributes in process `syz.2.524'. [ 146.176169][ T7870] netlink: 1 bytes leftover after parsing attributes in process `syz.2.524'. [ 146.200780][ T7870] netlink: 56 bytes leftover after parsing attributes in process `syz.2.524'. [ 146.224744][ T7870] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.457320][ T7887] netlink: 4 bytes leftover after parsing attributes in process `syz.2.528'. [ 146.806210][ T7894] netlink: 'syz.1.530': attribute type 6 has an invalid length. [ 146.831797][ T7894] netlink: 32 bytes leftover after parsing attributes in process `syz.1.530'. [ 146.874158][ T7904] netlink: 'syz.2.532': attribute type 10 has an invalid length. [ 146.959665][ T7904] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.002839][ T7904] bond0: (slave team0): Enslaving as an active interface with an up link [ 147.057285][ T7911] netlink: 'syz.0.535': attribute type 23 has an invalid length. [ 147.259549][ T7909] lo: entered promiscuous mode [ 147.274151][ T7909] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 147.359032][ T7912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.383669][ T7912] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.395921][ T7912] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 147.438288][ T7927] netlink: 'syz.4.538': attribute type 29 has an invalid length. [ 147.655294][ T7938] xt_hashlimit: size too large, truncated to 1048576 [ 147.675402][ T7945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.544'. [ 147.680583][ T7938] xt_hashlimit: max too large, truncated to 1048576 [ 147.692962][ T7942] Cannot find add_set index 4 as target [ 147.718203][ T7938] netlink: 36 bytes leftover after parsing attributes in process `syz.2.542'. [ 147.749119][ T7950] netlink: 32 bytes leftover after parsing attributes in process `syz.1.545'. [ 147.762781][ T7950] netlink: 20 bytes leftover after parsing attributes in process `syz.1.545'. [ 147.843140][ T7954] x_tables: duplicate underflow at hook 3 [ 148.008907][ T7960] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 148.440287][ T7979] block nbd0: server does not support multiple connections per device. [ 148.454051][ T7979] block nbd0: shutting down sockets [ 148.695447][ T7994] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20003 [ 148.814403][ T7997] xt_TPROXY: Can be used only with -p tcp or -p udp [ 148.865317][ T7997] netlink: 'syz.3.562': attribute type 4 has an invalid length. [ 148.910589][ T7997] netlink: 'syz.3.562': attribute type 4 has an invalid length. [ 149.566567][ T8015] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 149.652495][ T8015] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 150.162884][ T8039] __nla_validate_parse: 12 callbacks suppressed [ 150.162904][ T8039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.572'. [ 150.501572][ T8046] netlink: 56 bytes leftover after parsing attributes in process `syz.4.574'. [ 150.542408][ T8046] netlink: 56 bytes leftover after parsing attributes in process `syz.4.574'. [ 150.839632][ T8073] netlink: 'syz.4.582': attribute type 11 has an invalid length. [ 150.994010][ T8080] netlink: 'syz.0.584': attribute type 4 has an invalid length. [ 151.078361][ T8084] sctp: [Deprecated]: syz.3.585 (pid 8084) Use of int in max_burst socket option. [ 151.078361][ T8084] Use struct sctp_assoc_value instead [ 151.104950][ T8084] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 151.332422][ T8088] netlink: 'syz.0.584': attribute type 4 has an invalid length. [ 151.451965][ T8095] netlink: 32 bytes leftover after parsing attributes in process `syz.1.588'. [ 151.780687][ T30] audit: type=1800 audit(1747027420.778:6): pid=8103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.589" name="blkio.bfq.time_recursive" dev="tmpfs" ino=636 res=0 errno=0 [ 152.242953][ T8117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.595'. [ 152.329068][ T8117] bond2: entered promiscuous mode [ 152.408691][ T8132] veth1_to_team: entered promiscuous mode [ 152.429022][ T8132] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 152.483199][ T8139] netlink: 36 bytes leftover after parsing attributes in process `syz.2.598'. [ 152.494318][ T8139] netlink: 20 bytes leftover after parsing attributes in process `syz.2.598'. [ 152.676376][ T8153] netlink: 'syz.2.606': attribute type 97 has an invalid length. [ 152.805548][ T8158] netlink: 12 bytes leftover after parsing attributes in process `syz.2.606'. [ 152.857832][ T8160] netlink: 'syz.0.608': attribute type 10 has an invalid length. [ 152.877304][ T8160] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 152.958602][ T8160] veth1_to_team: left promiscuous mode [ 153.092654][ T8168] bridge_slave_0: invalid flags given to default FDB implementation [ 153.174738][ T8175] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 153.212515][ T8176] netlink: 80 bytes leftover after parsing attributes in process `syz.4.612'. [ 153.342232][ T8180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.615'. [ 153.631266][ T8195] lo: left promiscuous mode [ 153.786607][ T8203] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 154.168004][ T8195] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.175851][ T8195] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.767489][ T8195] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.813086][ T8195] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.217613][ T8195] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.228453][ T8195] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.243419][ T8195] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.255095][ T8195] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.377501][ T30] audit: type=1800 audit(1747027424.378:7): pid=8207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.623" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 155.377804][ T8207] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 155.417212][ T8207] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 155.430013][ T8213] __nla_validate_parse: 4 callbacks suppressed [ 155.430030][ T8213] netlink: 12 bytes leftover after parsing attributes in process `syz.3.624'. [ 155.472728][ T8207] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 155.673117][ T8224] netlink: 'syz.0.628': attribute type 1 has an invalid length. [ 156.067209][ T8237] netlink: 12 bytes leftover after parsing attributes in process `syz.2.630'. [ 156.185869][ T8241] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 156.343357][ T8250] netlink: 36 bytes leftover after parsing attributes in process `syz.0.631'. [ 156.394040][ T8250] netlink: 16 bytes leftover after parsing attributes in process `syz.0.631'. [ 156.423365][ T8250] netlink: 36 bytes leftover after parsing attributes in process `syz.0.631'. [ 156.467526][ T8250] netlink: 36 bytes leftover after parsing attributes in process `syz.0.631'. [ 156.517003][ T8255] netlink: 176 bytes leftover after parsing attributes in process `syz.3.635'. [ 156.612264][ T8262] netlink: 16 bytes leftover after parsing attributes in process `syz.1.637'. [ 157.325338][ T8300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.647'. [ 157.452841][ T8300] netlink: 88 bytes leftover after parsing attributes in process `syz.0.647'. [ 158.410073][ T8338] ipt_rpfilter: unknown options [ 158.745009][ T8348] syz_tun: entered promiscuous mode [ 158.771590][ T8348] batadv_slave_1: entered promiscuous mode [ 159.647869][ T8377] syz.2.669 (8377) used greatest stack depth: 18168 bytes left [ 160.914780][ T8430] netlink: 'syz.3.682': attribute type 10 has an invalid length. [ 160.950460][ T8430] __nla_validate_parse: 4 callbacks suppressed [ 160.950479][ T8430] netlink: 40 bytes leftover after parsing attributes in process `syz.3.682'. [ 160.987470][ T8432] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 161.008674][ T8430] batman_adv: batadv0: Adding interface: virt_wifi0 [ 161.030236][ T8430] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.077747][ T8430] batman_adv: batadv0: Interface activated: virt_wifi0 [ 161.195606][ T8438] netlink: 16 bytes leftover after parsing attributes in process `syz.0.685'. [ 161.442678][ T8453] netlink: 8 bytes leftover after parsing attributes in process `syz.4.691'. [ 161.601167][ T8464] netlink: 68 bytes leftover after parsing attributes in process `syz.4.695'. [ 161.614409][ T8462] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 161.656751][ T8464] netlink: 'syz.4.695': attribute type 9 has an invalid length. [ 161.673247][ T8464] netlink: 204732 bytes leftover after parsing attributes in process `syz.4.695'. [ 161.877460][ T8479] batadv_slave_0: left allmulticast mode [ 162.052649][ T8488] netlink: 'syz.1.703': attribute type 1 has an invalid length. [ 162.226719][ T8488] 8021q: adding VLAN 0 to HW filter on device bond2 [ 162.265279][ T8496] C: renamed from team_slave_0 [ 162.294493][ T8496] netlink: 164 bytes leftover after parsing attributes in process `syz.0.705'. [ 162.318680][ T8496] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 163.299025][ T8567] netlink: 'syz.2.719': attribute type 5 has an invalid length. [ 163.842804][ T8595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.724'. [ 164.029867][ T8595] bridge_slave_1: left allmulticast mode [ 164.038015][ T8595] bridge_slave_1: left promiscuous mode [ 164.062074][ T8595] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.104415][ T8595] bridge_slave_0: left allmulticast mode [ 164.112083][ T8595] bridge_slave_0: left promiscuous mode [ 164.121392][ T8595] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.363122][ T8615] macvlan0: left promiscuous mode [ 164.372369][ T8615] macvlan0: left allmulticast mode [ 164.377779][ T8615] netlink: 'syz.4.728': attribute type 2 has an invalid length. [ 164.383352][ T8617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.729'. [ 164.425785][ T8617] openvswitch: netlink: IPv4 tun info is not correct [ 164.655291][ T8621] netlink: 76 bytes leftover after parsing attributes in process `syz.2.731'. [ 164.665524][ T8621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.731'. [ 164.977976][ T8641] netlink: 'syz.2.737': attribute type 13 has an invalid length. [ 165.038501][ T8641] macvtap0: entered promiscuous mode [ 165.074378][ T8641] macvtap0: refused to change device tx_queue_len [ 165.115193][ T8651] trusted_key: syz.3.739 sent an empty control message without MSG_MORE. [ 165.495316][ T8674] hsr0: entered promiscuous mode [ 165.500720][ T8674] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 165.836572][ T8695] netlink: 'syz.1.750': attribute type 1 has an invalid length. [ 165.956178][ T30] audit: type=1800 audit(1747027434.978:8): pid=8690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.744" name="memory.events" dev="tmpfs" ino=818 res=0 errno=0 [ 166.203662][ T8701] netlink: 'syz.3.752': attribute type 10 has an invalid length. [ 166.212072][ T8701] __nla_validate_parse: 14 callbacks suppressed [ 166.212092][ T8701] netlink: 40 bytes leftover after parsing attributes in process `syz.3.752'. [ 166.233479][ T8701] dummy0: entered promiscuous mode [ 166.240774][ T8704] netlink: 'syz.1.753': attribute type 11 has an invalid length. [ 166.257224][ T8701] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 166.534208][ T8716] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 166.868748][ T8737] netlink: 'syz.2.763': attribute type 62 has an invalid length. [ 166.889246][ T8737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.763'. [ 166.978227][ T8738] batman_adv: batadv0: Adding interface: macvlan2 [ 166.999289][ T8738] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.061601][ T8738] batman_adv: batadv0: Interface activated: macvlan2 [ 167.247597][ T8756] netlink: 20 bytes leftover after parsing attributes in process `syz.3.770'. [ 167.729473][ T8798] vlan2: entered promiscuous mode [ 167.747016][ T8798] bridge0: entered promiscuous mode [ 167.757045][ T8798] vlan2: entered allmulticast mode [ 167.773050][ T8798] bridge0: entered allmulticast mode [ 168.038050][ T8821] dvmrp1: entered allmulticast mode [ 168.179161][ T8827] veth0: entered allmulticast mode [ 168.254917][ T8830] netlink: 100 bytes leftover after parsing attributes in process `syz.2.792'. [ 168.282544][ T8830] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 168.364453][ T8839] netlink: 'syz.3.795': attribute type 2 has an invalid length. [ 168.429718][ T8839] k›*·]‘: entered promiscuous mode [ 168.464917][ T8839] IPVS: set_ctl: invalid protocol: 9 255.255.255.255:20001 [ 168.505564][ T8847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.796'. [ 168.529660][ T8852] netlink: 24 bytes leftover after parsing attributes in process `syz.0.798'. [ 168.556786][ T8847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.796'. [ 168.570795][ T8847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.796'. [ 168.608084][ T8852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.798'. [ 168.617806][ T8847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.796'. [ 168.642092][ T8857] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 168.927221][ T8866] netlink: 'syz.1.804': attribute type 10 has an invalid length. [ 168.951582][ T8866] batadv0: entered promiscuous mode [ 168.960843][ T8866] batadv0: entered allmulticast mode [ 168.963526][ T8872] block nbd3: not configured, cannot reconfigure [ 168.985993][ T8866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.004383][ T8866] bridge0: port 3(batadv0) entered blocking state [ 169.015851][ T8866] bridge0: port 3(batadv0) entered disabled state [ 169.062625][ T8873] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.090382][ T8873] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.108520][ T8873] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.127870][ T8873] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.151935][ T8873] geneve2: entered allmulticast mode [ 169.482781][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 169.492739][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 169.715262][ T8905] netlink: 'syz.3.812': attribute type 11 has an invalid length. [ 169.821316][ T8904] netlink: 'syz.3.812': attribute type 11 has an invalid length. [ 170.111169][ T8914] tipc: Started in network mode [ 170.116180][ T8914] tipc: Node identity 86a28973fa53, cluster identity 4711 [ 170.153372][ T8914] tipc: Enabled bearer , priority 0 [ 170.197642][ T8914] tipc: Resetting bearer [ 170.355572][ T8914] tipc: Disabling bearer [ 170.593494][ T8938] xt_CONNSECMARK: invalid mode: 254 [ 170.811998][ T8949] netlink: 'syz.4.825': attribute type 2 has an invalid length. [ 170.895868][ T8949] netlink: 'syz.4.825': attribute type 2 has an invalid length. [ 170.905726][ T8954] ieee802154 phy0 wpan0: encryption failed: -90 [ 170.912740][ T8949] netlink: 'syz.4.825': attribute type 2 has an invalid length. [ 170.924149][ T8949] netlink: 'syz.4.825': attribute type 2 has an invalid length. [ 170.991856][ T8953] syzkaller1: entered promiscuous mode [ 171.038847][ T8949] netlink: 'syz.4.825': attribute type 2 has an invalid length. [ 171.050726][ T8953] syzkaller1: entered allmulticast mode [ 171.271731][ T8949] validate_nla: 53 callbacks suppressed [ 171.271751][ T8949] netlink: 'syz.4.825': attribute type 2 has an invalid length. Connection to 10.128.0.175 closed by remote host. [ 171.360726][ T8949] netlink: 'syz.4.825': attribute type 2 has an invalid length. [ 172.138989][ T5840] ------------[ cut here ]------------ [ 172.145203][ T5840] refcount_t: underflow; use-after-free. [ 172.152049][ T5840] WARNING: CPU: 1 PID: 5840 at lib/refcount.c:28 refcount_warn_saturate+0x11a/0x1d0 [ 172.162063][ T5840] Modules linked in: [ 172.166242][ T5840] CPU: 1 UID: 0 PID: 5840 Comm: syz-executor Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 172.178978][ T5840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 172.189550][ T5840] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 172.195855][ T5840] Code: 20 89 c1 8b e8 57 a4 cb fc 90 0f 0b 90 90 eb d7 e8 fb 47 07 fd c6 05 58 a6 b0 0a 01 90 48 c7 c7 80 89 c1 8b e8 37 a4 cb fc 90 <0f> 0b 90 90 eb b7 e8 db 47 07 fd c6 05 35 a6 b0 0a 01 90 48 c7 c7 [ 172.216180][ T5840] RSP: 0000:ffffc9000413f7d8 EFLAGS: 00010246 [ 172.222653][ T5840] RAX: 7387bba3db554f00 RBX: 0000000000000003 RCX: ffff88802f341e00 [ 172.231154][ T5840] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 172.239158][ T5840] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 172.247571][ T5840] R10: dffffc0000000000 R11: fffffbfff1bba4b4 R12: ffff88802bc29000 [ 172.255731][ T5840] R13: ffff888051453860 R14: ffff888051453878 R15: dffffc0000000000 [ 172.263829][ T5840] FS: 0000000000000000(0000) GS:ffff8881261c0000(0000) knlGS:0000000000000000 [ 172.273222][ T5840] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 172.279841][ T5840] CR2: 00007f24847f84c0 CR3: 0000000032bce000 CR4: 00000000003526f0 [ 172.287973][ T5840] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 172.296071][ T5840] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 172.304462][ T5840] Call Trace: [ 172.307767][ T5840] [ 172.310815][ T5840] klist_dec_and_del+0x3c7/0x3d0 [ 172.315806][ T5840] klist_remove+0x1bd/0x340 [ 172.320443][ T5840] ? __pfx_klist_children_put+0x10/0x10 [ 172.326277][ T5840] ? __pfx_klist_remove+0x10/0x10 [ 172.332014][ T5840] ? __pfx_kobject_move+0x10/0x10 [ 172.337079][ T5840] ? get_device_parent+0x366/0x3a0 [ 172.342352][ T5840] device_move+0x193/0x700 [ 172.346808][ T5840] hci_conn_del_sysfs+0xb8/0x170 [ 172.351882][ T5840] hci_conn_del+0x8f5/0xca0 [ 172.356428][ T5840] hci_conn_hash_flush+0x191/0x230 [ 172.361982][ T5840] hci_dev_close_sync+0xaef/0x1330 [ 172.367239][ T5840] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 172.372914][ T5840] ? up_write+0x1c4/0x420 [ 172.377281][ T5840] hci_unregister_dev+0x206/0x500 [ 172.382472][ T5840] vhci_release+0x80/0xd0 [ 172.386831][ T5840] ? __pfx_vhci_release+0x10/0x10 [ 172.392275][ T5840] __fput+0x449/0xa70 [ 172.396308][ T5840] task_work_run+0x1d1/0x260 [ 172.401055][ T5840] ? __pfx_task_work_run+0x10/0x10 [ 172.406199][ T5840] ? kmem_cache_free+0x192/0x3f0 [ 172.411409][ T5840] do_exit+0x8d6/0x2550 [ 172.415611][ T5840] ? __x64_sys_wait4+0x184/0x1e0 [ 172.420924][ T5840] ? __pfx_do_exit+0x10/0x10 [ 172.425841][ T5840] ? _raw_spin_unlock_irq+0x23/0x50 [ 172.431433][ T5840] ? lockdep_hardirqs_on+0x9c/0x150 [ 172.436670][ T5840] do_group_exit+0x21c/0x2d0 [ 172.441394][ T5840] __x64_sys_exit_group+0x3f/0x40 [ 172.446451][ T5840] x64_sys_call+0x21ba/0x21c0 [ 172.451545][ T5840] do_syscall_64+0xf6/0x210 [ 172.456067][ T5840] ? clear_bhb_loop+0x45/0xa0 [ 172.460883][ T5840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.466811][ T5840] RIP: 0033:0x7f2b1e98e969 [ 172.471342][ T5840] Code: Unable to access opcode bytes at 0x7f2b1e98e93f. [ 172.478368][ T5840] RSP: 002b:00007ffeb2e03098 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 172.487082][ T5840] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2b1e98e969 [ 172.495151][ T5840] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 172.503208][ T5840] RBP: 00007f2b1ea12053 R08: 00007ffeb2e00e36 R09: 00000000000927c0 [ 172.511590][ T5840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000020 [ 172.519594][ T5840] R13: 00000000000927c0 R14: 0000000000029c45 R15: 00007ffeb2e03250 [ 172.527954][ T5840] [ 172.531309][ T5840] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 172.538623][ T5840] CPU: 1 UID: 0 PID: 5840 Comm: syz-executor Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 172.550793][ T5840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 172.560852][ T5840] Call Trace: [ 172.564136][ T5840] [ 172.567161][ T5840] dump_stack_lvl+0x99/0x250 [ 172.571772][ T5840] ? __asan_memcpy+0x40/0x70 [ 172.576368][ T5840] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.581584][ T5840] ? __pfx__printk+0x10/0x10 [ 172.586192][ T5840] panic+0x2db/0x790 [ 172.590115][ T5840] ? __pfx_panic+0x10/0x10 [ 172.594574][ T5840] __warn+0x31b/0x4b0 [ 172.598586][ T5840] ? refcount_warn_saturate+0x11a/0x1d0 [ 172.604148][ T5840] ? refcount_warn_saturate+0x11a/0x1d0 [ 172.609711][ T5840] report_bug+0x2be/0x4f0 [ 172.614146][ T5840] ? refcount_warn_saturate+0x11a/0x1d0 [ 172.619703][ T5840] ? refcount_warn_saturate+0x11a/0x1d0 [ 172.625259][ T5840] ? refcount_warn_saturate+0x11c/0x1d0 [ 172.630822][ T5840] handle_bug+0x84/0x160 [ 172.635073][ T5840] exc_invalid_op+0x1a/0x50 [ 172.639582][ T5840] asm_exc_invalid_op+0x1a/0x20 [ 172.644435][ T5840] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 172.650605][ T5840] Code: 20 89 c1 8b e8 57 a4 cb fc 90 0f 0b 90 90 eb d7 e8 fb 47 07 fd c6 05 58 a6 b0 0a 01 90 48 c7 c7 80 89 c1 8b e8 37 a4 cb fc 90 <0f> 0b 90 90 eb b7 e8 db 47 07 fd c6 05 35 a6 b0 0a 01 90 48 c7 c7 [ 172.670240][ T5840] RSP: 0000:ffffc9000413f7d8 EFLAGS: 00010246 [ 172.676316][ T5840] RAX: 7387bba3db554f00 RBX: 0000000000000003 RCX: ffff88802f341e00 [ 172.684293][ T5840] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 172.692268][ T5840] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 172.700247][ T5840] R10: dffffc0000000000 R11: fffffbfff1bba4b4 R12: ffff88802bc29000 [ 172.708314][ T5840] R13: ffff888051453860 R14: ffff888051453878 R15: dffffc0000000000 [ 172.716316][ T5840] ? refcount_warn_saturate+0x119/0x1d0 [ 172.722056][ T5840] klist_dec_and_del+0x3c7/0x3d0 [ 172.727006][ T5840] klist_remove+0x1bd/0x340 [ 172.731516][ T5840] ? __pfx_klist_children_put+0x10/0x10 [ 172.737078][ T5840] ? __pfx_klist_remove+0x10/0x10 [ 172.742115][ T5840] ? __pfx_kobject_move+0x10/0x10 [ 172.747145][ T5840] ? get_device_parent+0x366/0x3a0 [ 172.752267][ T5840] device_move+0x193/0x700 [ 172.756696][ T5840] hci_conn_del_sysfs+0xb8/0x170 [ 172.761649][ T5840] hci_conn_del+0x8f5/0xca0 [ 172.766166][ T5840] hci_conn_hash_flush+0x191/0x230 [ 172.771291][ T5840] hci_dev_close_sync+0xaef/0x1330 [ 172.776420][ T5840] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 172.781973][ T5840] ? up_write+0x1c4/0x420 [ 172.786316][ T5840] hci_unregister_dev+0x206/0x500 [ 172.791350][ T5840] vhci_release+0x80/0xd0 [ 172.795689][ T5840] ? __pfx_vhci_release+0x10/0x10 [ 172.800728][ T5840] __fput+0x449/0xa70 [ 172.804733][ T5840] task_work_run+0x1d1/0x260 [ 172.809334][ T5840] ? __pfx_task_work_run+0x10/0x10 [ 172.814479][ T5840] ? kmem_cache_free+0x192/0x3f0 [ 172.819431][ T5840] do_exit+0x8d6/0x2550 [ 172.823605][ T5840] ? __x64_sys_wait4+0x184/0x1e0 [ 172.828554][ T5840] ? __pfx_do_exit+0x10/0x10 [ 172.833161][ T5840] ? _raw_spin_unlock_irq+0x23/0x50 [ 172.838371][ T5840] ? lockdep_hardirqs_on+0x9c/0x150 [ 172.843598][ T5840] do_group_exit+0x21c/0x2d0 [ 172.848204][ T5840] __x64_sys_exit_group+0x3f/0x40 [ 172.853236][ T5840] x64_sys_call+0x21ba/0x21c0 [ 172.857917][ T5840] do_syscall_64+0xf6/0x210 [ 172.862438][ T5840] ? clear_bhb_loop+0x45/0xa0 [ 172.867122][ T5840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.873024][ T5840] RIP: 0033:0x7f2b1e98e969 [ 172.877443][ T5840] Code: Unable to access opcode bytes at 0x7f2b1e98e93f. [ 172.884465][ T5840] RSP: 002b:00007ffeb2e03098 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 172.892888][ T5840] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2b1e98e969 [ 172.900866][ T5840] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 172.908841][ T5840] RBP: 00007f2b1ea12053 R08: 00007ffeb2e00e36 R09: 00000000000927c0 [ 172.916817][ T5840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000020 [ 172.924800][ T5840] R13: 00000000000927c0 R14: 0000000000029c45 R15: 00007ffeb2e03250 [ 172.932818][ T5840] [ 172.935990][ T5840] Kernel Offset: disabled [ 172.940328][ T5840] Rebooting in 86400 seconds..