last executing test programs: 1m48.573881689s ago: executing program 1 (id=2562): bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000180)=0x5, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b, 0x14000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x40800) 1m48.447605638s ago: executing program 1 (id=2564): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x3, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaee}, 0x7, 0x7}, [{0x8, 0xfffff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0xfffffffe, 0x1, 0x9, 0x4, 0x7}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x4320, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x4}, {0x6, 0x40, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x9ef, 0x1, 0x3, 0x9, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xf7b, 0xa000, 0x8, 0x5, 0xa17}, {0x7, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x5, 0xfff, 0xe4af, 0x5, 0x8, 0x7}, {0x6, 0xd0, 0x230, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x83, 0x3, 0x4, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0x11, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x7fffffff}, {0x0, 0x8, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x527e, 0xc7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xbd52, 0x80, 0xef35}, {0x9, 0xb, 0x4, 0x8001, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x81, 0x9, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x9, 0x40}, {0x0, 0xd, 0x9, 0x8, 0xffffffff, 0x1}, {0xfffff125, 0xffc, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0xfc8, 0x3, 0x7fffffff, 0x20000002}, {0xec, 0x5, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x6, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x0, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0xffff, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0x44}, {0x4, 0x4, 0x8, 0xfff, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x7, 0x9, 0x22, 0x4}, {0x4, 0x9, 0x594, 0xf90, 0xc, 0x3}, {0x5, 0x657a0ecc, 0x10000, 0xa4, 0x0, 0x7}, {0x8, 0xde, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0xe, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x7, 0xd7d9, 0x9}, {0x42, 0x2, 0x6, 0x7, 0xae45, 0x5}, {0x6, 0x9c, 0x5, 0x80, 0x7fffffff, 0x5}, {0x7, 0x3, 0x3, 0x9, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0x1, 0x4, 0x800, 0x0, 0x8}, {0x8, 0x5, 0x3fd, 0x4, 0xffffffff, 0x7}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x9}, {0x3, 0x80000001, 0xb, 0x1, 0x80000000}, {0x0, 0xfffffff7, 0x84e5, 0x7f, 0x3a, 0x3fd}, {0x8000, 0x7, 0x2, 0xd8, 0xa}, {0x9, 0x1004, 0x8, 0x6, 0x1, 0x2}, {0x0, 0x9, 0x9, 0xd, 0x7fffffff, 0xfffffc00}, {0x1, 0xfffffffc, 0x6, 0x2, 0xc0, 0xfffff44c}, {0x4, 0x2, 0xfffffff3, 0x9, 0xbe, 0x4}, {0x6, 0x3, 0x0, 0x7fef, 0x5, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x200, 0x9, 0xbc, 0xf}, {0x1ff, 0xfffffffc, 0x1, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x5, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x4, 0x2, 0x8}, {0xb8000000, 0xfffffbf8, 0x7, 0x9, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x2, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0x10, 0x6, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x2, 0xffffff7f, 0x383, 0x8, 0x1}, {0x9, 0x4, 0x1, 0x80000000, 0xae, 0x9}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x47, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x1, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x6, 0x3, 0xfffffffd}, {0x3, 0x2, 0x1fd, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc, 0x2}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0x80000, 0x0, 0x1, 0x3, 0x3}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x5}, {0x2, 0x20000000, 0x3, 0xa, 0x81, 0x5}, {0x2, 0x7ff, 0x1, 0x40, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5}, {0x3, 0x9, 0x1, 0x3b1c, 0x2}, {0x4, 0x49354bbb, 0x2, 0x3, 0x7, 0x9}, {0x5, 0x2, 0x10, 0x9, 0x2, 0x400}, {0xfff, 0x54, 0x8, 0xc, 0x0, 0x6}, {0x401, 0x6, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x81, 0x3}, {0xc45c, 0xa, 0x0, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x5}, {0x7011, 0xfff, 0x9, 0x1, 0x9, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x1, 0x9, 0xc402, 0x1, 0x100, 0xc72}, {0xfffffff5, 0x5, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x6, 0x6, 0xd, 0x0, 0x20006e5f, 0x80}, {0x4, 0x3ff, 0xb, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x81, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x81, 0x6, 0x2f, 0x6}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x4, 0x8, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x1, 0x2, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e5, 0x9, 0x0, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0xd, 0x1}, {0x5, 0x1000, 0x9, 0x4, 0x24e, 0x1}, {0x7, 0x7, 0x7, 0x80000000, 0x1, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0x6, 0x7}, {0x1, 0x101, 0x7, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0xfffffffe, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x5, 0x2, 0x5, 0x0, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x4}], [{0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x4}, {0x5, 0x1}, {}, {0x2}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2}, {0x3}, {0x1c54f7a78269c13a}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$inet(0x2b, 0x801, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101a40, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) socket(0x10, 0x803, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f00000003c0)=""/152) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010003000000000000002600000018000180140002006c6f"], 0x2c}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SIOCSIFHWADDR(r5, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @random="ffffff8dffff"}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r8, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) 1m47.42221311s ago: executing program 1 (id=2577): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x6c}}, 0x800) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000005e40)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_pauseparam={0x33, 0x7, 0x200, 0x2}}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) 1m47.264723743s ago: executing program 3 (id=2579): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001800)={@ifindex, 0xffffffffffffffff, 0x12, 0x8}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}]}}, &(0x7f0000000f40)=""/4076, 0x26, 0xfec, 0x8}, 0x28) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0x1}, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{r1}, &(0x7f0000000600), &(0x7f0000000640)='%+9llu \x00'}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x14}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6}]}}}, @IFLA_IFALIASn={0x4}]}, 0x3c}}, 0x0) 1m46.912974553s ago: executing program 1 (id=2581): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010700100000000000006700000008003c01"], 0x1c}}, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="bc1000002b000b000000000000000000070000000800030004000100a01001"], 0x10bc}}, 0x8000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@getqdisc={0x30, 0x26, 0x100, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xb, 0xf}, {0x7, 0xb}, {0xfff1, 0xffff}}, [{0x4}, {0x4}, {0x4}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001300)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x20d2}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x6}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xe, 0xffe0}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = socket(0x10, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000030400ffffffffffffffe4000000", @ANYRES32=0x0, @ANYBLOB="f7e80100000000001c0012800b0001006d616373656300000c0002800500030002000000"], 0x3c}}, 0x0) sendmsg$can_bcm(r8, &(0x7f0000000300)={&(0x7f0000000200)={0x1d, r7}, 0x10, &(0x7f00000002c0)={&(0x7f0000000240)={0x3, 0x295, 0x6, {0x0, 0xea60}, {0x77359400}, {0x1, 0x1, 0x1}, 0x1, @canfd={{0x0, 0x1, 0x1, 0x1}, 0x6, 0x2, 0x0, 0x0, "47e7e2b39ae3e615776ed566e290c8a2d151f96b0101fb68e8a9f19d56ef71e55a90e5da079d2dc6d265143346310cbadaa7a868452546e38a1c48aa69a3d9c1"}}, 0x80}, 0x1, 0x0, 0x0, 0x44}, 0x20000000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x42004}, [@IFLA_MTU={0x8, 0x4, 0x500}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x884) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x1d, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000540)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x1f, 0x6, 0x678, 0x488, 0x2b8, 0xf0, 0x0, 0x488, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x6, &(0x7f0000000580), {[{{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@multicast2, 0x23, 0xa}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x86}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x7}}}, {{@ipv6={@loopback, @mcast1, [0xff, 0x0, 0x0, 0xff], [0xffffff00, 0x0, 0x0, 0xffffffff], 'ip6gretap0\x00', 'vlan1\x00', {}, {0xff}, 0x3a, 0x8, 0x3, 0x4b}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x14c, 'system_u:object_r:fonts_cache_t:s0\x00'}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x10}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d8) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r9, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r10, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 1m46.730172373s ago: executing program 3 (id=2584): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e210000050007f5e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 1m46.628096658s ago: executing program 3 (id=2586): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="12000000810000000800000002"], 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@polexpire={0xd8, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@private2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x6e6bb4}}, [@policy_type={0xa}, @mark={0xc}]}, 0xd8}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r1}, 0x3f) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r0, 0x0, &(0x7f00000000c0)=@udp6}, 0x20) 1m46.43019359s ago: executing program 3 (id=2587): r0 = socket(0x2, 0x80805, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e24, 0x4, @mcast1, 0x3}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000080)={r3}, &(0x7f0000000000)=0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1m46.358897766s ago: executing program 3 (id=2589): socket(0x25, 0x2, 0x100) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYRES16=r0], &(0x7f0000000100)='GPL\x00', 0x8000, 0x0, 0x0, 0x41000, 0x0, '\x00', r0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83a7404087d4bcb64f6ecad05459d12595d5b8b2657f2f29656a15e5a18e3168946dcb5faa59f7b404bad393ba06734d170b0513aeb0d051", 0xd5}, {&(0x7f00000004c0)="62c99e05d98775ed1beb5d67431ead896f7060f03e5b8671b283168d0df1573bef271f3a22b9cac06e27c7e87b34a19188d3e10e670bc070f0d3eb88d2f891d242747e0deec4a10609b12d4058b0fbff28bb01e6e49b533b03b11288ff4da1ab3226a2e3ba5fc47969142f1a1a0ca9ba4cece2ac9a5fcd89343de7e57dfcbb6216499555bd04f2fcb91c3c6c72868a3797ec63f8138ab74b5034878812df8b0445704cb33f81bffed93c3e645a206db134f626a59f4fac53fbf23489cf2f45d05d735e64033376671da045df97bcb989bda1d17ba14afbfd19e32a8222ebf934c17fed237b86aef2e830", 0xea}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac482436286448", 0x20000}], 0x3}}], 0x1, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x98, 0x13, 0x10, 0x70bd28, 0x25dfdbfb, {0xc}, [@typed={0x8, 0x38, 0x0, 0x0, @str='^(\xa2\x00'}, @typed={0x7a, 0x41, 0x0, 0x0, @binary="a72e723e31c7211e3d72cbf8357ddca1b76afd9d2698d7c006468c211b1ab927777b2a586d81a0ecd9802a91d6be5a3d846c0d56788ac0f8ac512d3d5c644c6e30026a8b626e95c322427a675be8d9499e30c46af8bc9770aa615840e6f082e527684c243ef1a668f8bc61e6175da351837ce8fbbc4d"}]}, 0x98}, 0x1, 0x0, 0x0, 0x20008010}, 0x4004000) r5 = socket$tipc(0x1e, 0x5, 0x0) recvmmsg(r5, 0x0, 0x0, 0x40000040, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) socket(0x10, 0x80002, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 1m46.2098836s ago: executing program 1 (id=2591): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x3, &(0x7f0000000580)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000100)=@raw=[@exit], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x24bba, r3}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x2000884c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000140016"], 0x4c}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2508007a0000000000030700000008000300", @ANYRES32=r2, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f016400000005005300010000000800050004"], 0x54}}, 0x0) 1m45.931015157s ago: executing program 3 (id=2592): bind$ax25(0xffffffffffffffff, &(0x7f0000000a40)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x4}, [@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r1}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001000)=@polexpire={0x47c, 0x1b, 0x2, 0x70bd26, 0x25dfdbfe, {{{@in=@multicast2, @in6=@remote, 0x4e21, 0x4, 0x4e22, 0x1, 0xa, 0x0, 0xa0, 0x3c}, {0x0, 0x93ce, 0x80000001, 0x8, 0x1, 0x5, 0x6, 0x1}, {0x4, 0x0, 0x9, 0x6}, 0x6, 0x0, 0x1, 0x0, 0x2, 0x3}, 0x7}, [@policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @in=@local, 0x4e24, 0x6, 0x4e21, 0x0, 0x2, 0x20, 0xa0, 0x67}, {0x0, 0x3, 0x6, 0x9, 0xffffffffffffffbb, 0x237b, 0xe}, {0x9, 0x180000000000, 0x4, 0x7}, 0x1000, 0x6e6bbc, 0x2, 0x1, 0x1}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e24, 0x4e23, @in=@dev={0xac, 0x14, 0x14, 0xe}}}, @offload={0xc, 0x1c, {0x0, 0x1}}, @tmpl={0x104, 0x5, [{{@in=@loopback, 0x4d6, 0x2b}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x28}, 0x0, 0xd005320b2efdde6e, 0x4d99b364b7cbda9a, 0x7, 0xf83, 0x2, 0x6713}, {{@in6=@empty, 0x4d3, 0x32}, 0x2, @in=@empty, 0x3507, 0x4, 0x2, 0x6, 0x5, 0xfffffffe, 0xd}, {{@in=@remote, 0x4d2, 0x33}, 0xa, @in6=@remote, 0x0, 0x1, 0x2, 0x6, 0x1ff, 0x400, 0xd9b}, {{@in=@multicast2, 0x4d6, 0x6c}, 0xa, @in=@local, 0x3500, 0x2, 0x2, 0x5, 0x401, 0x7, 0xd58}]}, @tfcpad={0x8, 0x16, 0x81}, @algo_crypt={0x6c, 0x2, {{'cbc(cast6)\x00'}, 0x120, "fdf29eb69c861b1c76a594d3c633f2a8bc71e957bac528ff61530d7681c708d5f5dee1ff"}}, @algo_auth={0x8d, 0x1, {{'sha256-avx2\x00'}, 0x228, "661e80971d258a9442388b745c3424f7ef3c428e5465adbbaf0c21eb2152b8615c9823f0ffafffe2689d06f87765639e91384c5af3e2a2b386c84a0849b7c70302fb632dea"}}, @replay_esn_val={0x28, 0x17, {0x3, 0x70bd2b, 0x70bd25, 0x70bd28, 0x70bd2b, 0x8, [0x5, 0x2, 0x5]}}, @algo_comp={0xb6, 0x3, {{'lzs\x00'}, 0x370, "e04b86ffbea431b231854726290e81ee5153573a5ad73a7dfb0017763f56eb98eb72efc36a9694ec5d4d765979adf22a1dc4ea8346bc95f339787df679ababd8c4e5d8e0d93eb290d3f128f912d3888184a589258a8d13ede4477925bcdfca7cea33ff048b1059aa994a74886256"}}]}, 0x47c}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@remote, 0x4e22, 0x0, 0x4e22, 0xfff, 0xa, 0x0, 0x0, 0x3a}, {0x3, 0xd4, 0x6, 0x8, 0x3, 0x3, 0x5, 0x8001}, {0x7f, 0x10000, 0x8000000000000000}, 0xc, 0x6e6bc0, 0x0, 0x0, 0x2, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x19}, 0x4d2, 0x3c}, 0x2, @in6=@mcast1, 0x34ff, 0x3, 0x3, 0x1, 0xa9, 0x8001, 0x1}}, 0xe8) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x8, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0xa0, 0x1}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@loopback, @in=@private}}, {{@in6=@mcast2}, 0x0, @in=@multicast1}}, &(0x7f0000000180)=0xe8) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0xffff93d3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r7, 0x58, &(0x7f0000000300)}, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, r8, 0x1, 0x0, 0x25dfdbfc, {{0x2}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xfc, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @default=0x9b4}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff080c3c0a}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a30000000000900010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c0001800a00010071756575650000001c000280060002400ffe009b06000140faff"], 0xcc}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) r12 = socket$nl_rdma(0x10, 0x3, 0x14) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x9c, 0x464, 0x200, 0x70bd2b, 0x25dfdbfe, "e00c60b0eda60303bde13d74dddde18f4891bf814cba793c20523011c3b0d09b8f5364ca2a3e437fb31cb874b90d7e5d64057768d1273e2898c77a5f89a710db509980b95e92b332700f00d412c9008cfcebfde4e22932ee834b2f4175e7ee8573584cda1cbf0d8ee33018e75d0408f48fb83ce4c2ed3e7fd6369089be4273d029d3d6760b6b1a91fe93", ["", "", ""]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x2c, 0x20, 0x301, 0x0, 0x25dfdbfb, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_FLOW={0x8}]}, 0x2c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x18, 0x1404, 0x1, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0xc054) 1m45.828679499s ago: executing program 1 (id=2593): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001c00010429bd7000fddbdf2507000000", @ANYRES32=r1, @ANYBLOB="0202ee090a00020001"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) setsockopt$ax25_int(r2, 0x101, 0x9, &(0x7f0000000000)=0x8000ac0f, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x7, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000a40)=@filter={'filter\x00', 0x2, 0x4, 0x340, 0xffffffff, 0xd0, 0xd0, 0x0, 0xfeffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x2f2, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0x806000) writev(r5, 0x0, 0x0) write$tun(r5, 0x0, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x5c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x6e}}}}, [@key_params=[@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7cad71a4ed"}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000010) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd700007dcdf253400000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990002000800010000001400550048a54bc8d20485556456f92ac252d7a6"], 0x3c}}, 0x400d0) 1m44.958086556s ago: executing program 0 (id=2598): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20) (async) r1 = openat$cgroup_int(r0, &(0x7f0000000300)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040), 0x1) 1m44.853957463s ago: executing program 0 (id=2601): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000200001000000000000fdffff80000000000000000000000008000d"], 0x38}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f0000000040)=0xd, 0x7) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r4, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b80)=""/3, 0x3}, 0x7}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x42, &(0x7f0000000100)=0x1ef9, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x2a}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x8000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r7, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r7, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000810}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r7, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) r9 = epoll_create1(0x0) epoll_wait(r9, &(0x7f0000000240)=[{}, {}, {}, {}], 0x4, 0xffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000440)={0x20, r8, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4888}, 0x20000804) r10 = openat$cgroup_ro(r0, &(0x7f0000000280)='blkio.bfq.sectors\x00', 0x0, 0x0) preadv(r10, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x74, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x30, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x80000001}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0xbc}}, 0x20050800) 1m43.929916346s ago: executing program 0 (id=2617): r0 = socket$unix(0x1, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = accept(r0, &(0x7f0000000000)=@hci, &(0x7f0000000080)=0x80) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm-aes-ce\x00'}, 0x58) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000140)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000180)=0x28) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) ioctl$FICLONE(r2, 0x40049409, r3) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x58, &(0x7f0000000240)}, 0x10) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000300)={0x0, 0x0, 0x7, 0x2}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='devices.list\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x800}, 0x8) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r5, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x3}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8040085}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000500)={0xe0000005}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000540), r6) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f0000000580)={0x5e, 0x17, '\x00', [@hao={0xc9, 0x10, @remote}, @calipso={0x7, 0x20, {0x0, 0x6, 0x7, 0x4, [0x1, 0xffffffffffff63f9, 0x80000000]}}, @calipso={0x7, 0x28, {0x3, 0x8, 0x2, 0x8, [0x1bd, 0x3ff, 0x8, 0x7]}}, @generic={0x9, 0x13, "578bfed0348558275a0a876236e0d1142ffece"}, @generic={0x95, 0xf, "c0a8edb09eb28c10751767dbcd6b83"}, @enc_lim, @pad1, @calipso={0x7, 0x28, {0x1, 0x8, 0x1, 0x1, [0x2, 0x9, 0x0, 0x2]}}, @ra={0x5, 0x2, 0x9c}]}, 0xc0) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000006c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000700)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r6, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, r7, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x34}, 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000840)={'erspan0\x00', 0xdf42}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000008c0), r6) sendmsg$NLBL_CIPSOV4_C_LIST(r10, &(0x7f0000000b40)={&(0x7f0000000880), 0xc, &(0x7f0000000b00)={&(0x7f0000000900)={0x1d8, r11, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x78, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbe7d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd7b1}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x29f8}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf998}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf744}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcdae}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x14622f00}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb6cd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdaf0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x47abf73d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x954}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x26f4c5f9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3c9}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf0, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x20}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x32}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x13}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x139b9e4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x61ba70b7}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x67}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d7d817a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6c4ed737}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x89}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x17858f11}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x64964170}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x27}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x30d567d}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dacebc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x24300c75}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e99c438}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x30b933e3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x30}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7a}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x20000000}, 0x44011) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000b80)=0x1) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000bc0)={0x7, 'wg2\x00', {0x9}, 0x4}) 1m43.736171012s ago: executing program 0 (id=2618): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x0) unshare(0x4040400) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) recvmmsg(r2, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002f00)=""/130, 0x82}], 0x1}, 0xfffffffd}], 0x1, 0x2120, 0x0) close(r3) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x1000, 0x6, 0x400000, 0x7ff, 0x4, 0xc0000000, 0x402, 0x9, 0x5, 0x5, 0x3, 0x4006, 0x80, 0xfffffffc, 0x0, 0x37e9, 0x80000004, 0x1, 0x6, 0xfffffff9, 0x3}}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) socketpair(0x16, 0x800, 0x1, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r7) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000140)={r8}, &(0x7f0000000180)=0x8) setsockopt$inet6_tcp_int(r4, 0x6, 0x5, &(0x7f0000000040)=0x5, 0x24) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a50003"}, 0x38) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1m42.837304889s ago: executing program 0 (id=2625): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x9, 0x0, 0x81, 0x693fffd, 0x80, 0x9}, &(0x7f0000000380)=0x9c) 1m42.768708142s ago: executing program 0 (id=2626): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 32) unshare(0x62040200) (rerun: 32) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb08004500002c00000000002f90"], 0x3e) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r2, 0x1, 0x1d, &(0x7f0000000040)=""/99, &(0x7f00000000c0)=0x63) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9, 0xefff, 0x2, 0x100, 0x2000040, 0x85000040}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYRES8=r6], 0x20}, 0x1, 0x0, 0x0, 0x4000814}, 0x8080) ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, 0x0) write(r4, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000380)=0x1, 0x4) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES32], 0x188}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r9, &(0x7f0000000500)={&(0x7f00000005c0)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f02) sendmsg$tipc(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1}], 0x1, 0x0, 0x0, 0x8010}, 0x0) (async) setsockopt$TIPC_SRC_DROPPABLE(r9, 0x10f, 0x8a, 0x0, 0x0) (async, rerun: 32) r11 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x80) 1m30.256378668s ago: executing program 32 (id=2593): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001c00010429bd7000fddbdf2507000000", @ANYRES32=r1, @ANYBLOB="0202ee090a00020001"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) setsockopt$ax25_int(r2, 0x101, 0x9, &(0x7f0000000000)=0x8000ac0f, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x7, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000a40)=@filter={'filter\x00', 0x2, 0x4, 0x340, 0xffffffff, 0xd0, 0xd0, 0x0, 0xfeffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x2f2, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0x806000) writev(r5, 0x0, 0x0) write$tun(r5, 0x0, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x5c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x6e}}}}, [@key_params=[@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7cad71a4ed"}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000010) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd700007dcdf253400000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990002000800010000001400550048a54bc8d20485556456f92ac252d7a6"], 0x3c}}, 0x400d0) 1m30.100947869s ago: executing program 33 (id=2592): bind$ax25(0xffffffffffffffff, &(0x7f0000000a40)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x4}, [@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r1}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001000)=@polexpire={0x47c, 0x1b, 0x2, 0x70bd26, 0x25dfdbfe, {{{@in=@multicast2, @in6=@remote, 0x4e21, 0x4, 0x4e22, 0x1, 0xa, 0x0, 0xa0, 0x3c}, {0x0, 0x93ce, 0x80000001, 0x8, 0x1, 0x5, 0x6, 0x1}, {0x4, 0x0, 0x9, 0x6}, 0x6, 0x0, 0x1, 0x0, 0x2, 0x3}, 0x7}, [@policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @in=@local, 0x4e24, 0x6, 0x4e21, 0x0, 0x2, 0x20, 0xa0, 0x67}, {0x0, 0x3, 0x6, 0x9, 0xffffffffffffffbb, 0x237b, 0xe}, {0x9, 0x180000000000, 0x4, 0x7}, 0x1000, 0x6e6bbc, 0x2, 0x1, 0x1}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e24, 0x4e23, @in=@dev={0xac, 0x14, 0x14, 0xe}}}, @offload={0xc, 0x1c, {0x0, 0x1}}, @tmpl={0x104, 0x5, [{{@in=@loopback, 0x4d6, 0x2b}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x28}, 0x0, 0xd005320b2efdde6e, 0x4d99b364b7cbda9a, 0x7, 0xf83, 0x2, 0x6713}, {{@in6=@empty, 0x4d3, 0x32}, 0x2, @in=@empty, 0x3507, 0x4, 0x2, 0x6, 0x5, 0xfffffffe, 0xd}, {{@in=@remote, 0x4d2, 0x33}, 0xa, @in6=@remote, 0x0, 0x1, 0x2, 0x6, 0x1ff, 0x400, 0xd9b}, {{@in=@multicast2, 0x4d6, 0x6c}, 0xa, @in=@local, 0x3500, 0x2, 0x2, 0x5, 0x401, 0x7, 0xd58}]}, @tfcpad={0x8, 0x16, 0x81}, @algo_crypt={0x6c, 0x2, {{'cbc(cast6)\x00'}, 0x120, "fdf29eb69c861b1c76a594d3c633f2a8bc71e957bac528ff61530d7681c708d5f5dee1ff"}}, @algo_auth={0x8d, 0x1, {{'sha256-avx2\x00'}, 0x228, "661e80971d258a9442388b745c3424f7ef3c428e5465adbbaf0c21eb2152b8615c9823f0ffafffe2689d06f87765639e91384c5af3e2a2b386c84a0849b7c70302fb632dea"}}, @replay_esn_val={0x28, 0x17, {0x3, 0x70bd2b, 0x70bd25, 0x70bd28, 0x70bd2b, 0x8, [0x5, 0x2, 0x5]}}, @algo_comp={0xb6, 0x3, {{'lzs\x00'}, 0x370, "e04b86ffbea431b231854726290e81ee5153573a5ad73a7dfb0017763f56eb98eb72efc36a9694ec5d4d765979adf22a1dc4ea8346bc95f339787df679ababd8c4e5d8e0d93eb290d3f128f912d3888184a589258a8d13ede4477925bcdfca7cea33ff048b1059aa994a74886256"}}]}, 0x47c}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@remote, 0x4e22, 0x0, 0x4e22, 0xfff, 0xa, 0x0, 0x0, 0x3a}, {0x3, 0xd4, 0x6, 0x8, 0x3, 0x3, 0x5, 0x8001}, {0x7f, 0x10000, 0x8000000000000000}, 0xc, 0x6e6bc0, 0x0, 0x0, 0x2, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x19}, 0x4d2, 0x3c}, 0x2, @in6=@mcast1, 0x34ff, 0x3, 0x3, 0x1, 0xa9, 0x8001, 0x1}}, 0xe8) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x8, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0xa0, 0x1}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@loopback, @in=@private}}, {{@in6=@mcast2}, 0x0, @in=@multicast1}}, &(0x7f0000000180)=0xe8) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0xffff93d3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r7, 0x58, &(0x7f0000000300)}, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, r8, 0x1, 0x0, 0x25dfdbfc, {{0x2}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xfc, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @default=0x9b4}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff080c3c0a}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a30000000000900010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c0001800a00010071756575650000001c000280060002400ffe009b06000140faff"], 0xcc}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) r12 = socket$nl_rdma(0x10, 0x3, 0x14) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x9c, 0x464, 0x200, 0x70bd2b, 0x25dfdbfe, "e00c60b0eda60303bde13d74dddde18f4891bf814cba793c20523011c3b0d09b8f5364ca2a3e437fb31cb874b90d7e5d64057768d1273e2898c77a5f89a710db509980b95e92b332700f00d412c9008cfcebfde4e22932ee834b2f4175e7ee8573584cda1cbf0d8ee33018e75d0408f48fb83ce4c2ed3e7fd6369089be4273d029d3d6760b6b1a91fe93", ["", "", ""]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x2c, 0x20, 0x301, 0x0, 0x25dfdbfb, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_FLOW={0x8}]}, 0x2c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x18, 0x1404, 0x1, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0xc054) 1m27.029051409s ago: executing program 34 (id=2626): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 32) unshare(0x62040200) (rerun: 32) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb08004500002c00000000002f90"], 0x3e) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r2, 0x1, 0x1d, &(0x7f0000000040)=""/99, &(0x7f00000000c0)=0x63) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9, 0xefff, 0x2, 0x100, 0x2000040, 0x85000040}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYRES8=r6], 0x20}, 0x1, 0x0, 0x0, 0x4000814}, 0x8080) ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, 0x0) write(r4, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000380)=0x1, 0x4) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES32], 0x188}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r9, &(0x7f0000000500)={&(0x7f00000005c0)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f02) sendmsg$tipc(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1}], 0x1, 0x0, 0x0, 0x8010}, 0x0) (async) setsockopt$TIPC_SRC_DROPPABLE(r9, 0x10f, 0x8a, 0x0, 0x0) (async, rerun: 32) r11 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x80) 1m19.153639819s ago: executing program 2 (id=2658): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$key(0xf, 0x3, 0x2) syz_80211_inject_frame(&(0x7f0000000380)=@device_b, &(0x7f0000000540)=@mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0xe}, @device_a, @device_a, @initial, {0xa, 0x3}, @value=@ver_80211n={0x0, 0x5, 0x3, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}}, 0xe, @random=0x4, 0x49, @void, @val={0x1, 0x7, [{0x1, 0x1}, {0x24, 0x1}, {0x2, 0x1}, {0xc}, {0xb}, {0x3, 0x1}, {0x12}]}, @val={0x3, 0x1, 0xe}, @void, @val={0x6, 0x2}, @void, @val={0x72, 0x6}, @void, [{0xdd, 0xc2, "d1354e5384cae87b392064fddb7d737fa5244ac139ebf5bb31840a6b87c7e9f34911dba4f51b828169322461d1f8b6c6967dddb2912e8c3e51bb2fc6b7fa1b17d76dc957878ed91944b66856761355f52caf3c6ca4f211ffe27f6b32f2f25c317ff0699db8fdae0ca5de0db353124e321a0cc360d83bf1197a2e6f32b22a4432fdbb5dbb749759dafee8be262114acecd6cff1b1a65b238abe6780eb6dd95108d1ae4f9be6e192367e04761840e465140cb2dc86ca0bf009bab63b831458c86438ef"}, {0xdd, 0x5b, "54403a6dd3dab1f08abec0e43b8b7521c20a8b805493a5632511780166b8ec8778f1d0799a59d4639c878b71802f6545f4eaf7f4cd6853e301d12330775bf6cfb837a1c45845eb3c918941410cbfece115b76abce4aa5ce3b3491d"}, {0xdd, 0xe7, "ea04c2ea5b5122967587323240e1a6a278da888cac737263ea7523ac41f10e97cf5f4cc2d67819f8c675b29d30faf07f8e9dbbc88f92242b296987fb34554e163139140935394dd91e212699cdbdd2f9f58fa3c464ecfcce3f158b13d7116574b15b34026d414632ba65041b75a41100b44888727054942cc461edbcdd582f56f23866650c1bbea960df2fbed0e2901ac703acd701835c9904848c8afae791171fdfa248ccabf2f2cac42b67b54afe2c10bedeb802ff7b6dfc7e50cae4ec04fb296d3bc5ff3a32c6ba6c3c0c0edf1578bb1259be9a5c6a85177115280d796dad1c61c8141f391d"}]}, 0x24a) sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f30216000000000000000000000002001b0008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fcff000020030005000000000002000000ac1414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x4}]}, 0x68}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_GATEWAY={0x14, 0x6, @in6_addr=@empty}, @NHA_OIF={0x8}]}, 0x34}}, 0x10) write$tun(r2, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)) mkdirat$cgroup(r4, &(0x7f0000000000)='syz0\x00', 0x1ff) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000200)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000044b4ca6504adcc28d1cd43ba04dbf0d0d51322539ad32eaed5a6406ddc14dea77af217739ca928583690ea02a35aaf37aca3781891448786067d7865d6f553363030c2de2b9156610c2d4618d94dbfeaa4d0370f8b68a4a39c5e374c8dade458d2fa54d3"], 0x68) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x24008010}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket(0x2b, 0x80801, 0x1) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffc, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x6ec}, 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={&(0x7f0000000140)=@ax25={{0x3, @rose}, [@null, @null, @rose, @rose, @remote, @rose, @null, @null]}, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/1, 0x1}], 0x1, &(0x7f0000000440)=""/232, 0xe8}, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) 1m15.586594807s ago: executing program 2 (id=2660): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x10}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWCHAIN={0xb8, 0x3, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_CHAIN_USERDATA={0x73, 0xc, "6db7aeccd205f1123b5f2982c6581672fb19a6ee53f5ac684002d35ef7f4a0468170cc4affc5fa1a0cecb978480e4aa5bd636a63a26d2f9f3d0514ccf6e533c0d88c761135f4d2b33f621e9bd74776d70dd22d38dafc99b8514986d988f727f3cb97d03e761411a511a3b9c709e7dd"}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_USERDATA={0x14, 0xc, "21fb51d6337a6f90c9fd3c760ec03192"}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}]}, @NFT_MSG_NEWSET={0x178, 0x9, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_USERDATA={0x1f, 0xd, 0x1, 0x0, "acd869a5c40c858762b7782936c888cd4ae67dce96a2eee3c45a12"}, @NFTA_SET_DESC={0x124, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x44, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}]}]}, @NFTA_SET_DESC_CONCAT={0x8c, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe30}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb08}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff91}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xad54}]}]}, @NFTA_SET_DESC_CONCAT={0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x90}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc45a}]}]}]}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x9}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x258}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "3d8b00", "d4cc4a4423daabeb8e7ba12fe6e1c742a683fa6e58757db76aae864d57fbaf37", "c3650f3f", "5e963dfa951f9b3d"}, 0x38) close(r2) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0xfffffffd) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) r7 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x80, 0x40, 0xa29fb27, 0x645, {{0x28, 0x4, 0x2, 0x0, 0xa0, 0x67, 0x0, 0x5, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4, 0x1}, @noop, @noop, @noop, @noop, @lsrr={0x83, 0x27, 0xb4, [@rand_addr=0x64010102, @multicast2, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @private=0xa010102, @local, @rand_addr=0x64010101]}, @rr={0x7, 0x1b, 0xc9, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1d}, @local, @rand_addr=0x64010101, @empty, @multicast2]}, @timestamp={0x44, 0x4, 0xed, 0x0, 0x7}, @timestamp_prespec={0x44, 0x3c, 0x34, 0x3, 0x1, [{@multicast2, 0x2}, {@empty, 0x4}, {@loopback, 0xb}, {@empty, 0x5}, {@empty, 0x3}, {@broadcast, 0x3}, {@rand_addr=0x64010100, 0x6}]}]}}}}}) setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000340)={0xffffffffffffffff, 0x1, 0x0, r8, 0x3ff}, 0xc) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80c0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000a00)={'gre0\x00', &(0x7f0000000900)={'erspan0\x00', 0x0, 0x700, 0x1, 0x3, 0x81, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x64, 0x0, 0x8, 0x2f, 0x0, @remote, @broadcast}}}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0) 1m14.024659042s ago: executing program 2 (id=2661): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x24, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_PORT_SELF={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4600}, 0x24044800) 1m12.857784825s ago: executing program 2 (id=2663): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1800000024000103000000000000000001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000008200)=[{{0x0, 0x0, &(0x7f0000000500)=[{0x0}, {&(0x7f00000009c0)=""/4110, 0x100e}], 0x2}, 0x6}, {{0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {&(0x7f0000001f40)=""/223, 0xdf}], 0x2}, 0x80000000}], 0x2, 0x12002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000a40)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000000000000000044000500fe800000000000000000000000000028000000003c00000000000000ffffffff0000"], 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100fe8000200000000000000000000000007f000001000000000000000000000000fe880000000000000000000000000101fe8000000000000000000000000000aa3c04"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='memory.events.local\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)=@sco, 0x80, &(0x7f00000000c0)}, 0x3) 1m11.234528628s ago: executing program 2 (id=2666): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x80, 0xb2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r5, 0x917, 0x0, 0xffffffe4, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x44}}, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x6, 0xfe}]}, 0x10) r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4102a}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x4000) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r11 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r11, 0x0) pipe(&(0x7f0000002740)) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r6, &(0x7f00000002c0)={0x10}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r7}, &(0x7f00000000c0), &(0x7f0000000100)=r8}, 0x20) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r7, 0x1000) syz_emit_ethernet(0x7a, &(0x7f0000000200)={@local, @broadcast, @val={@val={0x88a8, 0x6, 0x0, 0x4}, {0x8100, 0x3, 0x1, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1, {[@timestamp_prespec={0x44, 0x24, 0xce, 0x3, 0xf, [{@multicast2, 0xfff}, {@rand_addr=0x64010101, 0x2}, {@local, 0x7ff}, {@broadcast, 0x9}]}, @ra={0x94, 0x4}, @rr={0x7, 0x3, 0x5d}]}}, "040086dd0000ffff"}}}}}, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800e00010069703665727370616e000000080002800400120008000300", @ANYRES32], 0x44}}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x200, 0x70bd2e, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x1, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) 1m7.716585172s ago: executing program 2 (id=2669): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb08004500002c00000000002f9078ac1c0001e000000100006558001890780400000000000000be04000000"], 0x3e) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5452, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9, 0xefff, 0x2, 0x100, 0x2000040, 0x85000040}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r7, 0x0, 0x1, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x8001, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x100, 0x0, 0x6, 0x7fffffff}, 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, 0x0) write(r3, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000380)=0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES32], 0x188}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000880)={'ip6tnl0\x00', &(0x7f0000000800)={'syztnl0\x00', 0x0, 0x2d, 0xb7, 0x24, 0x7, 0x1, @mcast2, @local, 0x1, 0x10, 0x40, 0x6}}) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x18, 0xa, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2210}, [@generic={0xf8, 0x1, 0x3, 0xeb, 0x8000}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xb7}, @map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000140)='GPL\x00', 0xe, 0x5c, &(0x7f0000000780)=""/92, 0x40f00, 0x0, '\x00', r11, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000900)={0x0, 0xc, 0xb, 0x5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f0000000200)=[r9, r8], &(0x7f0000000a00)=[{0x3, 0x1, 0xf, 0x9}, {0x4, 0x2, 0x7, 0x9}, {0x3, 0x4, 0x3}, {0x3, 0x5, 0x4, 0x9}, {0x5, 0x2, 0x2, 0x4}, {0x3, 0x3, 0xf, 0x4}, {0x4, 0x5, 0x7, 0x7}, {0x3, 0x2, 0x6, 0x1}], 0x10, 0x434}, 0x94) recvmsg(r9, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0xdb, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0xc045) setsockopt$TIPC_SRC_DROPPABLE(r9, 0x10f, 0x8a, 0x0, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000037000b002dbd78000a", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x20000080) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x6535f20f43ca3a6d, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed30000000000000000000000000000000000000000000002"], 0xb8}}, 0x0) 52.367180562s ago: executing program 35 (id=2669): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb08004500002c00000000002f9078ac1c0001e000000100006558001890780400000000000000be04000000"], 0x3e) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5452, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9, 0xefff, 0x2, 0x100, 0x2000040, 0x85000040}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r7, 0x0, 0x1, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x8001, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x100, 0x0, 0x6, 0x7fffffff}, 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, 0x0) write(r3, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000380)=0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES32], 0x188}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000880)={'ip6tnl0\x00', &(0x7f0000000800)={'syztnl0\x00', 0x0, 0x2d, 0xb7, 0x24, 0x7, 0x1, @mcast2, @local, 0x1, 0x10, 0x40, 0x6}}) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x18, 0xa, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2210}, [@generic={0xf8, 0x1, 0x3, 0xeb, 0x8000}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xb7}, @map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000140)='GPL\x00', 0xe, 0x5c, &(0x7f0000000780)=""/92, 0x40f00, 0x0, '\x00', r11, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000900)={0x0, 0xc, 0xb, 0x5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f0000000200)=[r9, r8], &(0x7f0000000a00)=[{0x3, 0x1, 0xf, 0x9}, {0x4, 0x2, 0x7, 0x9}, {0x3, 0x4, 0x3}, {0x3, 0x5, 0x4, 0x9}, {0x5, 0x2, 0x2, 0x4}, {0x3, 0x3, 0xf, 0x4}, {0x4, 0x5, 0x7, 0x7}, {0x3, 0x2, 0x6, 0x1}], 0x10, 0x434}, 0x94) recvmsg(r9, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0xdb, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0xc045) setsockopt$TIPC_SRC_DROPPABLE(r9, 0x10f, 0x8a, 0x0, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000037000b002dbd78000a", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x20000080) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x6535f20f43ca3a6d, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed30000000000000000000000000000000000000000000002"], 0xb8}}, 0x0) 37.827106624s ago: executing program 4 (id=2685): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x4, 0x4) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x4, 0x0, "af4e76f20f4e8859ec41193dda72a8c65abe6e297351a1bf350bfe6ec2b4e3f09fdfb916061bcd17215662b15145404a1b4090e4462cdfd7b091093ac42b73cb369d68995edd2fc13d24096659e51ed5"}, 0xd8) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000eaff000000000000000000"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000140), &(0x7f0000000380)='%+9llu \x00'}, 0x19) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000070000000900030073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a310000000009054000000021000000100002800c00014000000000000000003c4a3bc6aa09000000000c0a01010000000000000000070000000900020073797a31000000000900010073798645ecf4ece90cc603800c0000800800034000000002140000001000010000000000000000000084000a0000000000000000000000000000000000000000000000000000000000000000005a3a502f720156ce99a893fc4ec090a3bb3e31e3000000"], 0xe0}}, 0x20008844) socket$inet6(0xa, 0x2, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) (async) r6 = bpf$ITER_CREATE(0xb, &(0x7f00000000c0), 0x8) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='\x10\x00\x00\x00\x00\x00\x00', 0x0}, 0x30) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r7], 0x8) (async) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) r12 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x38, r12, 0xc, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x1c, 0x17, {0x19, 0x10, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}, ["", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x2004c051}, 0x44000) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x8, 0xd}, {}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x8, 0x2, [@TCA_MATCHALL_ACT={0x4}]}}, @TCA_RATE={0x6, 0x5, {0x2}}]}, 0x44}, 0x1, 0x2000000, 0x0, 0x10}, 0x84) (async) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000200)={{0xa, 0x4e21, 0x80000000, @dev={0xfe, 0x80, '\x00', 0x40}, 0x2}, {0xa, 0x4e22, 0x5, @empty, 0x80000000}, 0x1, {[0x1, 0x76, 0x9, 0x1, 0x1fd3, 0x1, 0xb, 0x7f]}}, 0x5c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x7}, [@generic={0x69, 0x1, 0x1, 0x82}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c000000100001042bbd7000000000000000ffff", @ANYRES64=0x0], 0x6c}}, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) 36.67854991s ago: executing program 4 (id=2686): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008, 0x40000000}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) (async, rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000001}, 0x40000) (async) r2 = socket(0x2b, 0x1, 0x0) listen(r2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) (async) listen(r2, 0x80c) (async) vmsplice(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000640)="ec", 0x1}, {&(0x7f0000000080)="cbfa1a77722344cbfdd26cabfebf7c42619851a21c4cffec6c425ec19195ad7f17e2eb219532ab0a86dc8a039bd162ca5970908435a2eee785f541ab999d3d0e6a86a84a8298e218a7d8d2cf0f216a73d703ec93f7692ec1ffa6d8a7a8756c3bfa08ee6639ab34f83ecbb75c5b558f4e8aedb9fb6f7897d41efa03fb334e33efe49b8b421ba963eb6737da7bfab40ed787b23305abe4e5936640d582fdc583f063725b090728b0bcb3f5b9c9a16d920d7796ecd9b4314645377658191c3f79518b62d4dbbba59d673c7e9aee497804eb3458dfd03278ee504a808b3f0d1063b0ed10ee74f747005a7677b4", 0xeb}, {&(0x7f0000000200)="a4a68477c4444eab846b187e144706deae88a94da509ca25a4f5947c7088517b0d690969a7beae4fd3f7a64bb078c07f4bc9973223d59513b4e3bf7c48bf14281af03b439290c9ba4d85b7a132089da46d3d145e7f336d84cf8560059d99b741655edc59069081cf2de260434166b1a52937cae848b1ee13dbc1deb0b9141281d0381af23606", 0xfffffffffffffc4b}, {&(0x7f00000002c0)="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", 0xff}], 0x4, 0xf) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg(r3, &(0x7f0000000180), 0x4000190, 0x0) r4 = accept$alg(r0, 0x0, 0x0) read$alg(r4, &(0x7f0000000b80)=""/207, 0xcf) 36.249919767s ago: executing program 6 (id=2643): close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 35.498918231s ago: executing program 6 (id=2687): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000040)={'wpan0\x00'}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="67eb2bbd7000feffffff01000000cda1da583ba98aa0ceb6e2d62391f104e29a11f0535d31331833c0396acba8895159fb71702be01ddd75f5b1595473924bbdbafa49"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40840) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'veth0_to_batadv\x00'}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{0x6, 0x5d, 0x0, 0x4}, {0x8, 0x5, 0x5}, {0x7ff, 0x0, 0x2, 0xff}, {0xb9, 0xf, 0x1, 0x1}, {0x81, 0x0, 0xa, 0x4e25}]}, 0x10) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000001900080000000000000000ff0f0000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r8}, 0x18) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) listen(r6, 0x50) r10 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r10, &(0x7f0000000080)={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) listen(r10, 0x50) 35.498357266s ago: executing program 4 (id=2688): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1800000024000103000000000000000001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000008200)=[{{0x0, 0x0, &(0x7f0000000500)=[{0x0}, {&(0x7f00000009c0)=""/4110, 0x100e}], 0x2}, 0x6}, {{0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {&(0x7f0000001f40)=""/223, 0xdf}], 0x2}, 0x80000000}], 0x2, 0x12002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000a40)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000000000000000044000500fe800000000000000000000000000028000000003c00000000000000ffffffff0000"], 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100fe80ffffff87000000000000000000007f000001000000000000000000000000fe880000000000000000000000000101fe8000000000000000000000000000aa3c04"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='memory.events.local\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)=@sco, 0x80, &(0x7f00000000c0)}, 0x3) 33.737089642s ago: executing program 4 (id=2689): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe92}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x18) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x1000000000000000}, 0x18) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000009c0)={0x0, 0x2, 0xf000}, &(0x7f0000000a00)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r6, 0x84, 0x5, &(0x7f0000000b40)={r7, @in6={{0xa, 0x4e20, 0x4, @private0, 0xff}}}, 0x84) sendmmsg$inet6(r5, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000005c0)="8c7f924c55205cbf860621af9cffa024f339da7627d94ad102646641643a0295beead32ec1c0f6549e114ed345f8abb0c7096bf936fbe530e377ef9e15ddf1af09eb058230e647585f856a22a1b6c6c8273c8d617589b13a507333f8", 0x5c}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e22, 0x200006, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000500)='\x00', 0x1}], 0x1}}], 0x2, 0x4048010) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r9}, 0x18) sendmsg$nl_generic(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="14000000dbd625174bc93b"], 0x14}}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e0000000400000080deff000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{r10, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)='%+9llu \x00'}, 0x20) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000010000000000da900"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r12, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0xff8, &(0x7f0000002e00)=""/4088, 0x0, 0xa}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3c756697f260f2c0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x9, 0x55, &(0x7f0000000180)=""/85, 0x41100, 0x32, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r9, 0x0, &(0x7f0000000980)=[r10, r11, r10, r10, r10, 0xffffffffffffffff, r10, r10, 0x1]}, 0x94) close(r4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='5\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32=r2, @ANYBLOB="0df49af09208"], 0x20) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'macvlan0\x00', 0x0}) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e0044000280060002000100000008000100010000000800030003000000080007000500000008000100100000000600020001000000100005800a000400aaaaaaaaaa2e000008000500", @ANYRES32=r13, @ANYBLOB="08000a00fb"], 0x84}}, 0x20008040) r15 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r15, 0x8946, &(0x7f0000000140)={'veth0_to_batadv\x00', &(0x7f0000000100)=@ethtool_cmd={0x24, 0x2, 0x4, 0xc1, 0xc0, 0x9, 0x2, 0x8, 0x6c, 0xf7, 0x400, 0xfffffc00, 0x3, 0x0, 0x5, 0xfffffffa, [0xc35c, 0x2400]}}) 30.312377711s ago: executing program 4 (id=2690): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000380)={0x1f, 0xffff, 0x4}, 0x6) write(r0, &(0x7f0000000000)='\\\x00\x00\x00', 0x4) unshare(0x20000400) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r1, &(0x7f0000000080)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6, [@default, @default, @default, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000650201000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000140)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbcac}, 0x94) 29.461142978s ago: executing program 6 (id=2691): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4006000}, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, 0x0, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)="e9be0d1a6e6dca638c6d9507c301a471b5d77a85d6eef5d566c391a4d9748f019181dd0e554ddc2ef94373e89df2e70bb1609114d7065cadca8b17130f4e4a72d33218ca3bea85adfcf713cf51da554588fd4b1ddd85897400811bcb6480493c7437635caaf8eed3f32de7e5bac1da18c5278e7aabb583b8e5d7", 0x7a}, 0x1, 0x0, 0x0, 0x24040001}, 0x20044806) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r1, 0x0, 0x4000000) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$cgroup_procs(r4, 0x0, 0x2, 0x0) sendfile(r5, r5, 0x0, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x1b, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a0300000000f5ffffff00010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a30000000000b000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[], 0xe8}}, 0x8040) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001514030129bd700000000020080003000000000c080001"], 0x20}}, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000fc947ba400002d61946c9ffcaa80a14b9b42501293f88bb68af20b3e76d8b9ec1c0245bceb6a8db2cd356bca0e6d610c566f3b232ea01787c5af4fb06cfaa634c990ec1663a59f950963e6356849f9d3f2de3c37dc200bd6988c227d0ba0d4fc932614bfae4147c9870ce7ffacaa33ab0314eb751cc376c310519991a84df1"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r8 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) listen(r8, 0x8) accept$ax25(r8, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 29.218540749s ago: executing program 4 (id=2692): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) r3 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x21, &(0x7f0000000180)=0xbd0, 0x4) sendmmsg$inet6(r3, &(0x7f0000000440), 0x0, 0xc810) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000880)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRES32=r5], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000100001000000001e000000000000000a68000000060a0b040000000000000000020000003c00048014000180090001006c6173740000000004000280240001800a0001807265646972000000140002800800034000000028080001400000001d0900010073797a30000000000900020073797a32"], 0x90}}, 0x2000c004) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x40010, 0xffffffffffffffff, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f00004bd000/0x1000)=nil, 0x1000, 0x3, 0x810, 0xffffffffffffffff, 0x2000000) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) unshare(0x62040200) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$sock_int(r4, 0x1, 0xa, &(0x7f0000000480)=0x5, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x200002, 0x0) 25.876758796s ago: executing program 6 (id=2693): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f00000007c0)=""/250}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe7c, 0x30, 0x10, 0x0, 0x25dfdbfe, {}, [{0xe68, 0x1, [@m_pedit={0xe64, 0x1, 0x0, 0x0, {{0xa}, {0xe38, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x14, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x7}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {}, {}, {}, {0xfffffffc}, {0x6}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x40000, 0x8}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x4}], [{}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x1}, {}, {0x4}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe7c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x9, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000240)={[0xc6]}, 0x8}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100000000000000000000005b979e01d2038d84"], 0x48}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000000000000002abba47b2000000"], 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x20000080) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000020500010006000000050004000000fe000900020073797a3100000000050005000200000012"], 0x4c}}, 0x2) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="6a0e6435f82b96e120e95ef657c67f3804ab3fd20f854380e05a23b6758439b1bcc2af4612a9ffbedef954ca796197b2ad54eb4aa5e40f7e0679b02c55444cd757567b124e1c78808a05eac11e93d4de3287", 0x52) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0xf00) 15.273416533s ago: executing program 6 (id=2694): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x35, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000001140)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x4}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000440)="55732ec35e4c20", 0x7}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x5, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="a2", 0x1}], 0x1}}, {{&(0x7f00000005c0)={0xa, 0x4e21, 0xfff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x641}, 0x1c, &(0x7f0000000900)=[{&(0x7f00000007c0)="295ae0d5c85c778292caf5338ccf54eef9def7a05b92271d26cba6b834243562c907abca16f7c4df125ee6a3f78218842a68444cb9bca9f67f3560518ed8461918cad9f8e3332e2399b126bd9c52495405c6447c21cc3a39d18f27f2fc0d4f80e48483b0c067f22b828a978550287d652b4132e0ed54", 0x76}, {&(0x7f0000000840)="953b9edb259495765bdbd2b7c0ce7aa5ed26bb2073e7751509425f48e4f595c4f5ab6751a91376d6442c963981760d09d9a9ba6e6c0e9a5732bf0750d8c7d242416068c34f355b8ea1e6550987f08d0be3262746387cfc12e0cb0ee477f8699290ba3386542dc5468785b7ac05a791e498b369bf4d85c732f4bcf0a7695141b497a5649dfdde67968cf856932c44d4fff2bbedcf4d6414f44c7e4705bba5e1c1313ef3214808c5fb31ac", 0xaa}, {&(0x7f0000000680)="536fe828f6bfa555835a2c83f7df7d37c087067e0f18fa2852c20b", 0x1b}], 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x120}}, {{&(0x7f0000000a80)={0xa, 0x4e22, 0x0, @mcast1, 0x1}, 0x1c, &(0x7f0000001240)=[{&(0x7f0000000ac0)="72c76effd116c58c722929", 0xb}, {&(0x7f0000000b40)="b9fa5264759607520ee466fc5da4318b0bf5b330bf2420b4467d8afadd6c89fba641a088d10bfae4e7ccd1d0685365546abe5df9049505669d3f502b9a80b05432af62b84d1be025ed91e3721583a78c146bf596c776d51ad333a6e97faa2139c56e1679", 0x64}, {&(0x7f0000000bc0)="3d8ccab289c759c1dc8595b5728a067cacc2199197fb3ad2ceb22b4a14864869ae7d888ef740a722acd4f373b4150710881357ff4c1274ff81cdceffefa355b18cbe58c8a69f615b71ba4094ac2252ed32f27ece145a9389d8d66e60bd40a708c9ccc024e3162fe84f13b6a675ac69e0b317a898", 0x74}, {&(0x7f00000012c0)="ef76fbae2e606e8de5452762d87070fb473dfcd905852843385532687255521e33cbccae92f87e1b0478a8a9242692e93db52cecef0f551d005993c27c0c61faa10ff3a282ab8752516589456f46e8acb9ee0f9b8d1ed0d6c7a0c6a8fd10c38a9c6e1966f00a3058b059d5856746eb40d533af5f335a97ca53a0acf30ff38b10acf94f20126d3d6b653f83087df5ee04db397f6c6a59170cd2ae4467ff7920c7d5865c88f8efe5ca87953048fbde231a0ab829c0ae4ffde755e73309fa1a1db438623a266e30cc86e5c3f99d861c95052056cd6d758a2fb2bee18d226284", 0xde}, {&(0x7f0000000d40)="eb60e84e7a5c93dc363462870bdad9c5d09e6743e7befcf80dcd2c7a7bdd459eaf8094eac131dd058d1e271b31d29b15461a0f7ecc502bd1981fa7461a58f94172c8669c0f8f65a0f22f9b5bb435177ecae75c58007ed2dabbc3e205e5a1d2629c29e1910717416266b02a0797aba29bc09c6cbb0509ddeda85bd38e2456aaac8113cab5ecde2d9f9c8261c795ee619004798c", 0x93}], 0x5, &(0x7f0000000e80)=[@hoplimit={{0x14, 0x29, 0x34, 0x10000}}, @tclass={{0x14, 0x29, 0x43, 0x7}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfff}}, @hopopts={{0x128, 0x29, 0x36, {0x5e, 0x21, '\x00', [@generic={0x4, 0xff, "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"}, @jumbo={0xc2, 0x4, 0x3}, @pad1]}}}, @hopopts={{0x60, 0x29, 0x36, {0x2c, 0x8, '\x00', [@ra={0x5, 0x2, 0x5}, @hao={0xc9, 0x10, @empty}, @calipso={0x7, 0x20, {0x3, 0x6, 0x2, 0x2, [0x101, 0x4, 0x8]}}, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x5a}, @enc_lim={0x4, 0x1, 0x2}]}}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x2b, 0x6, 0x1, 0x3, 0x0, [@loopback, @mcast1, @mcast2]}}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x3, 0x2, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x2b}}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}], 0x288}}], 0x4, 0x24000045) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000040)=0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100), 0x4) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB="9eb21afe43d42517838e53b07e5074ff5a22e7dce8fc294bd4a23e315707fb09683a2beaf2d85ec161fef20e6db02a3d2d7942e00060b12591d942eeca63e5019b12b0a3a87728c7d6b911eeee72234cfb9dfb05559082fadc0222ae1182f765fe062ab17549c253d3307ac0a625134115c31a3cb95c669faa", @ANYRES16=r7, @ANYBLOB="01002cbd7000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="0c009900020000002500000008002600800900000800a1000d00000008009f00010000000500180108000000"], 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000827bd700000dbdf251500000208200300", @ANYRES32=r8, @ANYBLOB="0a001a00ffffffffffff00000a00060008021100000100000a00060008021100000100000a001a0008021100000100000a001a0008021100000000000a000600ffffffffffff00000a000600ffffffffffff00000a0006000802110000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x44001) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000090000000800000002"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r9, &(0x7f0000000040), 0x0}, 0x20) 13.993053764s ago: executing program 36 (id=2692): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) r3 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x21, &(0x7f0000000180)=0xbd0, 0x4) sendmmsg$inet6(r3, &(0x7f0000000440), 0x0, 0xc810) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000880)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRES32=r5], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000100001000000001e000000000000000a68000000060a0b040000000000000000020000003c00048014000180090001006c6173740000000004000280240001800a0001807265646972000000140002800800034000000028080001400000001d0900010073797a30000000000900020073797a32"], 0x90}}, 0x2000c004) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x40010, 0xffffffffffffffff, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f00004bd000/0x1000)=nil, 0x1000, 0x3, 0x810, 0xffffffffffffffff, 0x2000000) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) unshare(0x62040200) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$sock_int(r4, 0x1, 0xa, &(0x7f0000000480)=0x5, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x200002, 0x0) 0s ago: executing program 37 (id=2694): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x35, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000001140)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x4}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000440)="55732ec35e4c20", 0x7}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x5, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="a2", 0x1}], 0x1}}, {{&(0x7f00000005c0)={0xa, 0x4e21, 0xfff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x641}, 0x1c, &(0x7f0000000900)=[{&(0x7f00000007c0)="295ae0d5c85c778292caf5338ccf54eef9def7a05b92271d26cba6b834243562c907abca16f7c4df125ee6a3f78218842a68444cb9bca9f67f3560518ed8461918cad9f8e3332e2399b126bd9c52495405c6447c21cc3a39d18f27f2fc0d4f80e48483b0c067f22b828a978550287d652b4132e0ed54", 0x76}, {&(0x7f0000000840)="953b9edb259495765bdbd2b7c0ce7aa5ed26bb2073e7751509425f48e4f595c4f5ab6751a91376d6442c963981760d09d9a9ba6e6c0e9a5732bf0750d8c7d242416068c34f355b8ea1e6550987f08d0be3262746387cfc12e0cb0ee477f8699290ba3386542dc5468785b7ac05a791e498b369bf4d85c732f4bcf0a7695141b497a5649dfdde67968cf856932c44d4fff2bbedcf4d6414f44c7e4705bba5e1c1313ef3214808c5fb31ac", 0xaa}, {&(0x7f0000000680)="536fe828f6bfa555835a2c83f7df7d37c087067e0f18fa2852c20b", 0x1b}], 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x120}}, {{&(0x7f0000000a80)={0xa, 0x4e22, 0x0, @mcast1, 0x1}, 0x1c, &(0x7f0000001240)=[{&(0x7f0000000ac0)="72c76effd116c58c722929", 0xb}, {&(0x7f0000000b40)="b9fa5264759607520ee466fc5da4318b0bf5b330bf2420b4467d8afadd6c89fba641a088d10bfae4e7ccd1d0685365546abe5df9049505669d3f502b9a80b05432af62b84d1be025ed91e3721583a78c146bf596c776d51ad333a6e97faa2139c56e1679", 0x64}, {&(0x7f0000000bc0)="3d8ccab289c759c1dc8595b5728a067cacc2199197fb3ad2ceb22b4a14864869ae7d888ef740a722acd4f373b4150710881357ff4c1274ff81cdceffefa355b18cbe58c8a69f615b71ba4094ac2252ed32f27ece145a9389d8d66e60bd40a708c9ccc024e3162fe84f13b6a675ac69e0b317a898", 0x74}, {&(0x7f00000012c0)="ef76fbae2e606e8de5452762d87070fb473dfcd905852843385532687255521e33cbccae92f87e1b0478a8a9242692e93db52cecef0f551d005993c27c0c61faa10ff3a282ab8752516589456f46e8acb9ee0f9b8d1ed0d6c7a0c6a8fd10c38a9c6e1966f00a3058b059d5856746eb40d533af5f335a97ca53a0acf30ff38b10acf94f20126d3d6b653f83087df5ee04db397f6c6a59170cd2ae4467ff7920c7d5865c88f8efe5ca87953048fbde231a0ab829c0ae4ffde755e73309fa1a1db438623a266e30cc86e5c3f99d861c95052056cd6d758a2fb2bee18d226284", 0xde}, {&(0x7f0000000d40)="eb60e84e7a5c93dc363462870bdad9c5d09e6743e7befcf80dcd2c7a7bdd459eaf8094eac131dd058d1e271b31d29b15461a0f7ecc502bd1981fa7461a58f94172c8669c0f8f65a0f22f9b5bb435177ecae75c58007ed2dabbc3e205e5a1d2629c29e1910717416266b02a0797aba29bc09c6cbb0509ddeda85bd38e2456aaac8113cab5ecde2d9f9c8261c795ee619004798c", 0x93}], 0x5, &(0x7f0000000e80)=[@hoplimit={{0x14, 0x29, 0x34, 0x10000}}, @tclass={{0x14, 0x29, 0x43, 0x7}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfff}}, @hopopts={{0x128, 0x29, 0x36, {0x5e, 0x21, '\x00', [@generic={0x4, 0xff, "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"}, @jumbo={0xc2, 0x4, 0x3}, @pad1]}}}, @hopopts={{0x60, 0x29, 0x36, {0x2c, 0x8, '\x00', [@ra={0x5, 0x2, 0x5}, @hao={0xc9, 0x10, @empty}, @calipso={0x7, 0x20, {0x3, 0x6, 0x2, 0x2, [0x101, 0x4, 0x8]}}, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x5a}, @enc_lim={0x4, 0x1, 0x2}]}}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x2b, 0x6, 0x1, 0x3, 0x0, [@loopback, @mcast1, @mcast2]}}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x3, 0x2, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x2b}}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}], 0x288}}], 0x4, 0x24000045) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000040)=0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100), 0x4) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB="9eb21afe43d42517838e53b07e5074ff5a22e7dce8fc294bd4a23e315707fb09683a2beaf2d85ec161fef20e6db02a3d2d7942e00060b12591d942eeca63e5019b12b0a3a87728c7d6b911eeee72234cfb9dfb05559082fadc0222ae1182f765fe062ab17549c253d3307ac0a625134115c31a3cb95c669faa", @ANYRES16=r7, @ANYBLOB="01002cbd7000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="0c009900020000002500000008002600800900000800a1000d00000008009f00010000000500180108000000"], 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000827bd700000dbdf251500000208200300", @ANYRES32=r8, @ANYBLOB="0a001a00ffffffffffff00000a00060008021100000100000a00060008021100000100000a001a0008021100000100000a001a0008021100000000000a000600ffffffffffff00000a000600ffffffffffff00000a0006000802110000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x44001) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000090000000800000002"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r9, &(0x7f0000000040), 0x0}, 0x20) kernel console output (not intermixed with test programs): 660] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2062'. [ 313.896310][T12669] bridge0: port 1(erspan0) entered blocking state [ 313.924589][T12669] bridge0: port 1(erspan0) entered disabled state [ 313.937981][T12676] netlink: 'syz.4.2069': attribute type 7 has an invalid length. [ 313.941077][T12669] erspan0: entered allmulticast mode [ 313.951752][T12677] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2066'. [ 313.964200][T12676] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2069'. [ 313.972891][T12669] erspan0: entered promiscuous mode [ 313.982415][T12677] --map-set only usable from mangle table [ 314.001517][T12677] netlink: 'syz.3.2066': attribute type 9 has an invalid length. [ 314.023582][T12678] erspan0: left allmulticast mode [ 314.029063][T12678] erspan0: left promiscuous mode [ 314.044287][T12678] bridge0: port 1(erspan0) entered disabled state [ 314.096309][T12677] macvlan9: entered promiscuous mode [ 314.101901][T12677] hsr0: entered promiscuous mode [ 314.107158][T12677] macvlan9: entered allmulticast mode [ 314.112689][T12677] hsr0: entered allmulticast mode [ 314.118366][T12677] hsr_slave_0: entered allmulticast mode [ 314.124540][T12677] hsr_slave_1: entered allmulticast mode [ 314.198964][T12670] lo speed is unknown, defaulting to 1000 [ 314.234490][T12670] wg1 speed is unknown, defaulting to 1000 [ 314.401296][T12688] Bluetooth: MGMT ver 1.23 [ 314.436546][T12691] Set syz1 is full, maxelem 65536 reached [ 314.749016][T12698] lo speed is unknown, defaulting to 1000 [ 315.155917][T12698] wg1 speed is unknown, defaulting to 1000 [ 315.885367][T12745] Set syz1 is full, maxelem 65536 reached [ 315.904423][T12745] __nla_validate_parse: 3 callbacks suppressed [ 315.904441][T12745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2089'. [ 315.921401][T12745] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2089'. [ 316.002884][T12745] vlan0: entered allmulticast mode [ 316.055566][T12745] veth1: entered allmulticast mode [ 316.150605][T12749] tipc: Enabled bearer , priority 0 [ 316.168766][T12749] syzkaller0: entered promiscuous mode [ 316.188953][T12749] syzkaller0: entered allmulticast mode [ 316.256802][T12753] bridge_slave_0: default FDB implementation only supports local addresses [ 316.266911][T12753] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2091'. [ 316.405973][T12749] tipc: Resetting bearer [ 316.425712][T12748] tipc: Resetting bearer [ 316.487571][T12748] tipc: Disabling bearer [ 316.668284][T12767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2095'. [ 317.887071][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.992802][T12808] syz.4.2106 uses old SIOCAX25GETINFO [ 318.141337][T12812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2108'. [ 318.327730][T12816] FAULT_INJECTION: forcing a failure. [ 318.327730][T12816] name failslab, interval 1, probability 0, space 0, times 0 [ 318.368420][T12816] CPU: 0 UID: 0 PID: 12816 Comm: syz.2.2110 Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 318.368454][T12816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 318.368474][T12816] Call Trace: [ 318.368483][T12816] [ 318.368492][T12816] dump_stack_lvl+0x189/0x250 [ 318.368525][T12816] ? __pfx____ratelimit+0x10/0x10 [ 318.368554][T12816] ? __pfx_dump_stack_lvl+0x10/0x10 [ 318.368575][T12816] ? __pfx__printk+0x10/0x10 [ 318.368608][T12816] ? __pfx___might_resched+0x10/0x10 [ 318.368629][T12816] ? fs_reclaim_acquire+0x7d/0x100 [ 318.368655][T12816] should_fail_ex+0x414/0x560 [ 318.368682][T12816] ? alloc_netdev_mqs+0x8a0/0x1170 [ 318.368704][T12816] should_failslab+0xa8/0x100 [ 318.368734][T12816] __kvmalloc_node_noprof+0x161/0x5f0 [ 318.368763][T12816] ? alloc_netdev_mqs+0x8a0/0x1170 [ 318.368787][T12816] ? __asan_memset+0x22/0x50 [ 318.368813][T12816] alloc_netdev_mqs+0x8a0/0x1170 [ 318.368847][T12816] rtnl_create_link+0x31f/0xd10 [ 318.368881][T12816] rtnl_newlink_create+0x25c/0xb00 [ 318.368913][T12816] ? __pfx_aa_get_newest_label+0x10/0x10 [ 318.368939][T12816] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 318.368957][T12816] ? rtnl_newlink+0x8db/0x1c70 [ 318.368980][T12816] ? __pfx___mutex_lock+0x10/0x10 [ 318.369014][T12816] ? ns_capable+0x8a/0xf0 [ 318.369041][T12816] rtnl_newlink+0x16d6/0x1c70 [ 318.369080][T12816] ? __pfx_rtnl_newlink+0x10/0x10 [ 318.369110][T12816] ? is_bpf_text_address+0x26/0x2b0 [ 318.369141][T12816] ? __lock_acquire+0xab9/0xd20 [ 318.369178][T12816] ? __lock_acquire+0xab9/0xd20 [ 318.369231][T12816] ? is_bpf_text_address+0x26/0x2b0 [ 318.369271][T12816] ? __lock_acquire+0xab9/0xd20 [ 318.369320][T12816] ? __pfx_rtnl_newlink+0x10/0x10 [ 318.369336][T12816] rtnetlink_rcv_msg+0x7cf/0xb70 [ 318.369363][T12816] ? __lock_acquire+0xab9/0xd20 [ 318.369384][T12816] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 318.369408][T12816] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 318.369452][T12816] netlink_rcv_skb+0x208/0x470 [ 318.369476][T12816] ? __lock_acquire+0xab9/0xd20 [ 318.369493][T12816] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 318.369520][T12816] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 318.369559][T12816] ? netlink_deliver_tap+0x2e/0x1b0 [ 318.369583][T12816] netlink_unicast+0x82c/0x9e0 [ 318.369616][T12816] ? __pfx_netlink_unicast+0x10/0x10 [ 318.369643][T12816] ? netlink_sendmsg+0x642/0xb30 [ 318.369658][T12816] ? skb_put+0x11b/0x210 [ 318.369683][T12816] netlink_sendmsg+0x805/0xb30 [ 318.369711][T12816] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.369733][T12816] ? aa_sock_msg_perm+0x94/0x160 [ 318.369755][T12816] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 318.369775][T12816] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.369795][T12816] __sock_sendmsg+0x219/0x270 [ 318.369826][T12816] ____sys_sendmsg+0x505/0x830 [ 318.369853][T12816] ? __pfx_____sys_sendmsg+0x10/0x10 [ 318.369887][T12816] ? import_iovec+0x74/0xa0 [ 318.369917][T12816] ___sys_sendmsg+0x21f/0x2a0 [ 318.369941][T12816] ? __pfx____sys_sendmsg+0x10/0x10 [ 318.370009][T12816] ? __fget_files+0x2a/0x420 [ 318.370026][T12816] ? __fget_files+0x3a0/0x420 [ 318.370056][T12816] __x64_sys_sendmsg+0x19b/0x260 [ 318.370082][T12816] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 318.370125][T12816] ? __pfx_ksys_write+0x10/0x10 [ 318.370146][T12816] ? rcu_is_watching+0x15/0xb0 [ 318.370175][T12816] ? do_syscall_64+0xbe/0x3b0 [ 318.370206][T12816] do_syscall_64+0xfa/0x3b0 [ 318.370222][T12816] ? lockdep_hardirqs_on+0x9c/0x150 [ 318.370247][T12816] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.370265][T12816] ? clear_bhb_loop+0x60/0xb0 [ 318.370287][T12816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.370314][T12816] RIP: 0033:0x7fad7cb8e9a9 [ 318.370332][T12816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.370347][T12816] RSP: 002b:00007fad7d95a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 318.370370][T12816] RAX: ffffffffffffffda RBX: 00007fad7cdb5fa0 RCX: 00007fad7cb8e9a9 [ 318.370384][T12816] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 318.370395][T12816] RBP: 00007fad7d95a090 R08: 0000000000000000 R09: 0000000000000000 [ 318.370408][T12816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 318.370419][T12816] R13: 0000000000000000 R14: 00007fad7cdb5fa0 R15: 00007fff01062d18 [ 318.370454][T12816] [ 318.814802][T12821] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2112'. [ 318.825615][T12821] netlink: 'syz.4.2112': attribute type 1 has an invalid length. [ 318.875457][T12826] netlink: 200 bytes leftover after parsing attributes in process `syz.3.2113'. [ 318.919555][T12818] lo speed is unknown, defaulting to 1000 [ 318.928291][T12825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2113'. [ 318.995288][T12818] wg1 speed is unknown, defaulting to 1000 [ 319.202323][T12832] tipc: Enabled bearer , priority 0 [ 319.228249][T12832] syzkaller0: entered promiscuous mode [ 319.258550][T12832] syzkaller0: entered allmulticast mode [ 319.399159][T12840] netlink: 'syz.4.2116': attribute type 10 has an invalid length. [ 319.419616][T12832] tipc: Resetting bearer [ 319.444026][T12840] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 319.459178][T12840] team0: Port device netdevsim0 added [ 319.479725][T12840] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2116'. [ 319.495932][T12840] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2116'. [ 319.550195][T12846] x_tables: duplicate underflow at hook 1 [ 319.570371][T12831] tipc: Resetting bearer [ 319.609569][T12841] SET target dimension over the limit! [ 319.651745][T12831] tipc: Disabling bearer [ 319.777802][T12858] netlink: 'syz.2.2120': attribute type 12 has an invalid length. [ 321.325348][T12911] __nla_validate_parse: 5 callbacks suppressed [ 321.325368][T12911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2136'. [ 321.397980][T12915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2137'. [ 321.426915][T12915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2137'. [ 321.930532][T12928] pim6reg: entered allmulticast mode [ 321.971652][T12928] pim6reg: left allmulticast mode [ 322.235960][T12933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2145'. [ 322.452271][T12944] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2150'. [ 322.538496][T12952] FAULT_INJECTION: forcing a failure. [ 322.538496][T12952] name failslab, interval 1, probability 0, space 0, times 0 [ 322.624507][T12952] CPU: 0 UID: 0 PID: 12952 Comm: syz.0.2152 Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 322.624539][T12952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 322.624551][T12952] Call Trace: [ 322.624559][T12952] [ 322.624568][T12952] dump_stack_lvl+0x189/0x250 [ 322.624599][T12952] ? __pfx____ratelimit+0x10/0x10 [ 322.624629][T12952] ? __pfx_dump_stack_lvl+0x10/0x10 [ 322.624652][T12952] ? __pfx__printk+0x10/0x10 [ 322.624681][T12952] ? __pfx___might_resched+0x10/0x10 [ 322.624705][T12952] ? fs_reclaim_acquire+0x7d/0x100 [ 322.624730][T12952] should_fail_ex+0x414/0x560 [ 322.624757][T12952] should_failslab+0xa8/0x100 [ 322.624788][T12952] __kmalloc_cache_noprof+0x70/0x3d0 [ 322.624813][T12952] ? alloc_netdev_mqs+0xbf1/0x1170 [ 322.624845][T12952] alloc_netdev_mqs+0xbf1/0x1170 [ 322.624888][T12952] rtnl_create_link+0x31f/0xd10 [ 322.624921][T12952] rtnl_newlink_create+0x25c/0xb00 [ 322.624950][T12952] ? __pfx_aa_get_newest_label+0x10/0x10 [ 322.624975][T12952] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 322.624994][T12952] ? rtnl_newlink+0x8db/0x1c70 [ 322.625016][T12952] ? __pfx___mutex_lock+0x10/0x10 [ 322.625048][T12952] ? ns_capable+0x8a/0xf0 [ 322.625076][T12952] rtnl_newlink+0x16d6/0x1c70 [ 322.625113][T12952] ? __pfx_rtnl_newlink+0x10/0x10 [ 322.625143][T12952] ? is_bpf_text_address+0x26/0x2b0 [ 322.625174][T12952] ? __lock_acquire+0xab9/0xd20 [ 322.625211][T12952] ? __lock_acquire+0xab9/0xd20 [ 322.625257][T12952] ? is_bpf_text_address+0x26/0x2b0 [ 322.625299][T12952] ? __lock_acquire+0xab9/0xd20 [ 322.625351][T12952] ? __pfx_rtnl_newlink+0x10/0x10 [ 322.625368][T12952] rtnetlink_rcv_msg+0x7cf/0xb70 [ 322.625396][T12952] ? __lock_acquire+0xab9/0xd20 [ 322.625418][T12952] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 322.625445][T12952] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 322.625496][T12952] netlink_rcv_skb+0x208/0x470 [ 322.625523][T12952] ? __lock_acquire+0xab9/0xd20 [ 322.625542][T12952] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 322.625573][T12952] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 322.625617][T12952] ? netlink_deliver_tap+0x2e/0x1b0 [ 322.625646][T12952] netlink_unicast+0x82c/0x9e0 [ 322.625684][T12952] ? __pfx_netlink_unicast+0x10/0x10 [ 322.625713][T12952] ? netlink_sendmsg+0x642/0xb30 [ 322.625729][T12952] ? skb_put+0x11b/0x210 [ 322.625753][T12952] netlink_sendmsg+0x805/0xb30 [ 322.625785][T12952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 322.625809][T12952] ? aa_sock_msg_perm+0x94/0x160 [ 322.625831][T12952] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 322.625851][T12952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 322.625880][T12952] __sock_sendmsg+0x219/0x270 [ 322.625911][T12952] ____sys_sendmsg+0x505/0x830 [ 322.625942][T12952] ? __pfx_____sys_sendmsg+0x10/0x10 [ 322.625976][T12952] ? import_iovec+0x74/0xa0 [ 322.626007][T12952] ___sys_sendmsg+0x21f/0x2a0 [ 322.626032][T12952] ? __pfx____sys_sendmsg+0x10/0x10 [ 322.626101][T12952] ? __fget_files+0x2a/0x420 [ 322.626117][T12952] ? __fget_files+0x3a0/0x420 [ 322.626148][T12952] __x64_sys_sendmsg+0x19b/0x260 [ 322.626174][T12952] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 322.626209][T12952] ? __pfx_ksys_write+0x10/0x10 [ 322.626231][T12952] ? rcu_is_watching+0x15/0xb0 [ 322.626260][T12952] ? do_syscall_64+0xbe/0x3b0 [ 322.626283][T12952] do_syscall_64+0xfa/0x3b0 [ 322.626299][T12952] ? lockdep_hardirqs_on+0x9c/0x150 [ 322.626326][T12952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.626345][T12952] ? clear_bhb_loop+0x60/0xb0 [ 322.626369][T12952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.626386][T12952] RIP: 0033:0x7f0e56d8e9a9 [ 322.626404][T12952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.626420][T12952] RSP: 002b:00007f0e57bb8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 322.626442][T12952] RAX: ffffffffffffffda RBX: 00007f0e56fb5fa0 RCX: 00007f0e56d8e9a9 [ 322.626456][T12952] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 322.626468][T12952] RBP: 00007f0e57bb8090 R08: 0000000000000000 R09: 0000000000000000 [ 322.626480][T12952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 322.626492][T12952] R13: 0000000000000000 R14: 00007f0e56fb5fa0 R15: 00007ffec824e8a8 [ 322.626526][T12952] [ 323.328474][T12975] syz_tun: entered allmulticast mode [ 323.353803][T12981] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2156'. [ 323.371223][T12975] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 323.504647][T12987] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2158'. [ 323.651851][T12995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2164'. [ 323.700841][T12995] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2164'. [ 323.792151][T13000] sctp: [Deprecated]: syz.2.2166 (pid 13000) Use of int in max_burst socket option deprecated. [ 323.792151][T13000] Use struct sctp_assoc_value instead [ 323.818434][T13002] FAULT_INJECTION: forcing a failure. [ 323.818434][T13002] name failslab, interval 1, probability 0, space 0, times 0 [ 323.852026][T13002] CPU: 1 UID: 0 PID: 13002 Comm: syz.4.2167 Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 323.852059][T13002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 323.852070][T13002] Call Trace: [ 323.852079][T13002] [ 323.852087][T13002] dump_stack_lvl+0x189/0x250 [ 323.852119][T13002] ? __pfx____ratelimit+0x10/0x10 [ 323.852148][T13002] ? __pfx_dump_stack_lvl+0x10/0x10 [ 323.852171][T13002] ? __pfx__printk+0x10/0x10 [ 323.852202][T13002] ? __pfx___might_resched+0x10/0x10 [ 323.852224][T13002] ? fs_reclaim_acquire+0x7d/0x100 [ 323.852251][T13002] should_fail_ex+0x414/0x560 [ 323.852276][T13002] should_failslab+0xa8/0x100 [ 323.852306][T13002] __kmalloc_cache_noprof+0x70/0x3d0 [ 323.852331][T13002] ? alloc_netdev_mqs+0xb90/0x1170 [ 323.852354][T13002] ? __xdp_rxq_info_reg+0x189/0x2a0 [ 323.852381][T13002] alloc_netdev_mqs+0xb90/0x1170 [ 323.852416][T13002] rtnl_create_link+0x31f/0xd10 [ 323.852450][T13002] rtnl_newlink_create+0x25c/0xb00 [ 323.852480][T13002] ? __pfx_aa_get_newest_label+0x10/0x10 [ 323.852505][T13002] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 323.852524][T13002] ? rtnl_newlink+0x8db/0x1c70 [ 323.852546][T13002] ? __pfx___mutex_lock+0x10/0x10 [ 323.852578][T13002] ? ns_capable+0x8a/0xf0 [ 323.852606][T13002] rtnl_newlink+0x16d6/0x1c70 [ 323.852646][T13002] ? __pfx_rtnl_newlink+0x10/0x10 [ 323.852675][T13002] ? is_bpf_text_address+0x26/0x2b0 [ 323.852706][T13002] ? __lock_acquire+0xab9/0xd20 [ 323.852743][T13002] ? __lock_acquire+0xab9/0xd20 [ 323.852789][T13002] ? is_bpf_text_address+0x26/0x2b0 [ 323.852840][T13002] ? __lock_acquire+0xab9/0xd20 [ 323.852890][T13002] ? __pfx_rtnl_newlink+0x10/0x10 [ 323.852909][T13002] rtnetlink_rcv_msg+0x7cf/0xb70 [ 323.852934][T13002] ? __lock_acquire+0xab9/0xd20 [ 323.852955][T13002] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 323.852981][T13002] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 323.853030][T13002] netlink_rcv_skb+0x208/0x470 [ 323.853057][T13002] ? __lock_acquire+0xab9/0xd20 [ 323.853076][T13002] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 323.853105][T13002] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 323.853149][T13002] ? netlink_deliver_tap+0x2e/0x1b0 [ 323.853175][T13002] netlink_unicast+0x82c/0x9e0 [ 323.853208][T13002] ? __pfx_netlink_unicast+0x10/0x10 [ 323.853232][T13002] ? netlink_sendmsg+0x642/0xb30 [ 323.853245][T13002] ? skb_put+0x11b/0x210 [ 323.853266][T13002] netlink_sendmsg+0x805/0xb30 [ 323.853292][T13002] ? __pfx_netlink_sendmsg+0x10/0x10 [ 323.853312][T13002] ? aa_sock_msg_perm+0x94/0x160 [ 323.853331][T13002] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 323.853347][T13002] ? __pfx_netlink_sendmsg+0x10/0x10 [ 323.853364][T13002] __sock_sendmsg+0x219/0x270 [ 323.853390][T13002] ____sys_sendmsg+0x505/0x830 [ 323.853414][T13002] ? __pfx_____sys_sendmsg+0x10/0x10 [ 323.853443][T13002] ? import_iovec+0x74/0xa0 [ 323.853468][T13002] ___sys_sendmsg+0x21f/0x2a0 [ 323.853490][T13002] ? __pfx____sys_sendmsg+0x10/0x10 [ 323.853551][T13002] ? __fget_files+0x2a/0x420 [ 323.853563][T13002] ? __fget_files+0x3a0/0x420 [ 323.853590][T13002] __x64_sys_sendmsg+0x19b/0x260 [ 323.853611][T13002] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 323.853640][T13002] ? __pfx_ksys_write+0x10/0x10 [ 323.853657][T13002] ? rcu_is_watching+0x15/0xb0 [ 323.853681][T13002] ? do_syscall_64+0xbe/0x3b0 [ 323.853701][T13002] do_syscall_64+0xfa/0x3b0 [ 323.853715][T13002] ? lockdep_hardirqs_on+0x9c/0x150 [ 323.853736][T13002] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.853753][T13002] ? clear_bhb_loop+0x60/0xb0 [ 323.853772][T13002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.853787][T13002] RIP: 0033:0x7f625a18e9a9 [ 323.853803][T13002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.853817][T13002] RSP: 002b:00007f625b04b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 323.853846][T13002] RAX: ffffffffffffffda RBX: 00007f625a3b5fa0 RCX: 00007f625a18e9a9 [ 323.853858][T13002] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 323.853868][T13002] RBP: 00007f625b04b090 R08: 0000000000000000 R09: 0000000000000000 [ 323.853877][T13002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 323.853886][T13002] R13: 0000000000000000 R14: 00007f625a3b5fa0 R15: 00007ffc789cb8d8 [ 323.853914][T13002] [ 324.303140][T13005] x_tables: duplicate underflow at hook 2 [ 324.628737][T13016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2171'. [ 324.678933][T13014] lo speed is unknown, defaulting to 1000 [ 324.781225][T13014] wg1 speed is unknown, defaulting to 1000 [ 324.794266][T13022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.925535][T13025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.050952][T13025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.511581][T13043] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 325.563039][T13043] batadv1: entered promiscuous mode [ 325.573941][T13043] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 325.607775][T13043] team0: Failed to send options change via netlink (err -105) [ 325.617660][T13043] team0: Port device batadv1 added [ 325.736293][T13048] FAULT_INJECTION: forcing a failure. [ 325.736293][T13048] name failslab, interval 1, probability 0, space 0, times 0 [ 325.767608][T13048] CPU: 0 UID: 0 PID: 13048 Comm: syz.3.2182 Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 325.767639][T13048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 325.767650][T13048] Call Trace: [ 325.767658][T13048] [ 325.767666][T13048] dump_stack_lvl+0x189/0x250 [ 325.767695][T13048] ? __pfx____ratelimit+0x10/0x10 [ 325.767725][T13048] ? __pfx_dump_stack_lvl+0x10/0x10 [ 325.767746][T13048] ? __pfx__printk+0x10/0x10 [ 325.767777][T13048] ? chacha_block_generic+0x53/0xc80 [ 325.767811][T13048] should_fail_ex+0x414/0x560 [ 325.767837][T13048] should_failslab+0xa8/0x100 [ 325.767868][T13048] __kmalloc_noprof+0xcb/0x4f0 [ 325.767893][T13048] ? dev_prep_valid_name+0x193/0x610 [ 325.767926][T13048] dev_prep_valid_name+0x193/0x610 [ 325.767952][T13048] ? lockdep_hardirqs_on+0x9c/0x150 [ 325.767990][T13048] ? __pfx___might_resched+0x10/0x10 [ 325.768011][T13048] ? crng_make_state+0x3fc/0x700 [ 325.768031][T13048] ? __pfx_dev_prep_valid_name+0x10/0x10 [ 325.768069][T13048] ? __raw_spin_lock_init+0x45/0x100 [ 325.768099][T13048] register_netdevice+0x542/0x1ae0 [ 325.768128][T13048] ? _get_random_bytes+0x1bd/0x210 [ 325.768168][T13048] ? __pfx_register_netdevice+0x10/0x10 [ 325.768214][T13048] macvlan_common_newlink+0x120a/0x1980 [ 325.768245][T13048] ? alloc_netdev_mqs+0xc59/0x1170 [ 325.768283][T13048] ? __pfx_macvlan_common_newlink+0x10/0x10 [ 325.768319][T13048] ? __pfx_macvlan_newlink+0x10/0x10 [ 325.768343][T13048] rtnl_newlink_create+0x310/0xb00 [ 325.768371][T13048] ? __mutex_lock+0x51b/0xe80 [ 325.768397][T13048] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 325.768415][T13048] ? rtnl_newlink+0x8db/0x1c70 [ 325.768436][T13048] ? __pfx___mutex_lock+0x10/0x10 [ 325.768468][T13048] ? ns_capable+0x8a/0xf0 [ 325.768494][T13048] rtnl_newlink+0x16d6/0x1c70 [ 325.768533][T13048] ? __pfx_rtnl_newlink+0x10/0x10 [ 325.768562][T13048] ? is_bpf_text_address+0x26/0x2b0 [ 325.768592][T13048] ? __lock_acquire+0xab9/0xd20 [ 325.768633][T13048] ? __lock_acquire+0xab9/0xd20 [ 325.768679][T13048] ? is_bpf_text_address+0x26/0x2b0 [ 325.768721][T13048] ? __lock_acquire+0xab9/0xd20 [ 325.768779][T13048] ? __pfx_rtnl_newlink+0x10/0x10 [ 325.768797][T13048] rtnetlink_rcv_msg+0x7cf/0xb70 [ 325.768824][T13048] ? __lock_acquire+0xab9/0xd20 [ 325.768846][T13048] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 325.768874][T13048] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 325.768925][T13048] netlink_rcv_skb+0x208/0x470 [ 325.768951][T13048] ? __lock_acquire+0xab9/0xd20 [ 325.768970][T13048] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 325.769009][T13048] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 325.769054][T13048] ? netlink_deliver_tap+0x2e/0x1b0 [ 325.769083][T13048] netlink_unicast+0x82c/0x9e0 [ 325.769122][T13048] ? __pfx_netlink_unicast+0x10/0x10 [ 325.769152][T13048] ? netlink_sendmsg+0x642/0xb30 [ 325.769167][T13048] ? skb_put+0x11b/0x210 [ 325.769192][T13048] netlink_sendmsg+0x805/0xb30 [ 325.769222][T13048] ? __pfx_netlink_sendmsg+0x10/0x10 [ 325.769246][T13048] ? aa_sock_msg_perm+0x94/0x160 [ 325.769268][T13048] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 325.769288][T13048] ? __pfx_netlink_sendmsg+0x10/0x10 [ 325.769308][T13048] __sock_sendmsg+0x219/0x270 [ 325.769339][T13048] ____sys_sendmsg+0x505/0x830 [ 325.769368][T13048] ? __pfx_____sys_sendmsg+0x10/0x10 [ 325.769403][T13048] ? import_iovec+0x74/0xa0 [ 325.769431][T13048] ___sys_sendmsg+0x21f/0x2a0 [ 325.769454][T13048] ? __pfx____sys_sendmsg+0x10/0x10 [ 325.769515][T13048] ? __fget_files+0x2a/0x420 [ 325.769530][T13048] ? __fget_files+0x3a0/0x420 [ 325.769559][T13048] __x64_sys_sendmsg+0x19b/0x260 [ 325.769584][T13048] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 325.769618][T13048] ? __pfx_ksys_write+0x10/0x10 [ 325.769641][T13048] ? rcu_is_watching+0x15/0xb0 [ 325.769670][T13048] ? do_syscall_64+0xbe/0x3b0 [ 325.769694][T13048] do_syscall_64+0xfa/0x3b0 [ 325.769710][T13048] ? lockdep_hardirqs_on+0x9c/0x150 [ 325.769736][T13048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.769755][T13048] ? clear_bhb_loop+0x60/0xb0 [ 325.769779][T13048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.769797][T13048] RIP: 0033:0x7f8a99f8e9a9 [ 325.769815][T13048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.769831][T13048] RSP: 002b:00007f8a97df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 325.769852][T13048] RAX: ffffffffffffffda RBX: 00007f8a9a1b5fa0 RCX: 00007f8a99f8e9a9 [ 325.769866][T13048] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 325.769877][T13048] RBP: 00007f8a97df6090 R08: 0000000000000000 R09: 0000000000000000 [ 325.769890][T13048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 325.769901][T13048] R13: 0000000000000000 R14: 00007f8a9a1b5fa0 R15: 00007ffc4c718e98 [ 325.769935][T13048] [ 326.559474][T13041] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 326.595739][T13041] team0: Port device netdevsim0 removed [ 326.911847][T13063] lo speed is unknown, defaulting to 1000 [ 326.942990][T13065] lo speed is unknown, defaulting to 1000 [ 326.948321][T13063] wg1 speed is unknown, defaulting to 1000 [ 327.208458][T13090] __nla_validate_parse: 5 callbacks suppressed [ 327.208482][T13090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2193'. [ 327.542460][T13096] FAULT_INJECTION: forcing a failure. [ 327.542460][T13096] name failslab, interval 1, probability 0, space 0, times 0 [ 327.590992][T13096] CPU: 1 UID: 0 PID: 13096 Comm: syz.2.2196 Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 327.591024][T13096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 327.591034][T13096] Call Trace: [ 327.591042][T13096] [ 327.591051][T13096] dump_stack_lvl+0x189/0x250 [ 327.591079][T13096] ? __pfx____ratelimit+0x10/0x10 [ 327.591116][T13096] ? __pfx_dump_stack_lvl+0x10/0x10 [ 327.591139][T13096] ? __pfx__printk+0x10/0x10 [ 327.591169][T13096] ? __pfx___might_resched+0x10/0x10 [ 327.591189][T13096] ? fs_reclaim_acquire+0x7d/0x100 [ 327.591213][T13096] should_fail_ex+0x414/0x560 [ 327.591236][T13096] should_failslab+0xa8/0x100 [ 327.591272][T13096] __kmalloc_cache_noprof+0x70/0x3d0 [ 327.591300][T13096] ? register_netdevice+0x58b/0x1ae0 [ 327.591322][T13096] register_netdevice+0x58b/0x1ae0 [ 327.591343][T13096] ? _get_random_bytes+0x1bd/0x210 [ 327.591373][T13096] ? __pfx_register_netdevice+0x10/0x10 [ 327.591409][T13096] macvlan_common_newlink+0x120a/0x1980 [ 327.591434][T13096] ? alloc_netdev_mqs+0xc59/0x1170 [ 327.591466][T13096] ? __pfx_macvlan_common_newlink+0x10/0x10 [ 327.591495][T13096] ? __pfx_macvlan_newlink+0x10/0x10 [ 327.591514][T13096] rtnl_newlink_create+0x310/0xb00 [ 327.591540][T13096] ? __pfx_aa_get_newest_label+0x10/0x10 [ 327.591561][T13096] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 327.591575][T13096] ? rtnl_newlink+0x8db/0x1c70 [ 327.591594][T13096] ? __pfx___mutex_lock+0x10/0x10 [ 327.591622][T13096] ? ns_capable+0x8a/0xf0 [ 327.591645][T13096] rtnl_newlink+0x16d6/0x1c70 [ 327.591679][T13096] ? __pfx_rtnl_newlink+0x10/0x10 [ 327.591711][T13096] ? is_bpf_text_address+0x26/0x2b0 [ 327.591736][T13096] ? __lock_acquire+0xab9/0xd20 [ 327.591767][T13096] ? __lock_acquire+0xab9/0xd20 [ 327.591804][T13096] ? is_bpf_text_address+0x26/0x2b0 [ 327.591840][T13096] ? __lock_acquire+0xab9/0xd20 [ 327.591883][T13096] ? __pfx_rtnl_newlink+0x10/0x10 [ 327.591898][T13096] rtnetlink_rcv_msg+0x7cf/0xb70 [ 327.591921][T13096] ? __lock_acquire+0xab9/0xd20 [ 327.591940][T13096] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 327.591962][T13096] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 327.592004][T13096] netlink_rcv_skb+0x208/0x470 [ 327.592027][T13096] ? __lock_acquire+0xab9/0xd20 [ 327.592042][T13096] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 327.592067][T13096] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 327.592104][T13096] ? netlink_deliver_tap+0x2e/0x1b0 [ 327.592128][T13096] netlink_unicast+0x82c/0x9e0 [ 327.592162][T13096] ? __pfx_netlink_unicast+0x10/0x10 [ 327.592186][T13096] ? netlink_sendmsg+0x642/0xb30 [ 327.592199][T13096] ? skb_put+0x11b/0x210 [ 327.592221][T13096] netlink_sendmsg+0x805/0xb30 [ 327.592252][T13096] ? __pfx_netlink_sendmsg+0x10/0x10 [ 327.592273][T13096] ? aa_sock_msg_perm+0x94/0x160 [ 327.592293][T13096] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 327.592312][T13096] ? __pfx_netlink_sendmsg+0x10/0x10 [ 327.592331][T13096] __sock_sendmsg+0x219/0x270 [ 327.592362][T13096] ____sys_sendmsg+0x505/0x830 [ 327.592392][T13096] ? __pfx_____sys_sendmsg+0x10/0x10 [ 327.592426][T13096] ? import_iovec+0x74/0xa0 [ 327.592457][T13096] ___sys_sendmsg+0x21f/0x2a0 [ 327.592482][T13096] ? __pfx____sys_sendmsg+0x10/0x10 [ 327.592551][T13096] ? __fget_files+0x2a/0x420 [ 327.592567][T13096] ? __fget_files+0x3a0/0x420 [ 327.592598][T13096] __x64_sys_sendmsg+0x19b/0x260 [ 327.592623][T13096] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 327.592658][T13096] ? __pfx_ksys_write+0x10/0x10 [ 327.592680][T13096] ? rcu_is_watching+0x15/0xb0 [ 327.592719][T13096] ? do_syscall_64+0xbe/0x3b0 [ 327.592743][T13096] do_syscall_64+0xfa/0x3b0 [ 327.592759][T13096] ? lockdep_hardirqs_on+0x9c/0x150 [ 327.592787][T13096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.592806][T13096] ? clear_bhb_loop+0x60/0xb0 [ 327.592830][T13096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.592849][T13096] RIP: 0033:0x7fad7cb8e9a9 [ 327.592869][T13096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.592885][T13096] RSP: 002b:00007fad7d95a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 327.592907][T13096] RAX: ffffffffffffffda RBX: 00007fad7cdb5fa0 RCX: 00007fad7cb8e9a9 [ 327.592921][T13096] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 327.592942][T13096] RBP: 00007fad7d95a090 R08: 0000000000000000 R09: 0000000000000000 [ 327.592954][T13096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 327.592965][T13096] R13: 0000000000000000 R14: 00007fad7cdb5fa0 R15: 00007fff01062d18 [ 327.593000][T13096] [ 328.335931][T13065] wg1 speed is unknown, defaulting to 1000 [ 328.406328][T13113] FAULT_INJECTION: forcing a failure. [ 328.406328][T13113] name failslab, interval 1, probability 0, space 0, times 0 [ 328.501487][T13113] CPU: 0 UID: 0 PID: 13113 Comm: syz.1.2201 Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 328.501520][T13113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 328.501531][T13113] Call Trace: [ 328.501540][T13113] [ 328.501549][T13113] dump_stack_lvl+0x189/0x250 [ 328.501580][T13113] ? __pfx____ratelimit+0x10/0x10 [ 328.501610][T13113] ? __pfx_dump_stack_lvl+0x10/0x10 [ 328.501632][T13113] ? __pfx__printk+0x10/0x10 [ 328.501665][T13113] ? __pfx___might_resched+0x10/0x10 [ 328.501687][T13113] ? fs_reclaim_acquire+0x7d/0x100 [ 328.501712][T13113] should_fail_ex+0x414/0x560 [ 328.501738][T13113] should_failslab+0xa8/0x100 [ 328.501768][T13113] kmem_cache_alloc_noprof+0x73/0x3c0 [ 328.501792][T13113] ? skb_clone+0x212/0x3a0 [ 328.501821][T13113] skb_clone+0x212/0x3a0 [ 328.501841][T13113] ? nfnetlink_rcv+0x486/0x2520 [ 328.501870][T13113] nfnetlink_rcv+0x4b4/0x2520 [ 328.501896][T13113] ? is_bpf_text_address+0x26/0x2b0 [ 328.501922][T13113] ? kernel_text_address+0xa5/0xe0 [ 328.501941][T13113] ? __kernel_text_address+0xd/0x40 [ 328.501968][T13113] ? unwind_get_return_address+0x4d/0x90 [ 328.501991][T13113] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 328.502017][T13113] ? arch_stack_walk+0xfc/0x150 [ 328.502077][T13113] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 328.502144][T13113] ? __lock_acquire+0xab9/0xd20 [ 328.502176][T13113] ? netlink_deliver_tap+0x2e/0x1b0 [ 328.502215][T13113] netlink_unicast+0x82c/0x9e0 [ 328.502251][T13113] ? __pfx_netlink_unicast+0x10/0x10 [ 328.502278][T13113] ? netlink_sendmsg+0x642/0xb30 [ 328.502292][T13113] ? skb_put+0x11b/0x210 [ 328.502314][T13113] netlink_sendmsg+0x805/0xb30 [ 328.502344][T13113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 328.502367][T13113] ? aa_sock_msg_perm+0x94/0x160 [ 328.502389][T13113] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 328.502409][T13113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 328.502429][T13113] __sock_sendmsg+0x219/0x270 [ 328.502460][T13113] ____sys_sendmsg+0x505/0x830 [ 328.502490][T13113] ? __pfx_____sys_sendmsg+0x10/0x10 [ 328.502523][T13113] ? import_iovec+0x74/0xa0 [ 328.502552][T13113] ___sys_sendmsg+0x21f/0x2a0 [ 328.502577][T13113] ? __pfx____sys_sendmsg+0x10/0x10 [ 328.502639][T13113] ? __fget_files+0x2a/0x420 [ 328.502656][T13113] ? __fget_files+0x3a0/0x420 [ 328.502687][T13113] __x64_sys_sendmsg+0x19b/0x260 [ 328.502709][T13113] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 328.502740][T13113] ? __pfx_ksys_write+0x10/0x10 [ 328.502763][T13113] ? rcu_is_watching+0x15/0xb0 [ 328.502791][T13113] ? do_syscall_64+0xbe/0x3b0 [ 328.502813][T13113] do_syscall_64+0xfa/0x3b0 [ 328.502829][T13113] ? lockdep_hardirqs_on+0x9c/0x150 [ 328.502856][T13113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.502875][T13113] ? clear_bhb_loop+0x60/0xb0 [ 328.502898][T13113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.502917][T13113] RIP: 0033:0x7f0302b8e9a9 [ 328.502936][T13113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.502951][T13113] RSP: 002b:00007f0303abc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 328.502973][T13113] RAX: ffffffffffffffda RBX: 00007f0302db5fa0 RCX: 00007f0302b8e9a9 [ 328.502987][T13113] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 328.502998][T13113] RBP: 00007f0303abc090 R08: 0000000000000000 R09: 0000000000000000 [ 328.503009][T13113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.503019][T13113] R13: 0000000000000000 R14: 00007f0302db5fa0 R15: 00007fff97d7cef8 [ 328.503060][T13113] [ 329.049401][T13122] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2204'. [ 329.106247][T13124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2205'. [ 329.297629][T13134] FAULT_INJECTION: forcing a failure. [ 329.297629][T13134] name failslab, interval 1, probability 0, space 0, times 0 [ 329.311201][T13134] CPU: 0 UID: 0 PID: 13134 Comm: syz.4.2210 Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 329.311230][T13134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 329.311241][T13134] Call Trace: [ 329.311251][T13134] [ 329.311259][T13134] dump_stack_lvl+0x189/0x250 [ 329.311289][T13134] ? __pfx____ratelimit+0x10/0x10 [ 329.311317][T13134] ? __pfx_dump_stack_lvl+0x10/0x10 [ 329.311339][T13134] ? __pfx__printk+0x10/0x10 [ 329.311373][T13134] ? __pfx___might_resched+0x10/0x10 [ 329.311393][T13134] ? fs_reclaim_acquire+0x7d/0x100 [ 329.311417][T13134] should_fail_ex+0x414/0x560 [ 329.311443][T13134] should_failslab+0xa8/0x100 [ 329.311472][T13134] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 329.311498][T13134] ? kobject_set_name_vargs+0x61/0x110 [ 329.311523][T13134] kstrdup+0x42/0x100 [ 329.311544][T13134] kobject_set_name_vargs+0x61/0x110 [ 329.311566][T13134] dev_set_name+0xd4/0x120 [ 329.311594][T13134] ? __pfx_dev_set_name+0x10/0x10 [ 329.311624][T13134] ? device_initialize+0x24b/0x440 [ 329.311654][T13134] netdev_register_kobject+0xb7/0x310 [ 329.311697][T13134] register_netdevice+0x126c/0x1ae0 [ 329.311740][T13134] ? __pfx_register_netdevice+0x10/0x10 [ 329.311786][T13134] macvlan_common_newlink+0x120a/0x1980 [ 329.311814][T13134] ? alloc_netdev_mqs+0xc59/0x1170 [ 329.311852][T13134] ? __pfx_macvlan_common_newlink+0x10/0x10 [ 329.311887][T13134] ? __pfx_macvlan_newlink+0x10/0x10 [ 329.311911][T13134] rtnl_newlink_create+0x310/0xb00 [ 329.311941][T13134] ? __pfx_aa_get_newest_label+0x10/0x10 [ 329.311967][T13134] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 329.311985][T13134] ? rtnl_newlink+0x8db/0x1c70 [ 329.312007][T13134] ? __pfx___mutex_lock+0x10/0x10 [ 329.312040][T13134] ? ns_capable+0x8a/0xf0 [ 329.312067][T13134] rtnl_newlink+0x16d6/0x1c70 [ 329.312105][T13134] ? __pfx_rtnl_newlink+0x10/0x10 [ 329.312134][T13134] ? is_bpf_text_address+0x26/0x2b0 [ 329.312165][T13134] ? __lock_acquire+0xab9/0xd20 [ 329.312200][T13134] ? __lock_acquire+0xab9/0xd20 [ 329.312246][T13134] ? is_bpf_text_address+0x26/0x2b0 [ 329.312288][T13134] ? __lock_acquire+0xab9/0xd20 [ 329.312339][T13134] ? __pfx_rtnl_newlink+0x10/0x10 [ 329.312356][T13134] rtnetlink_rcv_msg+0x7cf/0xb70 [ 329.312384][T13134] ? __lock_acquire+0xab9/0xd20 [ 329.312404][T13134] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 329.312433][T13134] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 329.312482][T13134] netlink_rcv_skb+0x208/0x470 [ 329.312509][T13134] ? __lock_acquire+0xab9/0xd20 [ 329.312528][T13134] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 329.312559][T13134] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 329.312612][T13134] ? netlink_deliver_tap+0x2e/0x1b0 [ 329.312642][T13134] netlink_unicast+0x82c/0x9e0 [ 329.312687][T13134] ? __pfx_netlink_unicast+0x10/0x10 [ 329.312716][T13134] ? netlink_sendmsg+0x642/0xb30 [ 329.312733][T13134] ? skb_put+0x11b/0x210 [ 329.312756][T13134] netlink_sendmsg+0x805/0xb30 [ 329.312787][T13134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.312811][T13134] ? aa_sock_msg_perm+0x94/0x160 [ 329.312833][T13134] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 329.312853][T13134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.312873][T13134] __sock_sendmsg+0x219/0x270 [ 329.312904][T13134] ____sys_sendmsg+0x505/0x830 [ 329.312933][T13134] ? __pfx_____sys_sendmsg+0x10/0x10 [ 329.312968][T13134] ? import_iovec+0x74/0xa0 [ 329.312999][T13134] ___sys_sendmsg+0x21f/0x2a0 [ 329.313024][T13134] ? __pfx____sys_sendmsg+0x10/0x10 [ 329.313093][T13134] ? __fget_files+0x2a/0x420 [ 329.313110][T13134] ? __fget_files+0x3a0/0x420 [ 329.313140][T13134] __x64_sys_sendmsg+0x19b/0x260 [ 329.313166][T13134] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 329.313201][T13134] ? __pfx_ksys_write+0x10/0x10 [ 329.313224][T13134] ? rcu_is_watching+0x15/0xb0 [ 329.313253][T13134] ? do_syscall_64+0xbe/0x3b0 [ 329.313275][T13134] do_syscall_64+0xfa/0x3b0 [ 329.313292][T13134] ? lockdep_hardirqs_on+0x9c/0x150 [ 329.313318][T13134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.313337][T13134] ? clear_bhb_loop+0x60/0xb0 [ 329.313362][T13134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.313380][T13134] RIP: 0033:0x7f625a18e9a9 [ 329.313407][T13134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.313431][T13134] RSP: 002b:00007f625b04b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.313455][T13134] RAX: ffffffffffffffda RBX: 00007f625a3b5fa0 RCX: 00007f625a18e9a9 [ 329.313469][T13134] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 329.313481][T13134] RBP: 00007f625b04b090 R08: 0000000000000000 R09: 0000000000000000 [ 329.313493][T13134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 329.313505][T13134] R13: 0000000000000000 R14: 00007f625a3b5fa0 R15: 00007ffc789cb8d8 [ 329.313538][T13134] [ 329.815711][T13137] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2209'. [ 330.495289][T13137] bond0 (unregistering): Released all slaves [ 330.637221][T13143] ip6gretap0: entered promiscuous mode [ 330.707400][T13143] ip6gretap0: left promiscuous mode [ 330.955347][T13165] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2213'. [ 331.125326][T13169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2214'. [ 331.164909][T13169] netlink: 'syz.1.2214': attribute type 13 has an invalid length. [ 331.166429][T13172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2216'. [ 331.173431][T13169] netlink: 'syz.1.2214': attribute type 17 has an invalid length. [ 331.173456][T13169] netlink: 'syz.1.2214': attribute type 27 has an invalid length. [ 331.562715][T13183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2220'. [ 331.583188][T13186] siw: device registration error -23 [ 331.624792][T13186] ieee802154 phy0 wpan0: encryption failed: -90 [ 331.776825][T13183] lo speed is unknown, defaulting to 1000 [ 331.805254][T13183] wg1 speed is unknown, defaulting to 1000 [ 331.902155][T13194] FAULT_INJECTION: forcing a failure. [ 331.902155][T13194] name failslab, interval 1, probability 0, space 0, times 0 [ 331.937837][T13194] CPU: 0 UID: 0 PID: 13194 Comm: syz.4.2222 Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 331.937881][T13194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 331.937893][T13194] Call Trace: [ 331.937902][T13194] [ 331.937910][T13194] dump_stack_lvl+0x189/0x250 [ 331.937939][T13194] ? __pfx____ratelimit+0x10/0x10 [ 331.937969][T13194] ? __pfx_dump_stack_lvl+0x10/0x10 [ 331.937992][T13194] ? __pfx__printk+0x10/0x10 [ 331.938021][T13194] ? __pfx___might_resched+0x10/0x10 [ 331.938044][T13194] ? fs_reclaim_acquire+0x7d/0x100 [ 331.938069][T13194] should_fail_ex+0x414/0x560 [ 331.938095][T13194] should_failslab+0xa8/0x100 [ 331.938126][T13194] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 331.938153][T13194] ? __kernfs_new_node+0x9c/0x7e0 [ 331.938184][T13194] ? is_bpf_text_address+0x292/0x2b0 [ 331.938211][T13194] kstrdup+0x42/0x100 [ 331.938232][T13194] __kernfs_new_node+0x9c/0x7e0 [ 331.938252][T13194] ? __lock_acquire+0xab9/0xd20 [ 331.938282][T13194] ? __pfx___kernfs_new_node+0x10/0x10 [ 331.938304][T13194] ? kernfs_root+0x1c/0x230 [ 331.938331][T13194] ? kernfs_root+0x1c/0x230 [ 331.938348][T13194] ? kernfs_root+0x1c/0x230 [ 331.938362][T13194] ? kernfs_root+0x1c/0x230 [ 331.938387][T13194] kernfs_new_node+0x102/0x210 [ 331.938414][T13194] kernfs_create_dir_ns+0x44/0x130 [ 331.938440][T13194] sysfs_create_dir_ns+0x123/0x280 [ 331.938474][T13194] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 331.938506][T13194] ? do_raw_spin_unlock+0x122/0x240 [ 331.938538][T13194] kobject_add_internal+0x59f/0xb40 [ 331.938571][T13194] kobject_add+0x155/0x220 [ 331.938598][T13194] ? __pfx_kobject_add+0x10/0x10 [ 331.938625][T13194] ? get_device_parent+0x366/0x3a0 [ 331.938658][T13194] device_add+0x408/0xb50 [ 331.938685][T13194] ? device_initialize+0x24b/0x440 [ 331.938715][T13194] netdev_register_kobject+0x178/0x310 [ 331.938746][T13194] register_netdevice+0x126c/0x1ae0 [ 331.938791][T13194] ? __pfx_register_netdevice+0x10/0x10 [ 331.938837][T13194] macvlan_common_newlink+0x120a/0x1980 [ 331.938875][T13194] ? alloc_netdev_mqs+0xc59/0x1170 [ 331.938912][T13194] ? __pfx_macvlan_common_newlink+0x10/0x10 [ 331.938949][T13194] ? __pfx_macvlan_newlink+0x10/0x10 [ 331.938973][T13194] rtnl_newlink_create+0x310/0xb00 [ 331.939003][T13194] ? __pfx_aa_get_newest_label+0x10/0x10 [ 331.939028][T13194] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 331.939046][T13194] ? rtnl_newlink+0x8db/0x1c70 [ 331.939068][T13194] ? __pfx___mutex_lock+0x10/0x10 [ 331.939100][T13194] ? ns_capable+0x8a/0xf0 [ 331.939127][T13194] rtnl_newlink+0x16d6/0x1c70 [ 331.939166][T13194] ? __pfx_rtnl_newlink+0x10/0x10 [ 331.939195][T13194] ? is_bpf_text_address+0x26/0x2b0 [ 331.939225][T13194] ? __lock_acquire+0xab9/0xd20 [ 331.939260][T13194] ? __lock_acquire+0xab9/0xd20 [ 331.939305][T13194] ? is_bpf_text_address+0x26/0x2b0 [ 331.939348][T13194] ? __lock_acquire+0xab9/0xd20 [ 331.939400][T13194] ? __pfx_rtnl_newlink+0x10/0x10 [ 331.939418][T13194] rtnetlink_rcv_msg+0x7cf/0xb70 [ 331.939443][T13194] ? __lock_acquire+0xab9/0xd20 [ 331.939465][T13194] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 331.939493][T13194] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 331.939543][T13194] netlink_rcv_skb+0x208/0x470 [ 331.939571][T13194] ? __lock_acquire+0xab9/0xd20 [ 331.939591][T13194] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 331.939621][T13194] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 331.939664][T13194] ? netlink_deliver_tap+0x2e/0x1b0 [ 331.939693][T13194] netlink_unicast+0x82c/0x9e0 [ 331.939731][T13194] ? __pfx_netlink_unicast+0x10/0x10 [ 331.939761][T13194] ? netlink_sendmsg+0x642/0xb30 [ 331.939777][T13194] ? skb_put+0x11b/0x210 [ 331.939801][T13194] netlink_sendmsg+0x805/0xb30 [ 331.939833][T13194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.939863][T13194] ? aa_sock_msg_perm+0x94/0x160 [ 331.939886][T13194] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 331.939905][T13194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.939926][T13194] __sock_sendmsg+0x219/0x270 [ 331.939957][T13194] ____sys_sendmsg+0x505/0x830 [ 331.939987][T13194] ? __pfx_____sys_sendmsg+0x10/0x10 [ 331.940023][T13194] ? import_iovec+0x74/0xa0 [ 331.940054][T13194] ___sys_sendmsg+0x21f/0x2a0 [ 331.940079][T13194] ? __pfx____sys_sendmsg+0x10/0x10 [ 331.940148][T13194] ? __fget_files+0x2a/0x420 [ 331.940164][T13194] ? __fget_files+0x3a0/0x420 [ 331.940196][T13194] __x64_sys_sendmsg+0x19b/0x260 [ 331.940222][T13194] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 331.940257][T13194] ? __pfx_ksys_write+0x10/0x10 [ 331.940280][T13194] ? rcu_is_watching+0x15/0xb0 [ 331.940310][T13194] ? do_syscall_64+0xbe/0x3b0 [ 331.940334][T13194] do_syscall_64+0xfa/0x3b0 [ 331.940350][T13194] ? lockdep_hardirqs_on+0x9c/0x150 [ 331.940377][T13194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.940397][T13194] ? clear_bhb_loop+0x60/0xb0 [ 331.940421][T13194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.940439][T13194] RIP: 0033:0x7f625a18e9a9 [ 331.940458][T13194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.940474][T13194] RSP: 002b:00007f625b04b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.940497][T13194] RAX: ffffffffffffffda RBX: 00007f625a3b5fa0 RCX: 00007f625a18e9a9 [ 331.940511][T13194] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 331.940524][T13194] RBP: 00007f625b04b090 R08: 0000000000000000 R09: 0000000000000000 [ 331.940535][T13194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 331.940545][T13194] R13: 0000000000000000 R14: 00007f625a3b5fa0 R15: 00007ffc789cb8d8 [ 331.940579][T13194] [ 331.940691][T13194] kobject: kobject_add_internal failed for macvlan0 (error: -12 parent: net) [ 332.308301][T13202] netlink: 'syz.1.2224': attribute type 12 has an invalid length. [ 332.563873][T13202] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.2224'. [ 332.810251][T13204] lo speed is unknown, defaulting to 1000 [ 333.384083][T13204] wg1 speed is unknown, defaulting to 1000 [ 333.467544][T13218] FAULT_INJECTION: forcing a failure. [ 333.467544][T13218] name failslab, interval 1, probability 0, space 0, times 0 [ 333.505837][T13218] CPU: 0 UID: 0 PID: 13218 Comm: syz.1.2228 Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 333.505868][T13218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 333.505880][T13218] Call Trace: [ 333.505888][T13218] [ 333.505897][T13218] dump_stack_lvl+0x189/0x250 [ 333.505927][T13218] ? __pfx____ratelimit+0x10/0x10 [ 333.506035][T13218] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.506057][T13218] ? __pfx__printk+0x10/0x10 [ 333.506089][T13218] ? __pfx___might_resched+0x10/0x10 [ 333.506110][T13218] ? fs_reclaim_acquire+0x7d/0x100 [ 333.506135][T13218] should_fail_ex+0x414/0x560 [ 333.506162][T13218] should_failslab+0xa8/0x100 [ 333.506192][T13218] __kmalloc_noprof+0xcb/0x4f0 [ 333.506217][T13218] ? nf_tables_newrule+0x1506/0x2890 [ 333.506237][T13218] ? nla_strcmp+0x106/0x140 [ 333.506264][T13218] nf_tables_newrule+0x1506/0x2890 [ 333.506306][T13218] ? __pfx_nf_tables_newrule+0x10/0x10 [ 333.506329][T13218] ? nfnl_pernet+0x23/0x240 [ 333.506365][T13218] ? __nla_parse+0x40/0x60 [ 333.506394][T13218] nfnetlink_rcv+0x112f/0x2520 [ 333.506458][T13218] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 333.506544][T13218] ? netlink_deliver_tap+0x2e/0x1b0 [ 333.506586][T13218] netlink_unicast+0x82c/0x9e0 [ 333.506625][T13218] ? __pfx_netlink_unicast+0x10/0x10 [ 333.506653][T13218] ? netlink_sendmsg+0x642/0xb30 [ 333.506670][T13218] ? skb_put+0x11b/0x210 [ 333.506693][T13218] netlink_sendmsg+0x805/0xb30 [ 333.506719][T13218] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.506737][T13218] ? aa_sock_msg_perm+0x94/0x160 [ 333.506755][T13218] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 333.506771][T13218] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.506788][T13218] __sock_sendmsg+0x219/0x270 [ 333.506818][T13218] ____sys_sendmsg+0x505/0x830 [ 333.506847][T13218] ? __pfx_____sys_sendmsg+0x10/0x10 [ 333.506881][T13218] ? import_iovec+0x74/0xa0 [ 333.506912][T13218] ___sys_sendmsg+0x21f/0x2a0 [ 333.506938][T13218] ? __pfx____sys_sendmsg+0x10/0x10 [ 333.507014][T13218] ? __fget_files+0x2a/0x420 [ 333.507031][T13218] ? __fget_files+0x3a0/0x420 [ 333.507062][T13218] __x64_sys_sendmsg+0x19b/0x260 [ 333.507087][T13218] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 333.507121][T13218] ? __pfx_ksys_write+0x10/0x10 [ 333.507143][T13218] ? rcu_is_watching+0x15/0xb0 [ 333.507172][T13218] ? do_syscall_64+0xbe/0x3b0 [ 333.507197][T13218] do_syscall_64+0xfa/0x3b0 [ 333.507214][T13218] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.507242][T13218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.507261][T13218] ? clear_bhb_loop+0x60/0xb0 [ 333.507285][T13218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.507303][T13218] RIP: 0033:0x7f0302b8e9a9 [ 333.507321][T13218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.507338][T13218] RSP: 002b:00007f0303abc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.507358][T13218] RAX: ffffffffffffffda RBX: 00007f0302db5fa0 RCX: 00007f0302b8e9a9 [ 333.507372][T13218] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 333.507383][T13218] RBP: 00007f0303abc090 R08: 0000000000000000 R09: 0000000000000000 [ 333.507395][T13218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.507407][T13218] R13: 0000000000000000 R14: 00007f0302db5fa0 R15: 00007fff97d7cef8 [ 333.507441][T13218] [ 333.855902][T13220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2229'. [ 334.913700][T13248] siw: device registration error -23 [ 334.947021][T13248] ieee802154 phy0 wpan0: encryption failed: -90 [ 335.081127][T13253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2238'. [ 335.413052][T13260] netlink: 'syz.3.2240': attribute type 5 has an invalid length. [ 335.598086][T13264] FAULT_INJECTION: forcing a failure. [ 335.598086][T13264] name failslab, interval 1, probability 0, space 0, times 0 [ 335.619060][T13264] CPU: 0 UID: 0 PID: 13264 Comm: syz.2.2242 Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 335.619090][T13264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 335.619101][T13264] Call Trace: [ 335.619110][T13264] [ 335.619118][T13264] dump_stack_lvl+0x189/0x250 [ 335.619148][T13264] ? __pfx____ratelimit+0x10/0x10 [ 335.619178][T13264] ? __pfx_dump_stack_lvl+0x10/0x10 [ 335.619202][T13264] ? __pfx__printk+0x10/0x10 [ 335.619235][T13264] ? __pfx___might_resched+0x10/0x10 [ 335.619257][T13264] ? fs_reclaim_acquire+0x7d/0x100 [ 335.619282][T13264] should_fail_ex+0x414/0x560 [ 335.619309][T13264] should_failslab+0xa8/0x100 [ 335.619339][T13264] __kmalloc_cache_noprof+0x70/0x3d0 [ 335.619365][T13264] ? nfnetlink_rcv+0xeff/0x2520 [ 335.619397][T13264] nfnetlink_rcv+0xeff/0x2520 [ 335.619461][T13264] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 335.619550][T13264] ? netlink_deliver_tap+0x2e/0x1b0 [ 335.619590][T13264] netlink_unicast+0x82c/0x9e0 [ 335.619629][T13264] ? __pfx_netlink_unicast+0x10/0x10 [ 335.619659][T13264] ? netlink_sendmsg+0x642/0xb30 [ 335.619675][T13264] ? skb_put+0x11b/0x210 [ 335.619701][T13264] netlink_sendmsg+0x805/0xb30 [ 335.619731][T13264] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.619754][T13264] ? aa_sock_msg_perm+0x94/0x160 [ 335.619776][T13264] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 335.619795][T13264] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.619815][T13264] __sock_sendmsg+0x219/0x270 [ 335.619853][T13264] ____sys_sendmsg+0x505/0x830 [ 335.619882][T13264] ? __pfx_____sys_sendmsg+0x10/0x10 [ 335.619912][T13264] ? import_iovec+0x74/0xa0 [ 335.619941][T13264] ___sys_sendmsg+0x21f/0x2a0 [ 335.619963][T13264] ? __pfx____sys_sendmsg+0x10/0x10 [ 335.620023][T13264] ? __fget_files+0x2a/0x420 [ 335.620039][T13264] ? __fget_files+0x3a0/0x420 [ 335.620068][T13264] __x64_sys_sendmsg+0x19b/0x260 [ 335.620093][T13264] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 335.620123][T13264] ? __pfx_ksys_write+0x10/0x10 [ 335.620145][T13264] ? rcu_is_watching+0x15/0xb0 [ 335.620173][T13264] ? do_syscall_64+0xbe/0x3b0 [ 335.620197][T13264] do_syscall_64+0xfa/0x3b0 [ 335.620214][T13264] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.620240][T13264] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.620259][T13264] ? clear_bhb_loop+0x60/0xb0 [ 335.620282][T13264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.620301][T13264] RIP: 0033:0x7fad7cb8e9a9 [ 335.620319][T13264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.620336][T13264] RSP: 002b:00007fad7d95a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 335.620358][T13264] RAX: ffffffffffffffda RBX: 00007fad7cdb5fa0 RCX: 00007fad7cb8e9a9 [ 335.620372][T13264] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 335.620385][T13264] RBP: 00007fad7d95a090 R08: 0000000000000000 R09: 0000000000000000 [ 335.620396][T13264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.620408][T13264] R13: 0000000000000000 R14: 00007fad7cdb5fa0 R15: 00007fff01062d18 [ 335.620442][T13264] [ 336.167478][T13277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2247'. [ 336.168317][T13275] openvswitch: netlink: Port -1156311892 exceeds max allowable 65535 [ 336.210653][T13274] vlan4: entered promiscuous mode [ 336.216036][T13274] gretap0: entered promiscuous mode [ 336.280695][T13271] tipc: Enabled bearer , priority 0 [ 336.323799][T13281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2250'. [ 336.344108][T13271] syzkaller0: entered promiscuous mode [ 336.374737][T13271] syzkaller0: entered allmulticast mode [ 336.466023][T13271] tipc: Resetting bearer [ 336.483533][T13268] tipc: Resetting bearer [ 336.539845][T13268] tipc: Disabling bearer [ 336.565674][T13293] siw: device registration error -23 [ 336.583424][T13293] ieee802154 phy0 wpan0: encryption failed: -90 [ 336.654065][T13298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2256'. [ 336.816904][T13306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2257'. [ 337.247768][T13310] lo speed is unknown, defaulting to 1000 [ 337.280582][T13310] wg1 speed is unknown, defaulting to 1000 [ 337.962835][T13346] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2268'. [ 338.105329][T13349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2269'. [ 338.200615][T13353] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2271'. [ 338.241156][T13353] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 338.284767][T13354] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2270'. [ 338.727970][T13367] ieee802154 phy0 wpan0: encryption failed: -90 [ 338.751701][T13360] lo speed is unknown, defaulting to 1000 [ 338.759966][T13360] wg1 speed is unknown, defaulting to 1000 [ 339.073278][T13377] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2276'. [ 339.171077][T13363] siw: device registration error -23 [ 339.478701][T13386] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2281'. [ 339.518499][T13389] netlink: 'syz.4.2282': attribute type 4 has an invalid length. [ 339.948182][T13405] netlink: 788 bytes leftover after parsing attributes in process `syz.2.2288'. [ 340.121389][T13410] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2289'. [ 340.419773][T13426] siw: device registration error -23 [ 340.460312][T13426] ieee802154 phy0 wpan0: encryption failed: -90 [ 340.644089][T13430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2293'. [ 340.664843][T13431] lo speed is unknown, defaulting to 1000 [ 340.681430][T13430] hsr_slave_0: left promiscuous mode [ 340.692586][T13430] hsr_slave_1: left promiscuous mode [ 340.775013][T13431] wg1 speed is unknown, defaulting to 1000 [ 340.810194][T13434] lo speed is unknown, defaulting to 1000 [ 341.194811][T13434] wg1 speed is unknown, defaulting to 1000 [ 341.265626][T13448] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2298'. [ 341.402471][T13451] tc_dump_action: action bad kind [ 341.700675][T13460] siw: device registration error -23 [ 342.259113][T13477] syz_tun: entered allmulticast mode [ 342.336690][T13481] bond0: Device is already in use. [ 342.420547][T13485] netlink: 'syz.3.2309': attribute type 10 has an invalid length. [ 342.453467][T13484] siw: device registration error -23 [ 342.477673][T13484] ieee802154 phy0 wpan0: encryption failed: -90 [ 342.503095][T13485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.567804][T13485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.647794][T13491] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 342.663642][T13492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.957634][T13491] team_slave_0: left promiscuous mode [ 342.966172][T13491] team0 (unregistering): Port device team_slave_0 removed [ 342.974036][T13491] team_slave_1: left promiscuous mode [ 342.983184][T13491] team0 (unregistering): Port device team_slave_1 removed [ 342.991876][T13491] geneve0: left promiscuous mode [ 342.998704][T13491] team0 (unregistering): Port device geneve0 removed [ 343.007098][T13491] batadv1: left promiscuous mode [ 343.016962][T13491] team0 (unregistering): Port device batadv1 removed [ 343.152993][T13505] vlan2: entered promiscuous mode [ 343.158261][T13505] hsr_slave_1: entered promiscuous mode [ 343.165582][T13505] vlan2: entered allmulticast mode [ 343.171910][T13505] hsr_slave_1: entered allmulticast mode [ 343.844133][T13540] __nla_validate_parse: 9 callbacks suppressed [ 343.844153][T13540] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2328'. [ 343.912967][T13548] ieee802154 phy0 wpan0: encryption failed: -90 [ 344.027034][T13554] openvswitch: netlink: Missing valid actions attribute. [ 344.047672][T13554] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.154520][T13559] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 344.491144][T13568] lo speed is unknown, defaulting to 1000 [ 344.499839][T13568] wg1 speed is unknown, defaulting to 1000 [ 344.707029][T13573] lo speed is unknown, defaulting to 1000 [ 345.152359][T13588] vlan1: entered promiscuous mode [ 345.198014][T13588] hsr_slave_1: entered promiscuous mode [ 345.337617][T13588] vlan1: entered allmulticast mode [ 345.361711][T13588] hsr_slave_1: entered allmulticast mode [ 345.696745][T13573] wg1 speed is unknown, defaulting to 1000 [ 345.808710][T13613] netlink: 'syz.3.2345': attribute type 49 has an invalid length. [ 345.906347][T13616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2346'. [ 345.979010][T13616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2346'. [ 345.987074][T13617] xt_CT: No such helper "snmp" [ 346.024538][T13616] netlink: 'syz.1.2346': attribute type 12 has an invalid length. [ 346.042366][T13616] netlink: 'syz.1.2346': attribute type 11 has an invalid length. [ 346.227685][T13630] ieee802154 phy0 wpan0: encryption failed: -90 [ 346.343812][T13634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2350'. [ 346.648299][T13639] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2351'. [ 346.738135][T13641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2352'. [ 346.872969][T13645] netlink: 'syz.0.2353': attribute type 1 has an invalid length. [ 346.895144][T13646] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2354'. [ 346.914907][T13644] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2354'. [ 347.105627][T13653] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 347.194386][T13654] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 347.261360][T13650] xt_CT: You must specify a L4 protocol and not use inversions on it [ 347.437351][T13664] netlink: 'syz.3.2360': attribute type 10 has an invalid length. [ 347.475396][T13664] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.546253][T13664] bond0: (slave team0): Enslaving as an active interface with an up link [ 347.571363][T13666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2360'. [ 347.935881][T13663] lo speed is unknown, defaulting to 1000 [ 348.033505][T13663] wg1 speed is unknown, defaulting to 1000 [ 348.301910][T13682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2365'. [ 348.494947][T13680] netlink: 'syz.1.2364': attribute type 1 has an invalid length. [ 348.510854][T13680] nbd: error processing sock list [ 348.518011][T13688] syzkaller1: entered promiscuous mode [ 348.526708][T13680] block nbd1: shutting down sockets [ 348.536858][T13688] syzkaller1: entered allmulticast mode [ 348.692956][T13689] netlink: 'syz.0.2366': attribute type 1 has an invalid length. [ 348.713849][T13692] ieee802154 phy0 wpan0: encryption failed: -90 [ 349.355051][T13705] can: request_module (can-proto-0) failed. [ 349.884669][T13722] netlink: 'syz.1.2378': attribute type 10 has an invalid length. [ 350.005383][T13726] veth1_to_team: entered allmulticast mode [ 350.021501][T13726] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 350.100894][T13730] bond2: entered promiscuous mode [ 350.106906][T13730] 8021q: adding VLAN 0 to HW filter on device bond2 [ 351.032162][T13773] tipc: Enabling of bearer rejected, failed to enable media [ 351.041639][T13770] lo speed is unknown, defaulting to 1000 [ 351.048463][T13773] __nla_validate_parse: 3 callbacks suppressed [ 351.048483][T13773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2393'. [ 351.066174][T13770] wg1 speed is unknown, defaulting to 1000 [ 351.332265][T13777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2395'. [ 351.437035][T13782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2397'. [ 351.634249][T13790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2401'. [ 351.636486][T13785] lo speed is unknown, defaulting to 1000 [ 351.659233][T13793] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2402'. [ 351.796099][T13798] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2400'. [ 351.820011][T13798] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2400'. [ 351.955972][ T12] bond0: (slave bond_slave_0): interface is now down [ 351.966555][T13799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.982251][ T12] bond0: (slave bond_slave_1): interface is now down [ 351.989453][ T12] bond0: (slave wlan1): interface is now down [ 352.004736][T13799] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 352.030925][ T12] bond0: (slave batadv0): interface is now down [ 352.052705][T13808] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 352.061744][ T1111] bond0: (slave bond_slave_0): interface is now down [ 352.068481][ T1111] bond0: (slave bond_slave_1): interface is now down [ 352.100838][ T1111] bond0: (slave wlan1): interface is now down [ 352.107162][ T1111] bond0: (slave batadv0): interface is now down [ 352.204603][ T1111] bond0: (slave bond_slave_0): interface is now down [ 352.226695][ T1111] bond0: (slave bond_slave_1): interface is now down [ 352.229581][T13785] wg1 speed is unknown, defaulting to 1000 [ 352.253061][ T1111] bond0: (slave wlan1): interface is now down [ 352.269104][ T1111] bond0: (slave batadv0): interface is now down [ 352.285355][T13811] netlink: 'syz.1.2406': attribute type 13 has an invalid length. [ 352.309180][T13811] netlink: 'syz.1.2406': attribute type 17 has an invalid length. [ 352.321327][ T1155] bond0: (slave bond_slave_0): interface is now down [ 352.328146][ T1155] bond0: (slave bond_slave_1): interface is now down [ 352.379125][ T1155] bond0: (slave wlan1): interface is now down [ 352.399571][ T1155] bond0: (slave batadv0): interface is now down [ 352.440096][ T1155] bond0: (slave bond_slave_0): interface is now down [ 352.449147][ T1155] bond0: (slave bond_slave_1): interface is now down [ 352.477340][T13813] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2406'. [ 352.493423][ T1155] bond0: (slave wlan1): interface is now down [ 352.507559][ T1155] bond0: (slave batadv0): interface is now down [ 352.534365][ T1155] bond0: (slave bond_slave_0): interface is now down [ 352.548958][T13811] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.556085][ T1155] bond0: (slave bond_slave_1): interface is now down [ 352.556128][ T1155] bond0: (slave wlan1): interface is now down [ 352.556143][ T1155] bond0: (slave batadv0): interface is now down [ 352.573891][ T1155] bond0: (slave bond_slave_0): interface is now down [ 352.590406][T13814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 352.612687][ T1155] bond0: (slave bond_slave_1): interface is now down [ 352.619509][ T1155] bond0: (slave wlan1): interface is now down [ 352.640112][ T1155] bond0: (slave batadv0): interface is now down [ 352.685718][ T1155] bond0: (slave bond_slave_0): interface is now down [ 352.701622][ T1155] bond0: (slave bond_slave_1): interface is now down [ 352.710619][ T1155] bond0: (slave wlan1): interface is now down [ 352.731490][ T1155] bond0: (slave batadv0): interface is now down [ 352.733628][T13814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 352.752769][ T12] bond0: (slave bond_slave_0): interface is now down [ 352.759523][ T12] bond0: (slave bond_slave_1): interface is now down [ 352.770091][T13811] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 352.782902][ T12] bond0: (slave wlan1): interface is now down [ 352.807362][ T12] bond0: (slave batadv0): interface is now down [ 352.844257][ T12] bond0: (slave bond_slave_0): interface is now down [ 352.866677][ T12] bond0: (slave bond_slave_1): interface is now down [ 352.882115][T13811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 352.884432][ T12] bond0: (slave wlan1): interface is now down [ 352.916318][ T12] bond0: (slave batadv0): interface is now down [ 352.941739][ T1111] bond0: (slave bond_slave_0): interface is now down [ 352.944952][T13812] lo speed is unknown, defaulting to 1000 [ 352.958472][ T1111] bond0: (slave bond_slave_1): interface is now down [ 352.980571][ T1111] bond0: (slave wlan1): interface is now down [ 352.996030][ T1111] bond0: (slave batadv0): interface is now down [ 353.033863][ T1111] bond0: now running without any active interface! [ 353.213685][T13812] wg1 speed is unknown, defaulting to 1000 [ 353.529370][T13828] netlink: 'syz.0.2411': attribute type 13 has an invalid length. [ 353.534326][T13827] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2410'. [ 353.541537][T13828] netlink: 'syz.0.2411': attribute type 17 has an invalid length. [ 353.565657][T13827] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 353.777790][T13828] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 353.800321][ T5910] lo speed is unknown, defaulting to 1000 [ 353.833269][ T5910] syz2: Port: 1 Link ACTIVE [ 354.112646][T13830] lo speed is unknown, defaulting to 1000 [ 354.164192][T13830] wg1 speed is unknown, defaulting to 1000 [ 354.404495][T13825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.865865][T13845] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2415'. [ 354.886604][T13843] hsr0: left allmulticast mode [ 354.913755][T13843] hsr_slave_0: left allmulticast mode [ 354.955384][T13843] hsr_slave_1: left allmulticast mode [ 354.985839][T13843] hsr0: left promiscuous mode [ 355.010211][T13843] macvlan9: left promiscuous mode [ 355.028824][T13843] macvlan9: left allmulticast mode [ 355.448222][T13861] lo speed is unknown, defaulting to 1000 [ 355.459470][T13861] wg1 speed is unknown, defaulting to 1000 [ 355.689610][T13875] netlink: 'syz.2.2424': attribute type 1 has an invalid length. [ 356.012815][T13883] sctp: [Deprecated]: syz.1.2428 (pid 13883) Use of struct sctp_assoc_value in delayed_ack socket option. [ 356.012815][T13883] Use struct sctp_sack_info instead [ 356.576767][T13888] bond0: entered promiscuous mode [ 356.582909][T13888] bond_slave_0: entered promiscuous mode [ 356.588936][T13888] bond_slave_1: entered promiscuous mode [ 356.595052][T13888] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 356.605343][T13888] bond0: left promiscuous mode [ 356.610334][T13888] bond_slave_0: left promiscuous mode [ 356.616301][T13888] bond_slave_1: left promiscuous mode [ 356.631155][T13888] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 357.766326][T13923] __nla_validate_parse: 3 callbacks suppressed [ 357.766356][T13923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2441'. [ 357.824699][T13921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2440'. [ 357.866105][T13921] netlink: 388 bytes leftover after parsing attributes in process `syz.1.2440'. [ 357.921172][T13929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2443'. [ 358.121185][T13935] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2445'. [ 358.151079][T13935] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2445'. [ 358.168306][T13935] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2445'. [ 358.208178][T13935] veth0: mtu less than device minimum [ 358.302970][T13943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2447'. [ 358.885391][T13964] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2453'. [ 358.902465][T13969] tipc: Enabling of bearer rejected, failed to enable media [ 358.913937][T13964] tipc: Enabled bearer , priority 0 [ 358.941461][T13964] syzkaller0: entered promiscuous mode [ 358.947411][T13964] syzkaller0: entered allmulticast mode [ 359.014993][T13979] sctp: [Deprecated]: syz.0.2455 (pid 13979) Use of struct sctp_assoc_value in delayed_ack socket option. [ 359.014993][T13979] Use struct sctp_sack_info instead [ 359.092616][T13984] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) ! [ 359.139649][T13981] tipc: Resetting bearer [ 359.358641][T13994] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2458'. [ 359.372877][T13963] tipc: Resetting bearer [ 359.537119][T13963] tipc: Disabling bearer [ 359.742962][T13999] vlan0: entered promiscuous mode [ 360.270564][T14005] bond0: entered promiscuous mode [ 360.281461][T14005] bond_slave_0: entered promiscuous mode [ 360.287405][T14005] bond_slave_1: entered promiscuous mode [ 360.339957][T14005] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 360.427286][T14005] batadv0: entered promiscuous mode [ 360.501208][T14005] bond0: entered allmulticast mode [ 360.509499][T14005] bond_slave_0: entered allmulticast mode [ 360.529754][T14005] bond_slave_1: entered allmulticast mode [ 360.551548][T14005] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 360.597528][T14005] batadv0: entered allmulticast mode [ 360.689811][T14012] xt_CT: No such helper "syz0" [ 361.322779][T14030] syzkaller0: entered promiscuous mode [ 361.344158][T14030] syzkaller0: entered allmulticast mode [ 361.965462][T14050] : entered promiscuous mode [ 362.429334][T14069] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 362.475403][T14069] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 362.528863][T14072] netlink: 'syz.3.2483': attribute type 25 has an invalid length. [ 363.096837][T14102] __nla_validate_parse: 5 callbacks suppressed [ 363.096857][T14102] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2493'. [ 363.180688][T14100] syzkaller0: entered promiscuous mode [ 363.197403][T14100] syzkaller0: entered allmulticast mode [ 363.273617][T14108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2495'. [ 363.392998][T14108] macvtap1: entered promiscuous mode [ 363.398877][T14108] veth2: entered promiscuous mode [ 363.430947][T14108] macvtap1: entered allmulticast mode [ 363.436745][T14108] veth2: entered allmulticast mode [ 363.462367][T14119] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2498'. [ 365.815454][T14128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2501'. [ 365.914547][T14141] netlink: 212892 bytes leftover after parsing attributes in process `syz.3.2503'. [ 366.513833][T14169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2514'. [ 366.997072][T14181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2516'. [ 367.678788][T14201] netlink: 'syz.4.2520': attribute type 13 has an invalid length. [ 367.713303][T14201] netlink: 'syz.4.2520': attribute type 17 has an invalid length. [ 367.848919][T14201] bond0: left promiscuous mode [ 367.880063][T14201] bond_slave_0: left promiscuous mode [ 367.915134][T14201] bond_slave_1: left promiscuous mode [ 367.951959][T14201] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 367.959212][T14201] batadv0: left promiscuous mode [ 368.031082][T14201] bond0: left allmulticast mode [ 368.038370][T14216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 368.057445][T14201] bond_slave_0: left allmulticast mode [ 368.079138][T14216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 368.082023][T14201] bond_slave_1: left allmulticast mode [ 368.095586][T14201] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 368.103070][T14201] batadv0: left allmulticast mode [ 368.134010][T14201] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 368.170463][T14221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2525'. [ 368.407371][T14228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2528'. [ 368.420520][T14229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2527'. [ 368.741795][T14241] syzkaller1: entered promiscuous mode [ 368.756646][T14241] syzkaller1: entered allmulticast mode [ 369.253477][T14250] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2535'. [ 369.282486][T14252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2537'. [ 369.332418][T14247] lo speed is unknown, defaulting to 1000 [ 369.369016][T14247] wg1 speed is unknown, defaulting to 1000 [ 369.374508][T14250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 369.469598][T14250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 369.555411][T14261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2540'. [ 369.803140][T14270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2545'. [ 369.987963][T14276] vlan0: entered allmulticast mode [ 370.005900][T14276] bond3: entered allmulticast mode [ 370.480945][T14298] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2555'. [ 370.622894][T14299] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2555'. [ 371.248093][T14329] netlink: 'syz.3.2563': attribute type 11 has an invalid length. [ 371.256253][T14329] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2563'. [ 371.455387][T14337] tipc: Enabled bearer , priority 0 [ 371.505602][T14337] tipc: Resetting bearer [ 371.551855][T14334] tipc: Disabling bearer [ 371.894071][T14357] netlink: 'syz.3.2573': attribute type 1 has an invalid length. [ 372.462729][T14371] netlink: 'syz.1.2577': attribute type 1 has an invalid length. [ 372.470523][T14371] netlink: 'syz.1.2577': attribute type 4 has an invalid length. [ 373.009882][T14386] IPVS: Scheduler module ip_vs_sip not found [ 373.024512][T14391] netlink: 'syz.1.2581': attribute type 1 has an invalid length. [ 373.052612][T14390] IPVS: length: 8 != 446622349272 [ 373.056089][T14391] netlink: 'syz.1.2581': attribute type 1 has an invalid length. [ 373.259916][T14399] __nla_validate_parse: 4 callbacks suppressed [ 373.259940][T14399] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2585'. [ 373.291949][T14399] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 373.633459][T14415] netlink: 'syz.1.2591': attribute type 11 has an invalid length. [ 373.981677][T14427] netlink: 'syz.0.2590': attribute type 10 has an invalid length. [ 374.011490][T14426] bridge_slave_0: default FDB implementation only supports local addresses [ 374.079913][T14428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2592'. [ 374.234857][T14435] wg1 speed is unknown, defaulting to 1000 [ 374.924835][T14461] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2601'. [ 374.945741][T14462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2602'. [ 375.016518][T14461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2601'. [ 375.091432][T14465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2603'. [ 375.136131][T14465] team1: entered promiscuous mode [ 375.147039][T14465] team1: entered allmulticast mode [ 375.224033][T14469] netlink: 'syz.4.2605': attribute type 12 has an invalid length. [ 375.295177][T14474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2607'. [ 375.320223][T14474] gtp1: entered promiscuous mode [ 375.328023][T14474] gtp1: entered allmulticast mode [ 375.881128][ T5856] Bluetooth: hci4: command 0x0405 tx timeout [ 376.635944][T14513] netlink: 'syz.4.2621': attribute type 2 has an invalid length. [ 376.725600][T14513] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2621'. [ 376.867703][T14522] netlink: 'syz.2.2623': attribute type 1 has an invalid length. [ 376.876304][T14522] netlink: 'syz.2.2623': attribute type 2 has an invalid length. [ 376.886406][T14522] netlink: 'syz.2.2623': attribute type 1 has an invalid length. [ 376.894973][T14522] netlink: 'syz.2.2623': attribute type 2 has an invalid length. [ 377.436240][T14528] wg1 speed is unknown, defaulting to 1000 [ 378.206227][T14529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.420140][T14529] bond0: (slave rose0): Enslaving as an active interface with an up link [ 381.859560][T14552] gre0: entered allmulticast mode [ 384.358148][T14560] Set syz1 is full, maxelem 65536 reached [ 385.607090][T14558] gre0: left allmulticast mode [ 385.657057][T14558] team1: left promiscuous mode [ 385.685942][T14558] team1: left allmulticast mode [ 385.747208][T14558] gtp1: left promiscuous mode [ 385.778370][T14558] gtp1: left allmulticast mode [ 387.246837][T14569] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2638'. [ 388.336206][T14575] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2639'. [ 391.709029][ T5856] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 391.783866][ T5856] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 391.818549][ T9820] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 391.894674][ T9820] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 391.899866][ T5856] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 391.939126][ T5856] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 391.980258][ T5856] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 392.100229][ T5850] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 392.196410][ T5850] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 392.236101][ T5850] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 392.440341][T14600] wg1 speed is unknown, defaulting to 1000 [ 392.464369][T14603] Set syz1 is full, maxelem 65536 reached [ 394.128892][ T5850] Bluetooth: hci5: command tx timeout [ 394.278520][T14598] wg1 speed is unknown, defaulting to 1000 [ 394.364013][ T5850] Bluetooth: hci6: command tx timeout [ 395.380280][ T5169] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 395.456743][ T5169] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 395.493814][ T5169] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 395.619547][ T5169] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 395.725020][ T5169] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 396.213785][ T5850] Bluetooth: hci5: command tx timeout [ 396.454198][ T5850] Bluetooth: hci6: command tx timeout [ 396.698175][T14617] wg1 speed is unknown, defaulting to 1000 [ 396.949619][T14600] chnl_net:caif_netlink_parms(): no params data found [ 397.884641][ T5850] Bluetooth: hci7: command tx timeout [ 398.287292][ T5850] Bluetooth: hci5: command tx timeout [ 398.535764][ T5850] Bluetooth: hci6: command tx timeout [ 398.867331][T14635] netlink: 'syz.4.2655': attribute type 7 has an invalid length. [ 399.000520][T14635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2655'. [ 399.237954][T14600] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.289617][T14600] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.317147][T14600] bridge_slave_0: entered allmulticast mode [ 399.380621][T14600] bridge_slave_0: entered promiscuous mode [ 399.582405][T14600] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.589618][T14600] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.668223][T14600] bridge_slave_1: entered allmulticast mode [ 399.698563][T14600] bridge_slave_1: entered promiscuous mode [ 399.976121][ T5850] Bluetooth: hci7: command tx timeout [ 400.067898][T14638] Set syz1 is full, maxelem 65536 reached [ 400.369276][ T5850] Bluetooth: hci5: command tx timeout [ 400.623846][ T5850] Bluetooth: hci6: command tx timeout [ 400.719000][T14600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.980309][T14647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.084657][T14600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.754547][T14600] team0: Port device team_slave_0 added [ 401.819259][T14600] team0: Port device team_slave_1 added [ 401.873369][T14598] chnl_net:caif_netlink_parms(): no params data found [ 402.048294][ T5850] Bluetooth: hci7: command tx timeout [ 402.729536][ T30] audit: type=1800 audit(1753116261.988:6): pid=14642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2657" name="memory.events" dev="tmpfs" ino=3002 res=0 errno=0 [ 402.839520][T14600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.889575][T14600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.004982][T14600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.049128][T14600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.087828][T14600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.157828][T14600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.125074][ T5850] Bluetooth: hci7: command tx timeout [ 404.417693][T14657] Bluetooth: MGMT ver 1.23 [ 404.647180][T14598] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.674438][T14598] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.698342][T14598] bridge_slave_0: entered allmulticast mode [ 404.736567][T14657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2659'. [ 404.749600][T14598] bridge_slave_0: entered promiscuous mode [ 404.790304][T14598] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.835924][T14598] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.866032][T14598] bridge_slave_1: entered allmulticast mode [ 404.918981][T14598] bridge_slave_1: entered promiscuous mode [ 405.196740][T14600] hsr_slave_0: entered promiscuous mode [ 405.226003][T14600] hsr_slave_1: entered promiscuous mode [ 405.256348][T14600] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 405.299290][T14600] Cannot create hsr debugfs directory [ 405.330651][T14617] chnl_net:caif_netlink_parms(): no params data found [ 405.937507][T14598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.405913][T14598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.249160][T14598] team0: Port device team_slave_0 added [ 407.267147][T14675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2664'. [ 407.773786][T14673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2663'. [ 407.819072][T14598] team0: Port device team_slave_1 added [ 407.990676][T14617] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.047900][T14617] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.080250][T14617] bridge_slave_0: entered allmulticast mode [ 408.110429][T14617] bridge_slave_0: entered promiscuous mode [ 408.409149][T14598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.484804][T14598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.606682][T14680] sctp: [Deprecated]: syz.4.2665 (pid 14680) Use of struct sctp_assoc_value in delayed_ack socket option. [ 408.606682][T14680] Use struct sctp_sack_info instead [ 408.646537][T14598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.776800][T14617] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.828031][T14617] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.865171][T14617] bridge_slave_1: entered allmulticast mode [ 408.905894][T14617] bridge_slave_1: entered promiscuous mode [ 409.156701][T14598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.210423][T14598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.299617][T14598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.880288][T14617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.739526][T14617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.349416][T14598] hsr_slave_0: entered promiscuous mode [ 411.388512][T14598] hsr_slave_1: entered promiscuous mode [ 411.436626][T14598] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 411.499434][T14598] Cannot create hsr debugfs directory [ 411.740100][T14617] team0: Port device team_slave_0 added [ 412.436591][T14690] !: renamed from dummy0 [ 413.052707][T14617] team0: Port device team_slave_1 added [ 414.107972][T14617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.169976][T14617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.343642][T14617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.970651][T14617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.997460][T14617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.114208][T14617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.379067][T14705] wg1 speed is unknown, defaulting to 1000 [ 416.814165][T14617] hsr_slave_0: entered promiscuous mode [ 416.897364][T14617] hsr_slave_1: entered promiscuous mode [ 416.917727][T14617] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 416.964844][T14617] Cannot create hsr debugfs directory [ 417.535764][T14600] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 417.646285][T14600] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 418.168294][T14600] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 418.297102][T14600] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 420.166217][T14725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2672'. [ 420.217568][T14598] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 420.894979][T14598] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 421.145165][T14598] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 421.337432][T14727] netlink: 'syz.4.2673': attribute type 4 has an invalid length. [ 421.405328][T14598] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 422.771376][T14617] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 422.896881][T14617] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 423.078771][T14617] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 423.187962][T14617] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 423.850577][T14600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.099107][T14744] ip6t_REJECT: ECHOREPLY is not supported [ 424.302244][T14744] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2675'. [ 424.415701][T14600] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.744042][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.753375][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.869526][T14598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.148052][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.156804][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.178822][T14747] siw: device registration error -23 [ 425.715881][T14598] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.936490][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.945640][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.169044][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.176965][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.356827][T14600] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 426.969626][T14617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.799656][T14617] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.207673][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.216723][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.330173][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.338858][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.490083][T14617] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 429.739524][T14600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.688364][T14598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.719213][ T5169] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 430.836131][ T5169] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 430.906006][ T5169] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 431.006198][ T5169] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 431.126084][ T5169] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 431.770250][T14771] wg1 speed is unknown, defaulting to 1000 [ 431.844364][T14775] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 432.609665][T14617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.634058][T14777] netlink: 'syz.4.2680': attribute type 10 has an invalid length. [ 432.748318][T14777] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 433.325097][ T5169] Bluetooth: hci8: command tx timeout [ 434.189255][T14600] veth0_vlan: entered promiscuous mode [ 434.714170][T14600] veth1_vlan: entered promiscuous mode [ 435.408178][ T5169] Bluetooth: hci8: command tx timeout [ 435.415422][T14598] veth0_vlan: entered promiscuous mode [ 435.562050][T14598] veth1_vlan: entered promiscuous mode [ 436.138069][T14600] veth0_macvtap: entered promiscuous mode [ 436.207795][T14600] veth1_macvtap: entered promiscuous mode [ 437.119769][T14600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.485982][ T5169] Bluetooth: hci8: command tx timeout [ 437.529828][T14600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.854196][T14598] veth0_macvtap: entered promiscuous mode [ 437.914992][T14617] veth0_vlan: entered promiscuous mode [ 437.938888][ T1111] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.997310][ T1111] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.340212][T14598] veth1_macvtap: entered promiscuous mode [ 438.416163][ T1111] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.455503][ T1111] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.766290][T14771] chnl_net:caif_netlink_parms(): no params data found [ 438.950218][T14617] veth1_vlan: entered promiscuous mode [ 439.510596][T14810] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2683'. [ 439.568781][ T5169] Bluetooth: hci8: command tx timeout [ 439.596213][T14598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.989092][T14598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 440.238104][T14815] siw: device registration error -23 [ 440.415785][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.437290][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.876677][T14617] veth0_macvtap: entered promiscuous mode [ 441.017989][ T1097] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.058114][ T1111] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.279533][T14771] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.329906][T14771] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.387701][T14771] bridge_slave_0: entered allmulticast mode [ 441.407700][T14771] bridge_slave_0: entered promiscuous mode [ 441.546781][ T1111] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.619750][ T37] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.718588][T14771] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.786124][T14771] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.846820][T14771] bridge_slave_1: entered allmulticast mode [ 441.898523][T14771] bridge_slave_1: entered promiscuous mode [ 442.141410][T14617] veth1_macvtap: entered promiscuous mode [ 442.204097][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.238589][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.399481][T14819] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2685'. [ 442.559135][T14771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.897945][T14771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.528534][T14771] team0: Port device team_slave_0 added [ 443.609904][T14617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.054973][T14771] team0: Port device team_slave_1 added [ 444.389971][T14617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.615803][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.699446][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.934250][T14771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.987069][T14771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.108215][T14771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.198617][T14771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.268001][T14771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.396140][T14771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.486357][T14831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2688'. [ 445.604825][ T1111] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.052145][ T60] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.110120][ T60] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.596291][ T60] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.210196][T14771] hsr_slave_0: entered promiscuous mode [ 447.249488][T14771] hsr_slave_1: entered promiscuous mode [ 447.300345][T14771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 447.340363][T14771] Cannot create hsr debugfs directory [ 447.678313][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.724918][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.009683][T14856] siw: device registration error -23 [ 451.175089][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.266052][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.009305][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.129690][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.409953][T14771] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 453.977180][ T5850] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 454.048827][ T5850] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 454.090522][ T5850] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 454.210590][ T5850] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 454.349320][ T5850] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 455.409418][T14771] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 455.700278][T14771] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 455.959464][T14771] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 456.607822][ T5169] Bluetooth: hci5: command tx timeout [ 456.812971][ T5850] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 456.889787][ T5850] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 456.948405][ T5850] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 457.017085][ T5850] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 457.088955][ T5850] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 458.686740][ T5850] Bluetooth: hci5: command tx timeout [ 458.968397][T14864] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.979598][T14864] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.335657][ T5850] Bluetooth: hci9: command tx timeout [ 460.766009][ T5850] Bluetooth: hci5: command tx timeout [ 461.404040][ T5850] Bluetooth: hci9: command tx timeout [ 461.414606][T14864] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 461.600284][T14864] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.846237][ T5850] Bluetooth: hci5: command tx timeout [ 463.486152][ T5850] Bluetooth: hci9: command tx timeout [ 464.605119][T14859] wg1 speed is unknown, defaulting to 1000 [ 465.364324][ T36] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.426335][ T36] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.567754][ T5850] Bluetooth: hci9: command tx timeout [ 465.609363][T14877] netlink: 'syz.6.2694': attribute type 13 has an invalid length. [ 465.660195][T14877] netlink: 'syz.6.2694': attribute type 17 has an invalid length. [ 466.088078][ T37] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.474470][ T36] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.566724][ T36] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.940262][T14877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.960626][ T5169] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 467.999025][T14877] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.012786][ T5169] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 468.048308][ T5169] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 468.094574][ T5169] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 468.137061][ T5169] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 468.340544][T14877] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 468.659594][ T37] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.940247][T14861] wg1 speed is unknown, defaulting to 1000 [ 469.402000][ T37] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.130338][ T37] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.284207][ T5169] Bluetooth: hci7: command tx timeout [ 470.473721][T14869] wg1 speed is unknown, defaulting to 1000 [ 472.377108][ T5169] Bluetooth: hci7: command tx timeout [ 472.514247][T14883] wg1 speed is unknown, defaulting to 1000 [ 472.808530][ T37] bridge_slave_1: left allmulticast mode [ 472.836231][ T37] bridge_slave_1: left promiscuous mode [ 472.905538][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.047081][ T37] bridge_slave_0: left allmulticast mode [ 473.069402][ T37] bridge_slave_0: left promiscuous mode [ 473.128029][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.446174][ T5169] Bluetooth: hci7: command tx timeout [ 476.259838][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 476.379555][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 476.485350][ T37] bond0 (unregistering): Released all slaves [ 476.525172][ T5169] Bluetooth: hci7: command tx timeout [ 476.994761][T14884] wg1 speed is unknown, defaulting to 1000 [ 478.198778][T14771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.468548][T14861] chnl_net:caif_netlink_parms(): no params data found [ 480.747850][T14771] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.157565][ T5850] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 481.190349][ T5850] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 481.228934][ T5850] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 481.346397][ T5850] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 481.426342][ T5850] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 481.489091][T14861] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.586112][T14861] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.634765][T14861] bridge_slave_0: entered allmulticast mode [ 481.664078][T14861] bridge_slave_0: entered promiscuous mode [ 481.698550][T14861] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.739629][T14861] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.780141][T14861] bridge_slave_1: entered allmulticast mode [ 481.807003][T14861] bridge_slave_1: entered promiscuous mode [ 481.947539][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.957354][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.513521][ T3577] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.523506][ T3577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.745275][T14861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.796495][T14861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.282929][T14895] wg1 speed is unknown, defaulting to 1000 [ 483.565356][ T5850] Bluetooth: hci10: command tx timeout [ 483.826448][T14861] team0: Port device team_slave_0 added [ 483.890228][T14861] team0: Port device team_slave_1 added [ 484.043913][T14869] chnl_net:caif_netlink_parms(): no params data found [ 484.858951][T14884] chnl_net:caif_netlink_parms(): no params data found [ 485.130283][T14861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.164698][T14861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.197253][T14861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.233697][T14861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.246377][T14861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.290059][T14861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.643671][ T5850] Bluetooth: hci10: command tx timeout [ 486.466817][T14861] hsr_slave_0: entered promiscuous mode [ 486.490268][T14861] hsr_slave_1: entered promiscuous mode [ 486.504009][T14861] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 486.519023][T14861] Cannot create hsr debugfs directory [ 487.305906][T14869] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.338049][T14869] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.379557][T14869] bridge_slave_0: entered allmulticast mode [ 487.416099][T14869] bridge_slave_0: entered promiscuous mode [ 487.508934][T14869] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.528213][T14869] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.577612][T14869] bridge_slave_1: entered allmulticast mode [ 487.630336][T14869] bridge_slave_1: entered promiscuous mode [ 487.723893][ T5850] Bluetooth: hci10: command tx timeout [ 487.939905][T14884] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.976268][T14884] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.005292][T14884] bridge_slave_0: entered allmulticast mode [ 488.049422][T14884] bridge_slave_0: entered promiscuous mode [ 488.878787][T14884] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.917458][T14884] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.977793][T14884] bridge_slave_1: entered allmulticast mode [ 489.030294][T14884] bridge_slave_1: entered promiscuous mode [ 489.398060][T14869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.527210][T14869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.804917][ T5850] Bluetooth: hci10: command tx timeout [ 489.856307][ T5169] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 489.893064][ T5169] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 489.919139][ T5169] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 489.979421][ T5169] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 490.010638][ T5169] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 490.298503][T14884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.138171][T14884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.395702][T14869] team0: Port device team_slave_0 added [ 491.840273][T14869] team0: Port device team_slave_1 added [ 492.205164][ T5169] Bluetooth: hci11: command tx timeout [ 492.410631][T14884] team0: Port device team_slave_0 added [ 492.450041][T14884] team0: Port device team_slave_1 added [ 492.647031][T14869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 492.668798][T14869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.709057][T14869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 492.966762][T14913] wg1 speed is unknown, defaulting to 1000 [ 493.399368][T14869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.435950][T14869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.504111][T14869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.850557][T14884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.887464][T14884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.035318][T14884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.096346][T14884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.148560][T14884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.257789][T14884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.288005][ T5169] Bluetooth: hci11: command tx timeout [ 495.088416][T14869] hsr_slave_0: entered promiscuous mode [ 495.097449][T14869] hsr_slave_1: entered promiscuous mode [ 495.114761][T14869] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 495.137886][T14869] Cannot create hsr debugfs directory [ 495.367811][T14895] chnl_net:caif_netlink_parms(): no params data found [ 495.546121][T14884] hsr_slave_0: entered promiscuous mode [ 495.573367][T14884] hsr_slave_1: entered promiscuous mode [ 495.580102][T14884] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 495.614205][T14884] Cannot create hsr debugfs directory [ 496.363553][ T5169] Bluetooth: hci11: command tx timeout [ 497.569554][T14895] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.595197][T14895] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.626016][T14895] bridge_slave_0: entered allmulticast mode [ 497.648677][T14895] bridge_slave_0: entered promiscuous mode [ 497.984783][T14895] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.019816][T14895] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.047676][T14895] bridge_slave_1: entered allmulticast mode [ 498.105915][T14895] bridge_slave_1: entered promiscuous mode [ 498.457470][ T5169] Bluetooth: hci11: command tx timeout [ 499.455997][T14895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.556134][T14895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.225934][T14895] team0: Port device team_slave_0 added [ 500.247966][T14861] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 500.380340][T14913] chnl_net:caif_netlink_parms(): no params data found [ 500.454659][T14895] team0: Port device team_slave_1 added [ 500.577455][T14861] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 500.869253][T14869] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.258789][T14861] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 501.503609][T14869] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.856389][T14895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.868191][T14895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.905697][T14895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.927436][T14895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.945813][T14895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.984624][T14895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.010383][T14861] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 502.276521][T14869] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.950604][T14869] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.531653][T14913] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.539038][T14913] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.598575][T14913] bridge_slave_0: entered allmulticast mode [ 503.626789][T14913] bridge_slave_0: entered promiscuous mode [ 503.678162][T14913] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.708435][T14913] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.736584][T14913] bridge_slave_1: entered allmulticast mode [ 503.755800][T14913] bridge_slave_1: entered promiscuous mode [ 504.300328][T14895] hsr_slave_0: entered promiscuous mode [ 504.337637][T14895] hsr_slave_1: entered promiscuous mode [ 504.377581][T14895] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 504.406037][T14895] Cannot create hsr debugfs directory [ 504.685470][T14913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.958621][T14913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.576306][T14913] team0: Port device team_slave_0 added [ 505.627621][T14913] team0: Port device team_slave_1 added [ 506.198490][T14913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 506.239621][T14913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.304367][T14913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.599811][T14913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.629101][T14913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.678566][T14913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 507.048337][T14884] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 507.345537][T14884] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 507.444798][T14884] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 508.017574][T14884] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 508.198776][T14913] hsr_slave_0: entered promiscuous mode [ 508.219076][T14913] hsr_slave_1: entered promiscuous mode [ 508.269647][T14913] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 508.318087][T14913] Cannot create hsr debugfs directory [ 509.219110][T14869] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 509.742512][T14869] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 510.124828][T14869] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 510.666095][T14869] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 513.267584][ T5856] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 513.310133][ T5856] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 513.346888][ T5856] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 513.450165][ T5856] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 513.498442][ T5856] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 514.523990][ T5856] Bluetooth: hci6: command 0x0406 tx timeout [ 515.660478][T14945] wg1 speed is unknown, defaulting to 1000 [ 515.679187][T14884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.736092][ T5169] Bluetooth: hci8: command tx timeout [ 516.014270][T14884] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.138064][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.147250][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.387968][ T3577] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.397279][ T3577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.678611][ T5856] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 516.704294][ T5856] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 516.786354][ T5856] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 516.917657][ T5856] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 516.978958][ T5856] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 517.815785][ T5856] Bluetooth: hci8: command tx timeout [ 518.359291][T14895] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 518.470139][T14895] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 518.658883][T14948] wg1 speed is unknown, defaulting to 1000 [ 518.759575][T14895] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 518.869475][T14895] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 519.164999][ T5856] Bluetooth: hci5: command tx timeout [ 519.886660][ T5856] Bluetooth: hci8: command tx timeout [ 520.809094][T14913] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 521.186166][T14913] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 521.247817][ T5856] Bluetooth: hci5: command tx timeout [ 521.295744][T14913] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 521.690407][T14913] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 521.966140][ T5856] Bluetooth: hci8: command tx timeout [ 523.037124][T14884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 523.339259][ T5856] Bluetooth: hci5: command tx timeout [ 523.804392][T14945] chnl_net:caif_netlink_parms(): no params data found [ 525.072951][T14948] chnl_net:caif_netlink_parms(): no params data found [ 525.404701][ T5856] Bluetooth: hci5: command tx timeout [ 525.908537][T14945] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.930033][T14945] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.960535][T14945] bridge_slave_0: entered allmulticast mode [ 525.994046][T14945] bridge_slave_0: entered promiscuous mode [ 526.096140][T14895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.516291][T14945] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.548807][T14945] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.580431][T14945] bridge_slave_1: entered allmulticast mode [ 526.595393][T14945] bridge_slave_1: entered promiscuous mode [ 527.238755][T14945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.326660][T14945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 528.456423][T14895] 8021q: adding VLAN 0 to HW filter on device team0 [ 528.918170][T14945] team0: Port device team_slave_0 added [ 528.938811][ T5169] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 528.969169][ T5169] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 529.016661][ T5169] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 529.047465][T14945] team0: Port device team_slave_1 added [ 529.108021][ T5169] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 529.165772][ T5169] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 529.664075][T14948] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.737816][T14948] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.755652][T14948] bridge_slave_0: entered allmulticast mode [ 529.798389][T14948] bridge_slave_0: entered promiscuous mode [ 529.860060][T14948] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.879477][T14948] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.898605][T14948] bridge_slave_1: entered allmulticast mode [ 529.924356][T14948] bridge_slave_1: entered promiscuous mode [ 530.347295][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.355955][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.657751][T14945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.688800][T14945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.739596][T14945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.777480][T14945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.818872][T14945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.867017][T14945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 531.016913][T14948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 531.079532][T14948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 531.326912][ T5169] Bluetooth: hci7: command tx timeout [ 531.387972][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.397792][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.985740][T14985] wg1 speed is unknown, defaulting to 1000 [ 532.038964][T14913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 532.105448][T14948] team0: Port device team_slave_0 added [ 532.139903][T14948] team0: Port device team_slave_1 added [ 532.516812][T14945] hsr_slave_0: entered promiscuous mode [ 532.599452][T14945] hsr_slave_1: entered promiscuous mode [ 532.665296][T14945] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 532.698430][T14945] Cannot create hsr debugfs directory [ 533.180234][T14948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 533.229024][T14948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.307104][T14948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 533.403797][ T5169] Bluetooth: hci7: command tx timeout [ 533.577003][ T31] INFO: task syz.3.2592:14428 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 533.617215][ T31] Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 [ 533.654812][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 533.696910][ T31] task:syz.3.2592 state:D stack:25032 pid:14428 tgid:14422 ppid:5852 task_flags:0x400140 flags:0x00004006 [ 533.806327][ T31] Call Trace: [ 533.809695][ T31] [ 533.876500][ T31] __schedule+0x16f5/0x4d00 [ 533.915014][ T31] ? schedule+0x165/0x360 [ 533.919605][ T31] ? __lock_acquire+0xab9/0xd20 [ 533.988995][ T31] ? __pfx___schedule+0x10/0x10 [ 534.013475][ T31] ? schedule+0x91/0x360 [ 534.017795][ T31] schedule+0x165/0x360 [ 534.036466][ T31] schedule_timeout+0x9a/0x270 [ 534.049124][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 534.074212][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 534.079483][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 534.105112][ T31] ? wait_for_completion+0x267/0x5d0 [ 534.110620][ T31] wait_for_completion+0x2bf/0x5d0 [ 534.152403][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 534.158327][ T31] ? up_write+0x1c4/0x420 [ 534.167307][ T31] ? remove_client_context+0xc0/0x1e0 [ 534.191467][ T31] disable_device+0x1c6/0x320 [ 534.196239][ T31] ? __pfx_disable_device+0x10/0x10 [ 534.209910][ T31] __ib_unregister_device+0x2cb/0x3f0 [ 534.228655][ T31] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 534.269311][ T31] ib_unregister_device_and_put+0xb8/0xf0 [ 534.284134][ T31] nldev_dellink+0x2d1/0x320 [ 534.293855][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 534.299902][ T31] ? rcu_is_watching+0x15/0xb0 [ 534.328133][ T31] ? apparmor_capable+0x137/0x1b0 [ 534.339180][ T31] ? bpf_lsm_capable+0x9/0x20 [ 534.357577][ T31] ? security_capable+0x7e/0x2e0 [ 534.379973][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 534.398670][ T31] rdma_nl_rcv+0x6ae/0x980 [ 534.419024][ T31] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 534.435557][ T31] ? __lock_acquire+0xab9/0xd20 [ 534.440486][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 534.467174][ T31] netlink_unicast+0x82c/0x9e0 [ 534.489681][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 534.504812][ T31] ? netlink_sendmsg+0x642/0xb30 [ 534.509886][ T31] ? skb_put+0x11b/0x210 [ 534.529297][ T31] netlink_sendmsg+0x805/0xb30 [ 534.540145][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 534.558166][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 534.580256][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 534.597592][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 534.634735][ T31] __sock_sendmsg+0x219/0x270 [ 534.639687][ T31] ____sys_sendmsg+0x505/0x830 [ 534.655677][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 534.677179][ T31] ? import_iovec+0x74/0xa0 [ 534.688008][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 534.699775][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 534.719372][ T31] ? __fget_files+0x2a/0x420 [ 534.735254][ T31] ? __fget_files+0x3a0/0x420 [ 534.740008][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 534.762326][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 534.768054][ T31] ? rcu_is_watching+0x15/0xb0 [ 534.786711][ T31] ? do_syscall_64+0xbe/0x3b0 [ 534.800553][ T31] do_syscall_64+0xfa/0x3b0 [ 534.826638][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 534.843324][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.865008][ T31] ? clear_bhb_loop+0x60/0xb0 [ 534.869853][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.898997][ T31] RIP: 0033:0x7f8a99f8e9a9 [ 534.915551][ T31] RSP: 002b:00007f8a97dd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 534.935610][ T31] RAX: ffffffffffffffda RBX: 00007f8a9a1b6080 RCX: 00007f8a99f8e9a9 [ 534.964122][ T31] RDX: 000000000000c054 RSI: 0000200000000200 RDI: 000000000000000e [ 534.978115][ T31] RBP: 00007f8a9a010d69 R08: 0000000000000000 R09: 0000000000000000 [ 535.005089][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 535.019884][ T31] R13: 0000000000000000 R14: 00007f8a9a1b6080 R15: 00007ffc4c718e98 [ 535.053257][ T31] [ 535.107520][ T31] INFO: task syz.1.2593:14435 blocked for more than 144 seconds. [ 535.216841][ T31] Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 [ 535.238466][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 535.256560][ T31] task:syz.1.2593 state:D stack:25544 pid:14435 tgid:14425 ppid:5862 task_flags:0x400140 flags:0x00004006 [ 535.278576][ T31] Call Trace: [ 535.294172][ T31] [ 535.297245][ T31] __schedule+0x16f5/0x4d00 [ 535.318626][ T31] ? __lock_acquire+0xab9/0xd20 [ 535.334704][ T31] ? schedule+0x165/0x360 [ 535.339196][ T31] ? __pfx___schedule+0x10/0x10 [ 535.352874][ T31] ? schedule+0x91/0x360 [ 535.357195][ T31] schedule+0x165/0x360 [ 535.366990][ T31] schedule_preempt_disabled+0x13/0x30 [ 535.378995][ T31] __mutex_lock+0x724/0xe80 [ 535.399406][ T31] ? __mutex_lock+0x51b/0xe80 [ 535.409872][ T31] ? rdma_dev_change_netns+0x39/0x300 [ 535.429007][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 535.439830][ T31] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 535.459044][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 535.487541][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 535.487930][ T5856] Bluetooth: hci7: command tx timeout [ 535.499829][ T31] ? _raw_spin_unlock+0x28/0x50 [ 535.525479][ T31] rdma_dev_change_netns+0x39/0x300 [ 535.563073][ T31] rdma_dev_exit_net+0x203/0x340 [ 535.568473][ T31] ? __pfx___might_resched+0x10/0x10 [ 535.579774][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 535.616033][ T31] ? net_generic+0x1e/0x240 [ 535.626335][ T31] ? mutex_is_locked+0x17/0x50 [ 535.633587][ T31] ? rtnl_is_locked+0x15/0x20 [ 535.638404][ T31] ops_undo_list+0x497/0x990 [ 535.647476][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 535.658283][ T31] ? ops_init+0x469/0x5c0 [ 535.668232][ T31] setup_net+0x2d3/0x320 [ 535.675401][ T31] ? __pfx_setup_net+0x10/0x10 [ 535.680302][ T31] ? copy_net_ns+0x304/0x4d0 [ 535.697857][ T31] ? down_read_killable+0x1d1/0x350 [ 535.711844][ T31] copy_net_ns+0x31b/0x4d0 [ 535.716510][ T31] create_new_namespaces+0x3f3/0x720 [ 535.723787][ T31] ? security_capable+0x7e/0x2e0 [ 535.728794][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 535.739890][ T31] ksys_unshare+0x4c8/0x8c0 [ 535.766295][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 535.774398][ T31] ? rcu_is_watching+0x15/0xb0 [ 535.779316][ T31] __x64_sys_unshare+0x38/0x50 [ 535.794805][ T31] do_syscall_64+0xfa/0x3b0 [ 535.799455][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 535.816038][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.835904][ T31] ? clear_bhb_loop+0x60/0xb0 [ 535.850115][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.868530][ T31] RIP: 0033:0x7f0302b8e9a9 [ 535.889732][ T31] RSP: 002b:00007f0303a9b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 535.914859][ T31] RAX: ffffffffffffffda RBX: 00007f0302db6080 RCX: 00007f0302b8e9a9 [ 535.931783][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 535.958781][ T31] RBP: 00007f0302c10d69 R08: 0000000000000000 R09: 0000000000000000 [ 535.999822][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 536.019001][ T31] R13: 0000000000000000 R14: 00007f0302db6080 R15: 00007fff97d7cef8 [ 536.039209][ T31] [ 536.049134][ T31] INFO: task syz.0.2626:14528 blocked for more than 145 seconds. [ 536.098009][ T31] Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 [ 536.099636][T14948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 536.158629][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 536.194423][T14948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.198798][ T31] task:syz.0.2626 state:D [ 536.296030][T14948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 536.310210][ T31] stack:24512 pid:14528 tgid:14526 ppid:5846 task_flags:0x400140 flags:0x00004006 [ 536.397268][ T31] Call Trace: [ 536.400627][ T31] [ 536.418269][ T31] __schedule+0x16f5/0x4d00 [ 536.460546][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 536.517937][ T31] ? __lock_acquire+0xab9/0xd20 [ 536.564156][ T31] ? schedule+0x165/0x360 [ 536.568596][ T31] ? __pfx___schedule+0x10/0x10 [ 536.620545][ T31] ? schedule+0x91/0x360 [ 536.646582][ T31] schedule+0x165/0x360 [ 536.683961][ T31] schedule_preempt_disabled+0x13/0x30 [ 536.689614][ T31] __mutex_lock+0x724/0xe80 [ 536.720292][ T31] ? __mutex_lock+0x51b/0xe80 [ 536.747797][ T31] ? rdma_dev_change_netns+0x39/0x300 [ 536.785380][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 536.793681][ T31] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 536.799565][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 536.815644][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 536.822343][ T31] ? _raw_spin_unlock+0x28/0x50 [ 536.827248][ T31] rdma_dev_change_netns+0x39/0x300 [ 536.834282][ T31] rdma_dev_exit_net+0x203/0x340 [ 536.839270][ T31] ? __pfx___might_resched+0x10/0x10 [ 536.854063][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 536.860550][ T31] ? net_generic+0x1e/0x240 [ 536.908383][ T31] ? mutex_is_locked+0x17/0x50 [ 536.916695][ T31] ? rtnl_is_locked+0x15/0x20 [ 536.927398][ T31] ops_undo_list+0x497/0x990 [ 536.935279][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 536.940571][ T31] ? ops_init+0x469/0x5c0 [ 536.950349][ T31] setup_net+0x2d3/0x320 [ 536.959671][ T31] ? __pfx_setup_net+0x10/0x10 [ 536.973471][ T31] ? copy_net_ns+0x304/0x4d0 [ 536.978152][ T31] ? down_read_killable+0x1d1/0x350 [ 537.000415][ T31] copy_net_ns+0x31b/0x4d0 [ 537.017974][ T31] create_new_namespaces+0x3f3/0x720 [ 537.029676][ T31] ? security_capable+0x7e/0x2e0 [ 537.036009][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 537.050181][ T31] ksys_unshare+0x4c8/0x8c0 [ 537.060326][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 537.092591][ T31] __x64_sys_unshare+0x38/0x50 [ 537.097537][ T31] do_syscall_64+0xfa/0x3b0 [ 537.108064][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 537.120168][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.133777][ T31] ? clear_bhb_loop+0x60/0xb0 [ 537.138604][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.179677][ T31] RIP: 0033:0x7f0e56d8e9a9 [ 537.195350][ T31] RSP: 002b:00007f0e57b97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 537.209894][ T31] RAX: ffffffffffffffda RBX: 00007f0e56fb6080 RCX: 00007f0e56d8e9a9 [ 537.219292][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 537.238935][ T31] RBP: 00007f0e56e10d69 R08: 0000000000000000 R09: 0000000000000000 [ 537.286461][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 537.297098][ T31] R13: 0000000000000001 R14: 00007f0e56fb6080 R15: 00007ffec824e8a8 [ 537.316009][ T31] [ 537.319236][ T31] [ 537.319236][ T31] Showing all locks held in the system: [ 537.385176][ T31] 1 lock held by khungtaskd/31: [ 537.424202][ T31] #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 537.503620][ T31] 4 locks held by kworker/u8:3/37: [ 537.560250][ T31] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 537.575209][ T5856] Bluetooth: hci7: command tx timeout [ 537.665460][ T31] #1: ffffc90000ad7bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 537.776523][ T31] #2: ffffffff8f511e70 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 537.844678][ T31] #3: ffff888029c786d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 537.944526][ T31] 2 locks held by kworker/u8:7/1111: [ 537.949984][ T31] 5 locks held by kworker/u8:9/1332: [ 538.005033][ T31] #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run1+0x181/0x4b0 [ 538.064648][ T31] #1: ffffc9000443fbc0 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 538.163605][ T31] #2: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run1+0x181/0x4b0 [ 538.253650][ T31] #3: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: batadv_iv_ogm_schedule+0x430/0xf00 [ 538.331711][ T31] #4: ffffffff99d77f58 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0xbb/0x420 [ 538.406086][ T31] 2 locks held by getty/5610: [ 538.454075][ T31] #0: ffff888030b540a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 538.516557][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 538.575321][ T31] 3 locks held by kworker/0:3/5907: [ 538.580602][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 538.686575][ T31] #1: ffffc90004d97bc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 538.764907][ T31] #2: ffffffff8e144bf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 538.846217][ T31] 2 locks held by syz.3.2592/14428: [ 538.875200][ T31] #0: ffffffff99e7b938 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980 [ 538.916682][ T31] #1: ffff888029c786d0 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 539.005180][ T31] 2 locks held by syz.1.2593/14435: [ 539.055998][ T31] #0: ffffffff8f511e70 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 539.120065][ T31] #1: ffff888029c786d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 539.169607][ T31] 2 locks held by syz.0.2626/14528: [ 539.196508][ T31] #0: ffffffff8f511e70 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 539.295949][ T31] #1: ffff888029c786d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 539.368102][ T31] 2 locks held by syz.2.2669/14705: [ 539.397827][ T31] #0: ffffffff8f511e70 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 539.445355][ T31] #1: ffff888029c786d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 539.482964][ T31] 2 locks held by syz.4.2692/14859: [ 539.488318][ T31] #0: ffffffff8f511e70 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 539.514498][ T31] #1: ffff888029c786d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 539.546036][ T31] 2 locks held by syz.6.2694/14883: [ 539.570593][ T31] #0: ffffffff8f511e70 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 539.606481][ T31] #1: ffff888029c786d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 539.636697][ T31] 3 locks held by syz-executor/14895: [ 539.658986][ T31] #0: ffff88807e728dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 539.686241][ T31] #1: ffff88807e7280b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 539.716373][ T31] #2: ffffffff8f6871e8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 539.748359][ T31] 3 locks held by syz-executor/14913: [ 539.759610][ T31] #0: ffff888028580dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 539.776713][ T31] #1: ffff8880285800b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 539.795781][ T31] #2: ffffffff8f6871e8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 539.846016][ T31] 3 locks held by syz-executor/14945: [ 539.869947][ T31] #0: ffff888039ae8dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 539.898289][ T31] #1: ffff888039ae80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 539.919485][ T31] #2: ffffffff8f6871e8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 539.950090][ T31] 5 locks held by syz-executor/14948: [ 539.962773][ T31] #0: ffff88807a930dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 539.988526][ T31] #1: ffff88807a9300b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 540.010168][ T31] #2: ffffffff8f6871e8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 540.047800][ T31] #3: ffff8880807e9338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 540.073711][ T31] #4: ffffffff8e144bf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 540.095940][ T31] 2 locks held by syz-executor/14985: [ 540.117677][ T31] #0: ffffffff8f511e70 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 540.154879][ T31] #1: ffffffff8f51ec88 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990 [ 540.177885][ T31] [ 540.180277][ T31] ============================================= [ 540.180277][ T31] [ 540.215991][ T31] NMI backtrace for cpu 1 [ 540.216013][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 540.216035][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 540.216046][ T31] Call Trace: [ 540.216053][ T31] [ 540.216061][ T31] dump_stack_lvl+0x189/0x250 [ 540.216088][ T31] ? __wake_up_klogd+0xd9/0x110 [ 540.216118][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 540.216140][ T31] ? __pfx__printk+0x10/0x10 [ 540.216178][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 540.216206][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 540.216227][ T31] ? _printk+0xcf/0x120 [ 540.216256][ T31] ? __pfx__printk+0x10/0x10 [ 540.216283][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 540.216304][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 540.216331][ T31] watchdog+0xfee/0x1030 [ 540.216350][ T31] ? watchdog+0x1de/0x1030 [ 540.216376][ T31] kthread+0x70e/0x8a0 [ 540.216404][ T31] ? __pfx_watchdog+0x10/0x10 [ 540.216420][ T31] ? __pfx_kthread+0x10/0x10 [ 540.216447][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 540.216473][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 540.216497][ T31] ? __pfx_kthread+0x10/0x10 [ 540.216524][ T31] ret_from_fork+0x3fc/0x770 [ 540.216547][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 540.216573][ T31] ? __switch_to_asm+0x39/0x70 [ 540.216594][ T31] ? __switch_to_asm+0x33/0x70 [ 540.216623][ T31] ? __pfx_kthread+0x10/0x10 [ 540.216649][ T31] ret_from_fork_asm+0x1a/0x30 [ 540.216689][ T31] [ 540.216697][ T31] Sending NMI from CPU 1 to CPUs 0: [ 540.407741][ C0] NMI backtrace for cpu 0 [ 540.407758][ C0] CPU: 0 UID: 0 PID: 14985 Comm: syz-executor Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 540.407782][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 540.407791][ C0] RIP: 0010:__lock_acquire+0xcb9/0xd20 [ 540.407813][ C0] Code: 89 df e8 5a 25 89 ff e8 c5 23 89 ff e8 20 b0 94 ff e8 6b 8e 03 00 45 31 ff 44 89 f8 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d d2 37 d4 09 cc 89 05 b3 0b 0a 12 e9 2c fe ff ff 90 0f 0b 90 e9 [ 540.407826][ C0] RSP: 0018:ffffc90003797128 EFLAGS: 00000082 [ 540.407841][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 095deacbfdfbaa00 [ 540.407852][ C0] RDX: 0000000000000000 RSI: ffff888073d2e568 RDI: ffff888073d2da00 [ 540.407862][ C0] RBP: ffffffff8172aae5 R08: 0000000000000000 R09: ffffffff8172aae5 [ 540.407873][ C0] R10: ffffc90003797318 R11: ffffffff81ad0050 R12: 0000000000000002 [ 540.407883][ C0] R13: ffffffff8e13f0e0 R14: 0000000000000000 R15: 0000000000000246 [ 540.407893][ C0] FS: 000055557409a500(0000) GS:ffff888125c16000(0000) knlGS:0000000000000000 [ 540.407907][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 540.407925][ C0] CR2: 000056475a57c000 CR3: 000000007d3cc000 CR4: 00000000003526f0 [ 540.407940][ C0] Call Trace: [ 540.407946][ C0] [ 540.407952][ C0] lock_acquire+0x120/0x360 [ 540.407968][ C0] ? unwind_next_frame+0xa5/0x2390 [ 540.407990][ C0] ? unwind_next_frame+0xa5/0x2390 [ 540.408004][ C0] ? sysfs_remove_group+0xfc/0x2c0 [ 540.408020][ C0] ? unwind_next_frame+0xa5/0x2390 [ 540.408035][ C0] unwind_next_frame+0xc2/0x2390 [ 540.408050][ C0] ? unwind_next_frame+0xa5/0x2390 [ 540.408068][ C0] ? unwind_next_frame+0xa5/0x2390 [ 540.408083][ C0] ? kernfs_remove_by_name_ns+0xb7/0x130 [ 540.408102][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 540.408121][ C0] arch_stack_walk+0x11c/0x150 [ 540.408141][ C0] ? sysfs_remove_group+0xfc/0x2c0 [ 540.408157][ C0] stack_trace_save+0x9c/0xe0 [ 540.408175][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 540.408198][ C0] kasan_save_stack+0x3e/0x60 [ 540.408216][ C0] ? kasan_save_stack+0x3e/0x60 [ 540.408231][ C0] ? kasan_record_aux_stack+0xbd/0xd0 [ 540.408245][ C0] ? call_rcu+0x157/0x9c0 [ 540.408261][ C0] ? kernfs_put+0x19e/0x480 [ 540.408274][ C0] ? kernfs_remove_by_name_ns+0xb7/0x130 [ 540.408290][ C0] ? sysfs_remove_group+0xfc/0x2c0 [ 540.408322][ C0] kasan_record_aux_stack+0xbd/0xd0 [ 540.408337][ C0] ? __pfx_kernfs_free_rcu+0x10/0x10 [ 540.408350][ C0] call_rcu+0x157/0x9c0 [ 540.408370][ C0] ? delete_node+0x2de/0xa50 [ 540.408389][ C0] ? __pfx_call_rcu+0x10/0x10 [ 540.408408][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 540.408429][ C0] kernfs_put+0x19e/0x480 [ 540.408445][ C0] kernfs_remove_by_name_ns+0xb7/0x130 [ 540.408472][ C0] sysfs_remove_group+0xfc/0x2c0 [ 540.408487][ C0] sysfs_remove_groups+0x54/0xb0 [ 540.408502][ C0] netdev_queue_update_kobjects+0x5d3/0x6c0 [ 540.408525][ C0] netdev_unregister_kobject+0x11f/0x450 [ 540.408546][ C0] unregister_netdevice_many_notify+0x1a6b/0x1ff0 [ 540.408572][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 540.408592][ C0] ? net_generic+0x1e/0x240 [ 540.408613][ C0] ? net_generic+0x1e/0x240 [ 540.408635][ C0] ops_undo_list+0x3dc/0x990 [ 540.408652][ C0] ? __pfx_ops_undo_list+0x10/0x10 [ 540.408666][ C0] ? ops_init+0x469/0x5c0 [ 540.408684][ C0] setup_net+0x2d3/0x320 [ 540.408705][ C0] ? __pfx_setup_net+0x10/0x10 [ 540.408725][ C0] ? copy_net_ns+0x304/0x4d0 [ 540.408744][ C0] ? down_read_killable+0x1d1/0x350 [ 540.408763][ C0] copy_net_ns+0x31b/0x4d0 [ 540.408785][ C0] create_new_namespaces+0x3f3/0x720 [ 540.408802][ C0] ? security_capable+0x7e/0x2e0 [ 540.408822][ C0] unshare_nsproxy_namespaces+0x11c/0x170 [ 540.408839][ C0] ksys_unshare+0x4c8/0x8c0 [ 540.408861][ C0] ? __pfx_ksys_unshare+0x10/0x10 [ 540.408884][ C0] __x64_sys_unshare+0x38/0x50 [ 540.408902][ C0] do_syscall_64+0xfa/0x3b0 [ 540.408916][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 540.408944][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.408959][ C0] ? clear_bhb_loop+0x60/0xb0 [ 540.408975][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.408989][ C0] RIP: 0033:0x7f3ed25901a7 [ 540.409003][ C0] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 540.409014][ C0] RSP: 002b:00007ffd113949d8 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 540.409030][ C0] RAX: ffffffffffffffda RBX: 00007f3ed27b5f40 RCX: 00007f3ed25901a7 [ 540.409040][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 540.409050][ C0] RBP: 00007f3ed27b6738 R08: 0000000000000000 R09: 0000000000000000 [ 540.409060][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 540.409069][ C0] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 540.409085][ C0] [ 540.527788][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 540.527810][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 540.527831][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 540.527842][ T31] Call Trace: [ 540.527850][ T31] [ 540.527859][ T31] dump_stack_lvl+0x99/0x250 [ 540.527885][ T31] ? __asan_memcpy+0x40/0x70 [ 540.527906][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 540.527927][ T31] ? __pfx__printk+0x10/0x10 [ 540.527963][ T31] panic+0x2db/0x790 [ 540.527988][ T31] ? __pfx_panic+0x10/0x10 [ 540.528007][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 540.528032][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 540.528059][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 540.528089][ T31] watchdog+0x102d/0x1030 [ 540.528108][ T31] ? watchdog+0x1de/0x1030 [ 540.528133][ T31] kthread+0x70e/0x8a0 [ 540.528160][ T31] ? __pfx_watchdog+0x10/0x10 [ 540.528176][ T31] ? __pfx_kthread+0x10/0x10 [ 540.528201][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 540.528224][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 540.528247][ T31] ? __pfx_kthread+0x10/0x10 [ 540.528271][ T31] ret_from_fork+0x3fc/0x770 [ 540.528293][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 540.528317][ T31] ? __switch_to_asm+0x39/0x70 [ 540.528337][ T31] ? __switch_to_asm+0x33/0x70 [ 540.528357][ T31] ? __pfx_kthread+0x10/0x10 [ 540.528381][ T31] ret_from_fork_asm+0x1a/0x30 [ 540.528418][ T31] [ 541.061927][ T31] Kernel Offset: disabled [ 541.066247][ T31] Rebooting in 86400 seconds..