last executing test programs: 1m1.640893207s ago: executing program 3 (id=2202): r0 = socket$tipc(0x1e, 0x2, 0x0) unshare(0x2a020400) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @value=r1}, 0x50) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x20000090) 1m1.616492686s ago: executing program 3 (id=2204): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000080"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000ebd14bab7c6fe6ee457f1708a56300946da819f576c36ef7be4f47f54f7d84da4a03157768bef797b7d5f5d3b54ab7c1129c64f6e90e72a0f9f5fa64d9c92c2b060ff0dfe91d4e7712ac1824b050a87ad2026817322288abae055808a7e3a0fcd334ac6a08ea6032fe873cc4213e0214f450723fc92afe8e214b52e0f587d8bfa73bcf81da764203315b4297b121a63047f110d99ba8edfce22a974e340df8bdc03698c805235499f83ad96e5504a889c0ac99ca"], 0x50) r1 = socket(0xa, 0x3, 0x3a) ioctl$SIOCGETSGCNT(r1, 0x89e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000020be5cc90000050000"], 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r2, 0x20, &(0x7f0000000400)={0xfffffffffffffffe, 0x0, 0x0, &(0x7f0000000780)=""/164, 0xa4}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) bind$tipc(r4, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r6, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x1004) r7 = socket(0x23, 0x80805, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x104, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xd4, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}, @TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x94, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x86}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8c}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x10}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xe7}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x46}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @local}]}}]}, 0x104}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r8, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x3, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0xfff}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x970}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40005) listen(r7, 0x0) recvfrom$inet(r8, &(0x7f0000000140)=""/8, 0x8, 0x40000000, &(0x7f0000000180)={0x2, 0x4e24, @private=0xa010101}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000ec0)=@newtaction={0x88c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfff, 0x1, 0xae, 0x3, 0x0, 0x89, 0x8, 0x2, 0x81, 0x8ad0, 0x29a8, 0x8, 0xfffffffe, 0x3, 0x1, 0x3, 0x7, 0x1, 0x6, 0x9, 0x7, 0x2, 0xffff, 0x1b1e88b6, 0x1b, 0x9, 0x6, 0x9, 0x7, 0xb, 0x5, 0x2, 0xb080, 0x4, 0x651, 0x8001, 0x7, 0x7dfb, 0x6, 0x6, 0x8001, 0x7, 0x1, 0x5, 0x9, 0x4, 0x80000001, 0x83, 0x1, 0x1, 0x0, 0x1, 0x7, 0x7, 0x800, 0x7, 0xd, 0x6, 0x6, 0x8, 0xfffffff9, 0xfffffffa, 0x80000000, 0x6, 0x3, 0xc9, 0x7, 0x80000003, 0x3, 0x3, 0x87, 0xf, 0x2, 0x6, 0x389, 0x8, 0x7fff, 0x5, 0x0, 0xfc8, 0x6, 0x0, 0xdd7, 0x1, 0x3ff, 0x9, 0x0, 0x1, 0x8, 0xc, 0xfddd, 0x3, 0x7f, 0x0, 0xcf, 0xa, 0x8, 0xffffffff, 0x7, 0xfffffffc, 0x5, 0x3, 0x401, 0x4, 0xa9, 0x5, 0x3ff, 0x6, 0x6, 0x8, 0xf33, 0x8, 0x80006, 0x0, 0x3, 0x2, 0x1, 0x4, 0xfffffe00, 0x5, 0x7fffffff, 0x1, 0x5, 0x8, 0x81, 0x6, 0x7b, 0x3, 0x0, 0x3, 0x2, 0x6, 0x7, 0x4b1d, 0x80000000, 0x7, 0x2, 0x7ff, 0x1, 0x40, 0x1, 0x6, 0x0, 0x5, 0x7, 0x0, 0x9, 0x1, 0xfffffffd, 0x2a, 0x4, 0x3, 0x400000, 0x7, 0x9, 0x9, 0x4, 0x3, 0x4, 0x2a8f529d, 0x4c, 0x2, 0x7fffffff, 0x8, 0x7fff, 0x800, 0xe, 0xa92d, 0x0, 0x1, 0x6, 0xbf, 0x0, 0x1, 0x81, 0x5c, 0xfff, 0x5, 0x7a15, 0xfffffffd, 0x0, 0xac, 0x2e5bb190, 0xda3, 0x9, 0x1, 0x80000001, 0x2, 0x4, 0x7674, 0x7, 0x6, 0x7, 0x4932, 0x6, 0x9, 0x5, 0x2, 0x2, 0x5, 0xffff, 0x81, 0x6, 0x25, 0x179, 0x0, 0x6d5, 0x4, 0x8, 0x6, 0x2, 0x0, 0x1, 0x5d, 0x6, 0x6c, 0x0, 0xe, 0x8, 0x53a, 0x4000002, 0x9, 0x4, 0x97, 0x3, 0x1f5, 0xbd0, 0x1, 0x5, 0xecfc, 0x5, 0x4, 0x9e38, 0x2, 0xffff, 0x2, 0xdb6f, 0xff, 0x1c, 0x9, 0x5, 0x800, 0xe685, 0xdb7, 0xfffffffa, 0x7, 0x2, 0x7ff, 0x997, 0xffff, 0x3, 0xd, 0x3, 0xe, 0x4, 0xbb]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x80000001, 0x402, 0x9, 0x6, 0x9, 0x2, 0xffff, 0xfffffff9, 0x81, 0x5, 0x7fffffff, 0x81, 0x8000, 0xffffffff, 0x1, 0x8, 0x7, 0x7, 0xda8, 0xfffff800, 0x7fffffff, 0xfffffffa, 0x3, 0x4, 0x200, 0x100, 0x8, 0x7, 0x1ff, 0x0, 0xf1, 0x3, 0x8, 0x3, 0x10001, 0xc, 0x9, 0x200, 0x3, 0x543d, 0x74, 0x2, 0x8, 0x4, 0x37, 0x82, 0xd425, 0x1, 0x5, 0x2a8, 0x6, 0x9, 0x9, 0x1, 0x10001, 0x5, 0x4, 0x10001, 0x5, 0x40, 0x6, 0x400, 0xd87d, 0xfffffff7, 0x8, 0x3, 0x10001, 0xd1e, 0x4c8000, 0x348, 0x2, 0x8, 0x5, 0x2, 0x7fffffff, 0x0, 0x4, 0x5, 0x5, 0x0, 0x80000001, 0x10, 0xfffffc00, 0xffff, 0x81, 0x3, 0x1d4, 0x47ff, 0x3, 0x7, 0x1, 0x5, 0x1, 0x1000, 0x81, 0x4, 0x3, 0x10001, 0x80, 0x1, 0x5, 0x9, 0x9, 0x5, 0x5, 0x5, 0x8, 0xb, 0x5ca, 0xe, 0x6, 0xfff, 0x4, 0x80000000, 0x0, 0x4, 0x24, 0x5, 0x800, 0x3e994374, 0x7, 0x6, 0xa, 0x7f, 0x6, 0x6, 0x800, 0x4, 0x67, 0x800, 0x1ff, 0xc89c, 0x788, 0x0, 0x8000, 0x100, 0x9, 0xe, 0xb, 0x5, 0x7, 0x0, 0x0, 0x5, 0x7fffffff, 0xfffffffc, 0x2, 0x3, 0xfffffc01, 0x0, 0x6, 0x4, 0xf, 0x3850, 0x4, 0xe00000, 0xb9c, 0x0, 0x2, 0x0, 0x7, 0x2, 0x80, 0xfffffff9, 0x0, 0x1, 0x30, 0x1, 0x7, 0x140000, 0xfffffff8, 0x23, 0x7fffffff, 0x1, 0x5, 0x9, 0x40, 0x7, 0x200000, 0x8000, 0x3, 0xc, 0x6, 0x4, 0x7, 0xb95, 0x6, 0x7ff, 0x7fffffff, 0x7, 0xbdd1, 0x1, 0x132c, 0x4, 0x8, 0xe, 0x8, 0x9e, 0x8, 0x8, 0xfff, 0xffff, 0x7, 0x9d, 0x16, 0x2, 0x1, 0x0, 0xac, 0x6, 0x2, 0x6, 0x9e, 0xb, 0x10, 0x5, 0x4, 0xac, 0x7961481c, 0xf5c9, 0x27cf, 0x1, 0x6, 0x7f, 0x7, 0x1, 0x7, 0x7, 0x7, 0x0, 0x4, 0xd3, 0x1, 0xff, 0x9, 0x7fffffff, 0x40000003, 0x9c7, 0x2000001, 0x6, 0x7, 0x1, 0x8, 0x8, 0x1746, 0x0, 0x9, 0x40, 0x1, 0x8001, 0x29fb, 0x0, 0x7, 0x8]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x800, 0xffffffffffffffff, 0xffff21a5, 0x3, 0x4, {0x6, 0x2, 0xfffb, 0xc7, 0x6554, 0x7}, {0x5, 0x0, 0x5, 0x3e, 0xd, 0x8}, 0x80, 0x5b2, 0xbb2e}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1m1.483816978s ago: executing program 3 (id=2207): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x4, 0x4, 0x40851}, 0x50) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, 0x0, 0x0) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x18, 0x1412, 0x1, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}}, 0x20000000) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1f, 0x17, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xb8}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x800448d2, &(0x7f0000000040)) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r6 = socket(0x10, 0x803, 0x0) (rerun: 64) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x6}, @IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x40}}, 0x0) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000240)={r3, r9}, 0xc) (async) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a500000023000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r10}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000800000004000000000000040000000003000000000000080100000000000000000000020200000000002e2e5f"], 0x0, 0x44}, 0x20) (async, rerun: 64) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 64) write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r11, 0x0) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@o_path={0x0, r11, 0x4000, r11}, 0x18) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x5000000}}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000091106a000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r8) (async, rerun: 64) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r8) 1m1.23270859s ago: executing program 3 (id=2210): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x891f, &(0x7f0000000080)={'ipvlan0\x00', @ifru_addrs=@phonet={0x23, 0x6, 0x7, 0x1}}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xd2, &(0x7f00000005c0)=""/210, 0x0, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x6}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000240), &(0x7f00000003c0)=r8}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x15, &(0x7f0000000040)={@local, @empty, @val={@void, {0x8100, 0x1, 0x1, 0x2}}, {@llc_tr={0x11, {@llc={0x0, 0xbc, '9'}}}}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 1m1.169849826s ago: executing program 3 (id=2212): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000010018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000000000000030000000200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000008000000000000000", @ANYRES32=r2, @ANYRES32, @ANYBLOB="000000100200"/28], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r5) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x127) close(r4) close(r2) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r7, 0x1, 0x10, &(0x7f00000001c0)=0x9, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/uts\x00') unshare(0x6a040000) socket$packet(0x11, 0x2, 0x300) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) write$tun(r9, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x302) socket(0x8, 0x3, 0x0) 1m0.520754395s ago: executing program 3 (id=2223): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x2b, 0x80000, 0x2) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @broadcast, 'bond0\x00'}}, 0x1e) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x8, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040090}, 0x20040840) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) (async) sendmmsg$alg(r3, 0x0, 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000200)=0xda, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000000)=0x48b, 0x4) (async) syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', 0x0, 0x0, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000500)=""/129, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) (async, rerun: 32) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6, 0x0, 0x5}, 0x18) (async) r7 = socket(0x1, 0x2, 0x0) (async) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_buf(r8, 0x1, 0x37, &(0x7f0000002440)=""/4102, &(0x7f00000000c0)=0x1006) (async, rerun: 32) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="a29e73ad41643e104c916fc966749fbe53227e574a2747cd768dd00ea0f4bf493714345f419df629886bf0a13a97f5e34c109ae7c649a050ea4d3ea43961a6007c1674e79a267dc5be7897c84a89a72097bc2cf2"], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) unshare(0x6a040000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'veth1_macvtap\x00'}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) 57.174729368s ago: executing program 32 (id=2106): connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f0000000140)}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='rxrpc_tx_ack\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) r1 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'hsr0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000191c0)=ANY=[@ANYBLOB="010000000b000000050010000200000000000000", @ANYBLOB, @ANYRES32=r3, @ANYRES32, @ANYBLOB="0000000002"], 0x48) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033c88e160d2745a91b08363bcc34006d0009788455ec9ad10b24"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r4) r6 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f0000000840)=ANY=[], 0xd8) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x40) sendmmsg(r6, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0xf0600000, @dev={0xfe, 0x80, '\x00', 0x16}, 0x2, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0x8000) sendmsg$NFC_CMD_LLC_GET_PARAMS(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000002f80)={0x0, 0xffe4, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8}, @TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PTYPE={0x6, 0xa}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x70}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$NLBL_MGMT_C_PROTOCOLS(r5, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x40800}, 0x8891) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa082, 0x0) socket$kcm(0x2, 0xa, 0x2) 51.204802604s ago: executing program 4 (id=2314): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e2fa08", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x24008840) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x20, 0x13, 0xa, 0x503, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4004) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x5, 0x0) accept(r0, 0x0, &(0x7f0000000000)) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0) (async) sendmsg$nl_route_sched(r0, 0x0, 0x20004804) 50.899000922s ago: executing program 4 (id=2315): socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2000000}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1400000010000140000000000000000005000020dfbea5fa03f247480a48000000180a010200000000004ac5caa08de7f264c63dcf3ffccd000000020000031c0003801800038014000100776732000000000000000000000000000900020073797a30000000000900010073797a3000000000140000001100010000000000000000000300000a"], 0x70}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8808}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x20000800) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x84) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000440)=@ethtool_ringparam={0xe, 0x0, 0x0, 0x0, 0x0, 0x1002, 0x80000000}}) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2c, r3, 0x1, 0x70bd29, 0xffffffbe, {{0x2}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x80000001}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48080}, 0x20004056) 50.387309484s ago: executing program 4 (id=2319): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) r2 = socket(0x15, 0x3, 0x0) (async, rerun: 64) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xa}, {0xffff, 0xffff}, {0x1, 0xffef}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TARGET={0x8, 0x1, 0x9}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40005}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r3, 0x0) (async) recvmmsg(r3, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000500)="3aab39f4a67f8595d38cb18b21aab0c3ef43fccd3c005845deee3a7a7916c7b4887d182330018c563fcfd42fc492a2c78a38cfbb198a0054b765674c483f22c2a2d7066e1ce428841a3f2aeb7c5231121edaba30308c7696f1829ee53fbb4b", &(0x7f0000000180)=""/9, 0x2}, 0x20) (async, rerun: 64) r5 = socket$inet6(0xa, 0x2, 0x8) (rerun: 64) setsockopt$inet6_int(r5, 0x29, 0x21, &(0x7f0000000200)=0x81, 0x4) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x10000047}, 0x8000) (async) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000030605000000dd29fc970000050000040500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) (async, rerun: 32) sendmsg(r3, &(0x7f0000006800)={0x0, 0x0, 0x0}, 0x810) (async, rerun: 32) ioctl$SIOCGSTAMPNS(r5, 0x8907, &(0x7f0000000100)) (async, rerun: 64) getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, 0x0, &(0x7f0000006240)) (async, rerun: 64) sendmsg$nl_route(r0, 0x0, 0x8000) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$kcm(0x10, 0x400000002, 0x0) 50.084292222s ago: executing program 4 (id=2322): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b4"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r0, r0, 0x2f, 0x10}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) select(0x40, &(0x7f0000000000)={0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xffffffffffffffff}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80800) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r6}, 0x90) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newlink={0x34, 0x10, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r6, 0x4100}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r7}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}]}, 0x34}}, 0x4008000) sendmmsg$alg(r3, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="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", 0x155}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffe8d}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x800}], 0x1, 0x40800) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r1, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r8, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000b10000000000000000000000711237000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 49.713473796s ago: executing program 4 (id=2327): r0 = socket(0x1, 0x1, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newqdisc={0x858, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x82c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x7}, @TCA_TBF_RATE64={0xc, 0x4, 0x54a2627552646c50}, @TCA_TBF_PTAB={0x404, 0x3, [0xffffffff, 0xe9, 0x4, 0xfffffffb, 0xa3c, 0x4, 0x4, 0x5, 0xb34, 0x8, 0x3ff, 0x2, 0x7fffffff, 0x0, 0x1, 0x2, 0xfffff801, 0x3, 0x9, 0x7fffffff, 0x8, 0xffc00000, 0x2, 0x7, 0x6, 0x0, 0x0, 0x6, 0xfffffffd, 0x0, 0x1000, 0x7c5, 0x5, 0x9, 0x6, 0x7, 0x3, 0x2, 0xfffffff7, 0x7, 0x8, 0x4, 0x7, 0x600, 0x7, 0x80000001, 0x800, 0x2, 0x6, 0x6, 0x5, 0x1, 0x4, 0x8, 0x10000, 0x50, 0x2, 0x389, 0x2, 0x7fff, 0x1, 0xb6d, 0x6, 0x4, 0x2, 0x3, 0xe, 0x3, 0x1, 0x6, 0xd, 0xbb, 0x1ff, 0x1ff, 0x82, 0x9, 0x1000, 0xff, 0x6, 0x8000, 0xfff, 0x2, 0x8, 0x10001, 0x1, 0x4b86, 0x5, 0x9, 0xc378, 0x5, 0x41, 0xf4, 0x4, 0x1, 0x8, 0x4d9, 0xff, 0x2, 0x28e7, 0x56, 0xc, 0x8, 0x8767, 0x8, 0x5, 0x2, 0x2, 0xffffffff, 0x3, 0xff, 0x0, 0xb, 0x1, 0x8, 0xfffeffff, 0x12, 0x10000, 0x6, 0x9, 0x9, 0x24, 0xffffffff, 0x2, 0x0, 0x1, 0x3, 0x6, 0x6, 0x8, 0x40, 0x6f89, 0x89, 0x0, 0x1, 0x9, 0xfffff557, 0x15d6, 0x0, 0xffff, 0x3, 0xaabb, 0x4, 0xffff, 0xd0, 0x4, 0x6, 0x1, 0xa3e, 0x3, 0x9, 0x80000000, 0x8, 0x4, 0x8, 0x3, 0xfff, 0x6, 0xfffffbff, 0x1, 0xfffff801, 0x10, 0x1, 0x7ff, 0x2, 0xf, 0x0, 0x0, 0x3, 0x0, 0x63, 0xb0, 0x8, 0x7f, 0x2, 0x3, 0x3, 0x800, 0x1, 0x0, 0x6, 0x3, 0x8, 0x9, 0x10000, 0x2, 0x6, 0x2, 0x6, 0x8, 0x7, 0x3, 0xaa, 0x2, 0x2, 0x9, 0x248493f2, 0x3, 0xe9, 0x8000, 0xfffffff8, 0x800000, 0x5, 0x4, 0x12, 0xffffffff, 0x78, 0x401, 0x3, 0xffffffff, 0x3, 0x10000, 0x4f815b0b, 0x8, 0x1ff, 0x1, 0x1, 0x8, 0x6, 0x101, 0xfec, 0x1, 0x5, 0x4, 0x3, 0x1, 0x7, 0x9, 0x3, 0x10, 0x2, 0x101, 0x80000001, 0x29, 0xd, 0x1, 0x5, 0x0, 0x7, 0x3, 0x0, 0x6, 0x9, 0x1ff, 0x8, 0x2, 0x8, 0x1b6, 0x0, 0x401, 0x9, 0x6e8, 0x5, 0x1, 0x5, 0xfff, 0x1]}, @TCA_TBF_PTAB={0x404, 0x3, [0x1, 0xfffffffd, 0xffffffff, 0x96, 0xe9b, 0x1, 0x2, 0x3cd6, 0xfaff, 0x91, 0xb, 0x3, 0xe9, 0xfff, 0x7, 0x6, 0x9, 0xff, 0x1ff, 0x2, 0x6, 0x10, 0x4, 0x0, 0x80, 0x3a, 0x100, 0x6, 0x2, 0x9, 0x9, 0x9, 0x40, 0x9, 0x80000000, 0x1000, 0x3, 0x0, 0x0, 0xc, 0x8cc6, 0x4, 0x2, 0x401, 0x8, 0x1, 0x6, 0x474, 0x8, 0xfffff04c, 0x4, 0x8, 0x70, 0xa, 0x1, 0x1, 0x1fd, 0x0, 0x2, 0x0, 0x101, 0x1, 0x0, 0x200, 0x7, 0xf6, 0x23f4, 0xf, 0x5, 0xad, 0x91e8, 0x6, 0x1ff, 0xa, 0x0, 0xb13, 0x10, 0x80000001, 0x7, 0x8, 0x4, 0x2b720ad6, 0x7fff, 0xa4, 0x9, 0x1000000, 0x10000, 0x7, 0xfffffff8, 0x2eab, 0x4, 0xc, 0x8000, 0x80000000, 0x5, 0x81, 0x0, 0x9, 0x5, 0x6d56, 0x3, 0x2, 0x1, 0xec, 0x9, 0x3, 0x0, 0x2, 0x7, 0x1000, 0x5, 0x1, 0xa, 0x8, 0x9, 0x2, 0xc1, 0x9, 0xffffff49, 0x9, 0x7, 0x0, 0xfffffffc, 0x5, 0x1fc0, 0x1000, 0xde0, 0x97, 0x6, 0xffff, 0x3, 0x875d, 0x80000000, 0x98ac, 0x0, 0x7e20, 0x33, 0x0, 0x7, 0x8, 0x4, 0x5, 0x6, 0x1, 0x0, 0xd7e4213, 0x5, 0x4, 0x10000, 0x2, 0x3, 0x4, 0x8, 0x3ff, 0x8, 0x2, 0x3, 0x6, 0x5, 0x7fffffff, 0x3, 0x6, 0x0, 0x0, 0x7, 0x3, 0x4, 0x3, 0x54, 0x5, 0x8001, 0xa094, 0x101, 0x620d39ef, 0x6, 0x7, 0x80000000, 0x3, 0x80000001, 0x8, 0xe, 0xfff, 0x7, 0x7ff, 0x7, 0x3, 0xfffffffc, 0xd, 0x2, 0x5, 0x1f000, 0xfffffffe, 0xa, 0xfe, 0x1, 0x5, 0xfffffff9, 0x1, 0x1, 0x4, 0x1, 0xce, 0x5, 0x0, 0x8001, 0x80000000, 0xe, 0x5d5, 0x3, 0xffff8000, 0x0, 0x9, 0x73, 0x80000000, 0x9, 0x6ed, 0x2, 0x8001, 0x0, 0xffa, 0xffff0000, 0x6, 0x5, 0xb, 0x8, 0x93, 0x7, 0x1ff, 0x0, 0x4, 0x5, 0x100, 0x8, 0x6, 0xfff, 0x67de386f, 0x1, 0xc89e, 0x1, 0x0, 0x5, 0x2, 0xc9d, 0xa, 0x46c1, 0x6, 0xb297, 0x8, 0xfffff800, 0x650, 0x6, 0x1, 0x2, 0x6, 0x20000, 0x4]}, @TCA_TBF_PRATE64={0xc, 0x5, 0x31744a3db33e0593}]}}]}, 0x858}}, 0x4000010) sendmmsg$inet(r2, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000500)={0x3c, r6, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d5}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 49.460623934s ago: executing program 4 (id=2329): unshare(0x6a040000) unshare(0x44000000) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async, rerun: 64) close(r0) (rerun: 64) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 32) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async, rerun: 32) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) shutdown(r2, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x10, 0x6, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000580), 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000040)}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 45.309936438s ago: executing program 33 (id=2223): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x2b, 0x80000, 0x2) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @broadcast, 'bond0\x00'}}, 0x1e) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x8, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040090}, 0x20040840) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) (async) sendmmsg$alg(r3, 0x0, 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000200)=0xda, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000000)=0x48b, 0x4) (async) syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', 0x0, 0x0, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000500)=""/129, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) (async, rerun: 32) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6, 0x0, 0x5}, 0x18) (async) r7 = socket(0x1, 0x2, 0x0) (async) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_buf(r8, 0x1, 0x37, &(0x7f0000002440)=""/4102, &(0x7f00000000c0)=0x1006) (async, rerun: 32) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="a29e73ad41643e104c916fc966749fbe53227e574a2747cd768dd00ea0f4bf493714345f419df629886bf0a13a97f5e34c109ae7c649a050ea4d3ea43961a6007c1674e79a267dc5be7897c84a89a72097bc2cf2"], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) unshare(0x6a040000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'veth1_macvtap\x00'}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) 36.004101559s ago: executing program 5 (id=2458): openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000005ac0)=0x2, 0x4) close(0x3) 35.451046126s ago: executing program 5 (id=2460): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) (async) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r5, 0x1, {}, 0xff}, 0x18) (async) sendmsg$can_j1939(r3, &(0x7f0000000140)={&(0x7f0000000440)={0x1d, r5, 0x0, {0x0, 0xf0, 0x5}, 0xff}, 0x18, &(0x7f0000000180)={0x0}, 0x4, 0x0, 0x0, 0x24004045}, 0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) (async, rerun: 64) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async, rerun: 64) r6 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) (async) recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0xfe4b}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0) 35.288155599s ago: executing program 5 (id=2463): socket$pppl2tp(0x18, 0x1, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0xd0, 0x39, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}, [@nested={0xbc, 0x52, 0x0, 0x1, [@generic="6c0fdecc721afe987f3958f50c536a1a6f83a13fc460f9f63728f9abc1915724b7bc3f57bab0b4a08e681855127a9d29dcff381297a817e95961e153310df9ca90c48dc16736a5d57d31ab81fc09c37268fa5c370259d9c7d2a6a0c08fe647d9ce7c69da0ea0ee1a4d55ce8d7e10aa3aea6abe4a6e8d2214901f26acd615aa46c125863476e90ebb5f7bdfbae7b1b6a7209c73a60a74b5ffa9f70a7620ace4813e5a03951f286a78", @typed={0x8, 0x53, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x10, 0x0, 0x0, @u32=0x97}]}]}, 0xd0}}, 0x4000000) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) socketpair(0x1a, 0x6, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20048010}, 0x30) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 35.096853168s ago: executing program 5 (id=2464): r0 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaabb016ac27dec8b0b5ff877042786f87a1507345000000008004714ffcb000000000821907800000000ffffffff860207038f0000001200907800000001"], 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r0, &(0x7f0000000240)="240000001a007f0214f9f4070009040803000000000000050000000008000f40fe00000e", 0x24) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) (async) write(0xffffffffffffffff, 0x0, 0x0) (async) unshare(0x400) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x8f5, 0x100000000000000) (async) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000001c40)=0x4) (async) ioctl$PPPIOCSMAXCID(r2, 0x4004743c, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0xe, @ipv4={'\x00', '\xff\xff', @broadcast}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x18, r4, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc054}, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0xfffff000) (async) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0) (async) ioctl$IMGETCOUNT(r5, 0x80044943, &(0x7f00000001c0)) r6 = socket$nl_route(0x10, 0x3, 0x0) read(r6, &(0x7f0000000040)=""/225, 0xe1) (async) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=@ipv4_newnexthop={0x38, 0x68, 0x4, 0x70bd26, 0x25dfdbfd, {0x2, 0x0, 0x1, 0x0, 0x10}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_FDB={0x4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_BLACKHOLE={0x4}]}, 0x38}}, 0x24040081) 34.144891007s ago: executing program 34 (id=2329): unshare(0x6a040000) unshare(0x44000000) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async, rerun: 64) close(r0) (rerun: 64) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 32) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async, rerun: 32) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) shutdown(r2, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x10, 0x6, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000580), 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000040)}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 33.19701668s ago: executing program 5 (id=2473): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) 33.112528299s ago: executing program 5 (id=2476): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x26020480) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) (async) unshare(0x6a040000) (async) unshare(0x44000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x7ffffff, @mcast2, 0x40000000}, 0x1c) listen(r1, 0x0) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4e24, @private=0xa010100}, 0x10) (async) r3 = accept(r0, 0x0, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff48}, 0x1, 0x0, 0x0, 0x44080}, 0x40000) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc001}, 0x8891) (async) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x20010, 0xffffffffffffffff, 0x94173000) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x8400, 0x0) (async) getsockopt(r3, 0xfffffffd, 0x3, 0x0, &(0x7f0000000140)) (async) socket$pppoe(0x18, 0x1, 0x0) (async) socket$rxrpc(0x21, 0x2, 0xa) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000440), 0x10) (async) listen(r6, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) 28.266426295s ago: executing program 7 (id=2522): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000540)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x18, 0x50}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x27}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x28) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r2) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000100)={0x44, r3, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x104}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0x100}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x48040) close(r1) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x80800) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000002c0)={0x3}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000c712bcee73922b600361b28cc000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x14, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='svc_xprt_accept\x00', r0, 0x0, 0x52db}, 0x18) 28.060792878s ago: executing program 7 (id=2524): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x2c, 0x14, 0x300, 0x0, 0x20000, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x4000) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x41}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5}, @IFLA_BOND_MIN_LINKS={0x8, 0x12, 0xfffffffc}]}}}]}, 0x44}}, 0x0) 27.896808171s ago: executing program 7 (id=2526): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x1, 0x10, &(0x7f0000001bc0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b01b80000000000b7080000959700007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x2c, r2, 0x6a98047402e98331, 0x70bd28, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4000054) 27.774568314s ago: executing program 7 (id=2527): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c0000140002800600130000000000080014"], 0x44}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4000000) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4000000) 27.742420922s ago: executing program 7 (id=2528): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000d5ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r3, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x28, &(0x7f0000000000)=0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) writev(r4, &(0x7f00000002c0), 0x2c5) syz_emit_ethernet(0x80, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x4d, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cb7a5918c004a9971a46afced2c32642b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@float={0x7}]}, {0x0, [0x5f, 0x30, 0x61, 0x61]}}, &(0x7f00000004c0)=""/15, 0x2a, 0xf, 0x1, 0x80000000, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x3, 0x7, 0x0, 0x4, r1, 0x7e88, '\x00', 0x0, r6, 0x0, 0x2, 0x3, 0x3}, 0x50) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x89b1, &(0x7f0000000040)={'veth1_to_team\x00', 0x2000}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000fedbdf250100000008000100ffffffff34000480050003000100000005000300020000000500030005000000050003000500000005000300050000008a55049d4983a6200800020002"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000780)={@local, @empty, @void, {@ipv4={0x800, @dccp={{0x0, 0x4, 0x3, 0x29, 0x0, 0x65, 0x0, 0x9, 0x21, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, {[@timestamp_addr={0x44, 0x0, 0xa5, 0x1, 0x2, [{@remote, 0x1ff}, {@multicast1, 0x1}, {@multicast2, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffff2c4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}]}, @ssrr={0x89, 0x0, 0xad, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1b}, @local]}, @cipso={0x86, 0x0, 0x3, [{0x0, 0x0, "3cf750fe50efaa08f4"}, {0x0, 0x0, "3ee45ad762b18f3513da0c2b"}, {0x6, 0x0, '$'}, {0x5, 0x0, "3555b8adef"}]}, @timestamp={0x44, 0x0, 0xb8, 0x0, 0x0, [0xded, 0x3, 0x4, 0xff, 0x400, 0xc, 0x80]}, @end, @timestamp={0x44, 0x0, 0x41, 0x0, 0x9, [0x8000, 0x3, 0x486, 0x2, 0x2, 0x6, 0xffffff50, 0xfffffff8]}, @timestamp_addr={0x44, 0x0, 0xe8, 0x1, 0x8, [{@rand_addr=0x64010101, 0x400000}, {@multicast1, 0x7}, {@local, 0x7}]}]}}, {{0x4e24, 0x4e24, 0x0, 0x1, 0xf, 0x0, 0x0, 0x4, 0x1, "3723d7", 0xe, "a45b9c"}, "57b3f611ace5a4cd5941444260ab2ece623568cb278ff5bb3308765b90db9459ae9b7eaef370694fb006fefce4ab67d8fedaa7276a96b90a9a43cca47082190cec7c12fde4c25725f45e61d0639464b35e39ab643e201a93834fb290142a7bbd136ea462e2881edf05754999684c3c9aff2240404448ce0338feb8d6fd583b1fa378eb9edc46b9cb395897a977c3ee9055e7e3dba1ff1f"}}}}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call]}, &(0x7f0000000a00)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1c, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13b02, r2, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000000)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) sendto$packet(r9, &(0x7f00000000c0)="1005000000ff8200040647", 0xb, 0x0, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x1, 0x6, @broadcast}, 0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0xfff, '\x00', r10, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], &(0x7f0000001f80)=""/212, 0x1a, 0xd4, 0xa}, 0x28) shutdown(r3, 0x0) 27.484543194s ago: executing program 7 (id=2530): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async) unshare(0x62040200) (async) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) (async) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r1, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/36, 0x24}], 0x1}}], 0x1, 0x40010000, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414"], 0x44}, 0x1, 0x2}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4000000) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000e7ffffff00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)}, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_attach_bpf(r5, 0x6, 0x3, &(0x7f00000000c0), 0x4) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x400, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r7, {0xfffd, 0x10}, {0xd, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) (async) close(r5) (async) sendmsg$inet(r5, &(0x7f0000000200)={&(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000780)="8c4556b96e29f91df58ae896a9ddfc7810bf2582cedcac76609a63c89ed2c94fe30808b1aa05d494b3eda3659650730a9f85090c2783fd3abd0852da5f898bff3a0f523a9bbe3842f460a5cb90ac67c5d2bf8aa9db71dd7fe219ef4ca268050effdbbbd3638cd6b5e65d3799c73f39620fd12e11e65fe4fc9202e665a2735a5ce10bb843d8d83f49ed180357e00533865328cc7b8be94c6e048c23c762d10740b63d921e3eccdbad72d42283b3e851d062b69011fa7c8364789a77b41aeaa4fd3adff3d5373e5581e2adf89598058e460814c0306a89f97e4dbc1449df8afe78df45f74c229f1a5e6c5065ec26f760e3a31d2b9913a28f083d6d177b70577254d9a1fdff1885489d32df4422bf0c57843d3dfd4e9e8207c97e2de3a06b2922095239a99f77bbc129ed2b4cf4858f32ffde414f60a28bd3619703a48a73c066b3a86b325fb41b888ee2a24ef4827979632e07fe95f55a7fe7faf6b70bfecbf6956ae637e38fef7449a522b36daa2cf3fd6b245a0270b094c7fd712fc65b195c4b955683bf4d4af559ad44678e05e01993fed431fba263eb7b0f0cebe1d23554eed464d5c7b73f7ca3a52a3eb3dc786828118514d903f9770759376da834d67c5ef3400a25c3afb3072954d64ac63159d99d4356fc11b492332e335d0877c37bc0b7103f02150696ef7e92252c5781de1464e04bd61018973012f4a370faf0218cfdcb42a60b38c0e8ec5e45d3073ac49eec58caf5ee94e752b20661d93f3e64417845adbce727beb6f7d8c82e04c703976bec2719ee31cf948957ed5844d4ad8fd21ec09ae2ee36aada02bba28e0fdb5ea17eab839cd43fb1f544d4bc8ea0d006a884c16dbeef787471e38d60e8fb4307558f6906c03b65d4e309ea513f737bd70673d60507454448b5a1d6c617ce24fcd09e63ab434a85b261001fc61790df53a2510ecdbadba5dfdbb4d77c8d39fb27ad5e0eb13994bf5fbd9576e11ce2866703cd587866daae5d6591d134e76e388c302251f084a8ac46090fba78bd218e3ae455862ed551fe7f4b318a3e0daa4acfe9838bcbeb61759a7ba25987fe5ec19452f6fe89a3ecc60904347756594cc184428ddd3c228f9c388263125fbdac38ff7edf2d01334315c900ab9cfadfcd846c5639761745e1a50c730b21a7b9023fe2dc62394ab808903be5ee44144fa5b851adfeb8d43c71f67317f17e2cfa0164b4009e7dc409e4717291396693c9e6250d43a6d35fefc6b9f7a15583f9890b049640fe2ee0c1816552ff30fe6fe17173591855d37991dba6dc4c592b4a867e81cc6703fe17c7cbd96755aff4a14090f40d5ba1e704283ac2a0d692bfd64784cf650de4429ea0adde64817002200d10dff28c5ed0c929faa1accf94582c4e44bacee2b3e29f3b7a01598b709dbf58d7b48c0f15512991c0cc0d8c37135c7361991e33be4b430a68051bc5ba5636006687d31967d002821af3204171dcac2dd6aab4c54db3a0ecd596c68d59aed9911785d543d5db3fb6c57744fd5eb314bd5b8e3c7d963b8b1edcd0249f993779299717a3c228394a634f39a230885f3e057131b51cefa4c30dfc5ae2d15dc58666bea0500dca946b58f0372478f213a5d22d289d53f062bb86ae7db0cf698388c08ca26f8368181d129116eeaaed8843448e014577d9efb667c78581df08fcb95a62dd234a12869aeb067cceab296b834210979d921c0ea6f3a0ae348463f2a7d18b8b24f576eb02da0582c26e6bc1429489e7e5656264d80e6d42574da65b6ffb72408b6d455f25eac02c6259aa37b450382a57de1ee20c04379fa7c164b3a1966f89467d416f84d8c9c7c2b03b9c721887ce8aa172e036dc317759b112a6c41a6662dad7173e3749981c9fd547d16bfa1f526a2bca04b090b445c276889cc1bf082a77c0086127ec93764cc6f82135d8eb2b6a99c1b1dc362a593dd6a7dfb98ac6f57443f92cc652a935dc46e3bd82329fbe1f2f3bcbc7af6eba38cf15ecf273579a7ed6c908a79c2cbaf0bbf1113c8aff6f7fd2bdb2d026a2cdfbddee01d8e8fce0af432fad2c275e3b9d725d34f6bbbe17ddc2c8d78f7f5c780e0712bd356a671eda43667bfe6cad975089085d7cb2d521cc232457ac843f5882f26cdba3b407e2003a39dcf6b3b44a8fb179f0e2ed7c3fa78e6b5c26f0c32882124e4b7745444685f8c5230b46c6d8763a803afb2566d5962bbfe01032b62e4932b35ca983f8795be9713b09317edd47ed093ef408d434448eb9b67ab14af1a70f73062a42afac61807df395705dc1d1fa89e5102358275e360b4c6b8ff1ae3b071d2f229c5fbe44d16ac334f72a4a9aafb3530c8f347bbac2f69a189ce86fc235f4bd4e9ab87501f40a7b828d26b2b7968329aa4d01931715125427846c50598af36a3ad3a2a331a80b0816205f44fd843d2c07491ab2fc9fe8f3ba2981410cfa38e39ab55b0e25a756332f80b780f1001ab79062920571cba52102ace95d67ba0c901d095545a4343c41693e9a2e02707baf1f32b54d5ad92aef43be39352997ad334a44cba08aba1406472d6d91d4ac7ed18e88dde1d8a1076c17abf5fa5cda2c280c86b18aca0d16c1ba15b5789cb5f4f5f0326adddfbe4e49497774d52bed497939674960a189eddea03adead4b52472856626d078b806389f8cd10058335ad2a7b7fac9ea49fa590243557b45f77a39047aa6bea60b6b1a0a0656f83fbac55786e72f10f52d1002ee3b1b888450a0760b76eec22a1ccf8bb0c36d2e9283f3345e9b377795320763941bafab91752ab284225fe0c3df259e83f40799d1ba563f6b7cd3f8ef6f6cbae46645f5e87f0b8ba163a747a3e61731ee39d3af05007ed0c2ae7fd11dc3ad44dbd2f67da1859cc491b1d78d51862e70c680b0b950bf17253981c1265918a865717a1f9d7a887cba4ee085ca8635291a486a4a57b99e66ab33bf5a6b8253f1d05d8c44345846537a9dbe2a87daeee64c246f96e376b099097aaf8156b18199a44fdfec10387a4dd2b67b6a6f1ee0de614cf646360bf999ebe6e9ba9f20051a36ecfbea5863f0470a850e15443c96380b5c2db63a0e612d34c133f23c6d3d1f2bad11e43b67105ea498143a7369d0c887adf2ea26098b81031a3671b4ea31ebf8e2b69f8a3e3b224446841dad5af5f6ce2c9336936c03481cec5a1e443dea7b68edf698b134ccff97085eb48fa50ed91e44b2fd422947cad0655ceaf766e48dcf6ab094ff287d331985a2c7a1426ee8ffbd12a7fc1640bc3071cbec1a97e246afe2cc74f0919481e799db2cf0f04797e418099e206d2e06a655949178150b986c0243d25977cb39efa16cefa1783cb6020b2c221aa0090f555b231274db2ea30cd01e12770a7e6b9b0c960456f444309dd023734eb9a34d82870325730ab03142d413df6370d3d6b2c464b7d829307bdba19c5b902606c2d7c2f026c1f50df253acb77530055db08c37f7e1d0384221b3b3145f46fa3bb7e24b0caa349bf8beb29b5bedbeeb3dfe06794106ea6cf06a7b75b3c6e7cd990dda0c315df7e7554ef911720e7c9ad63c4c978308b45fa8f4856f44eed87bfa14767e377fb9bcc511b759504b7192c9cdc657541f150426704e82c7df27832ba181a4bd2a5ce359d28d1b6cce396131034062c1bcafe9cd80da93ea6646bae7d3ed546dd40c505d027c4a6e0f86af68a9b80a0cdc455e2c3d7695e5f2d759e6ac0c8e113e0d75257191d4f199c3a03ccd911722a0740af99f798d80c7733621a3951ccdbc5d6facb9a207ffb0fdc7265d8c631ccdbba833da79ad2e7b98f1e77f1a721ed03a2c1b10d957f5d0b3d679715085ed7801b0db5a26b3439afbf0ae672b2bc94e9361c1e66193af3487b1480e6e6db57bb9256a69fba8d181f9a87519d4e023d026ef77274777601c2ad8049392d821858a9e1f50ab16c7bc1cedc80b0d8089bf65f16ec4a197437055f8caaebc8ab8aad98a855cbfba338654fd23dcd80cd9190946e01f52f522521d52b57fe815b25a7542da17ff1051f02a3cb95def9a8115fa8a55266ec13c9bab13aa8eec4c18fd791b297b473f47a028de7a491f14f4f44339ebfb98373ae51b448d0021bf55c2807c5e252ea47cfda0145c7d3f6cf33d48564199724602816917c8093d6039cebc950780c1bba6202e1bddccb3210484e2b7309feccd8f77e3543bc7107751c05866d21d1bf57a0080bce5dedc739862432063e82a44d5caa57a5c3963c1202042d7926fc69516edee2afeca95718328867956ad3e0f884502cd8f27de49a7fc09676b52d8e3c3004231aadc6692fee37a9890730d629c07c17aae4443057269f7b8132287c5f68a7a81a0bcf9c934fd46d23937e81b97e27182eb3a462903c385f9b16b9516bc0a2fb6608f7c2963ba41da91c339712ece8af07905e562a34565938eda85a3b01517a538210d13bbc2ba4e2cd0c4a77ab942e29c40a073241a0869aa2a8e6016627836f61ea4eed9a2b5da4eeb308b72b66ee117acd00129a32705d71c3d6cac594c40ebb55dab44461f099773cb2fbb2ccf86c595d6b00d49e31ef4b735c2b056c1da00485531b56f357de863f21d9f4da0cd8a86e5ff240c6d4ccfdd75bb0c48f0c71de146318d7d9fef913467b65604b504888b2da23f3ec0ba53d05a6c8b1136ea4ca999fd29d218148834aaceb486e6cbb2fb62440af09455e2c736410d87f86fd1d9700c5405cbc99e84c626fa8e4bb2901f1aaf34ee12b13c34e0c99d919ae69cc01a6a093ab30d20f8e2f532e6e23449f3579daefe48613b4ce9f12d4bbc530b86867f220936d4582071d924060dd243e4abb5ce854d3f9aec9af83dcfb666cf744d798c2d60f8890d2fa0c223b52da6ee2457495ef58ff24dfb828b9cf3183ef7376127142d7c3c35ed6a08477cf6cfc7f166a8bd514874eeb312dfd3fb49dfd4aadba44073df0a8cee70b7cbab5eda31f7ab0435eb93a317187f0b3f520d3ac9f3e93c6c62bee64223884c6550b8d04b518ff03a12976062e00dd6742092d13bbc223721e6015a309dd9d46e7572a16d20fbcd7248fa21943a24df4533cc9a8f6f0ab65e20f83e1d0c0c0bb3024499459a903c96ed5e295529dd14e8b94a7d2580adc7cb67696e7a44690ea05f2a1e6b19b25602921e5009dcb5f585188d10a09656812986e8d438bf8608feb65a974e9bf8d919b15a06dfe678639e97be9f4dadd0a30567867782f822eaaf42a191059d414d022712541e23ebbae1da25ad230788118b2997532bbf2a51168d6c2e1459eaa69ca7bc56b1e9ad7f1feca517dcebbd29530b8e2949962ddc12c6878a8057dee5bcaa1e0988fcf4d32002a16d7f10d15dba103a7ee3a28b256a1069aa1acb1d8c536239cb13bedfd198b64c6e2de695c61f43ba1b3b82ab3aa60af628b7ebb97c1a30dab890035e30a64875baf69ed66af2f0316e13b1c9627002be53807e931723aae0d5b3d818450c8a1035ef87281dcc767e92910b7fe1c9ed31d5aac7cfec9885cb49b8d6cf8a358aabc3b86833947e171a52fac8913cdc40cb8872f49157257f79a01a89bd0e015e9824075ae00ea4e35feecd06e0f6af4127ddb9fce2cec5b693cb684c95c47595ef71bb6fa67bf00f481b470366c29d26242904b0b68659fc64d44d2cec661d6988f2a4838be3ed710fecd89b0db38cf23089b382aa427692966ab431d3fd828985fbc7f9d40c56a5232b2939cf28884da98f91d66a20434a02787a663e1818825f60e17bf221b9dfae7fb87db7174e8f86146f949f532757c8a", 0x1000}], 0x1, &(0x7f0000001800)=[@ip_retopts={{0x60, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x24, 0x47, 0x1, 0x6, [{@private=0xa010102, 0x6}, {@loopback, 0xe}, {@private=0xa010101, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffff4}]}, @rr={0x7, 0x1f, 0x77, [@remote, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x2d}, @dev={0xac, 0x14, 0x14, 0x2e}, @dev={0xac, 0x14, 0x14, 0x12}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x7, 0x20, [@local]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11}}], 0x90}, 0x4004084) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 25.10082198s ago: executing program 2 (id=2551): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000bf0000000007010000f8fffeab0000002885000000c70000009500"/97], &(0x7f0000000000)='GPL\x00', 0x7, 0x8d, &(0x7f0000000100)=""/149, 0x41000, 0xa}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000bf0000000007010000f8fffeab0000002885000000c70000009500"/97], &(0x7f0000000000)='GPL\x00', 0x7, 0x8d, &(0x7f0000000100)=""/149, 0x41000, 0xa}, 0x94) (async) 25.068555536s ago: executing program 2 (id=2552): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ppoll(&(0x7f0000000100)=[{r0, 0x8000}], 0x1, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x1e}, 0x10) connect$inet6(r1, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x1, @empty, 0x7daa}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000000)={r2, 0x3fe000000000000, 0x8, 0x3}) sendmsg$rds(r3, &(0x7f0000000840)={&(0x7f0000000140)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000440)=[{&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/43, 0x2b}, {&(0x7f0000002240)=""/4096, 0x1000}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000280)=""/108, 0x6c}, {&(0x7f0000000300)=""/5, 0x5}, {&(0x7f0000000340)=""/207, 0xcf}, {&(0x7f0000003240)=""/4096, 0x1000}], 0x8, &(0x7f0000000740)=[@fadd={0x58, 0x114, 0x6, {{0x7, 0x5}, &(0x7f00000004c0)=0x4, &(0x7f0000000500)=0xfffffffffffffa45, 0xffffffffffffffff, 0x8000, 0x7fffffff, 0x1, 0xb, 0x2}}, @cswp={0x58, 0x114, 0x7, {{0x9, 0x3}, &(0x7f0000000540)=0x1, &(0x7f0000000580)=0x6, 0x8, 0xe0e, 0x3aa2, 0x800, 0x2, 0xc3}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x1}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000640)=""/240, 0xf0}, &(0x7f00000005c0), 0x3d}}], 0xf8, 0x800}, 0x24040014) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x2, 0x18, 0x0, 0x0, 0xa, 0x0, 0x70bd2d, 0x25dfdbfb, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @multicast1}}]}, 0x50}}, 0x10) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e220e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 24.984728869s ago: executing program 2 (id=2553): syz_emit_ethernet(0x55, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb810000000806ddd2e0dfe9f9962ed79ce3672fc3351f6f723ee65686a32a7f529f90160a2f371ab9a64c7e4b8f9e3cf21ed82276f8693b06bf9b0ee99caf52bef2572052647a8f91b8"], 0x0) (async) socket$kcm(0x10, 0x2, 0x4) (async) socketpair(0x22, 0xa, 0x8, &(0x7f0000000040)={0xffffffffffffffff}) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000001c0), &(0x7f0000000140)=0x4) (async) socket$isdn_base(0x22, 0x3, 0x0) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000002637850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x18) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000007c0012800e00010069703665727370616e000000680002800600030006000000060002"], 0xa4}}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180), 0x2b) (async, rerun: 32) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000000)={0x8, 0x1, 0x9, 0x10000, @vifc_lcl_addr=@local, @multicast1}, 0x10) (async, rerun: 32) unshare(0x6a040000) (async) socket$l2tp6(0xa, 0x2, 0x73) r5 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x2, 0xa, 0x300) (async) shutdown(r1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000081"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) (async) r7 = socket$kcm(0x21, 0x2, 0x2) ioctl$int_in(r7, 0x5452, &(0x7f0000000100)=0x8) (async) sendmsg$kcm(r7, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000740)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) 24.940488251s ago: executing program 2 (id=2554): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f30455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES8], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r1, 0x0, 0x0}, 0x20) 24.898475957s ago: executing program 2 (id=2555): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000080)={@mcast1, r2}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x14, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000094b2e33b591668e5ce0000000971030000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x44, '\x00', r2, @fallback=0x2a, r0, 0x8, &(0x7f00000000c0)={0x3}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x7, 0x0, 0x6}, 0x10}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r4, r7, 0x100000af5, 0x0) close(r6) close(r5) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000480)={r8, 0x8}, 0x8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000008060001080006040002aaaaaaaaa68322ec14bbaaaaaaaaaa00ac"], 0x0) r10 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r10, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}}, &(0x7f0000000000)=0x84) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={&(0x7f0000000600)="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", &(0x7f0000000240)=""/69, &(0x7f00000002c0)="18ca987666f0c0d065db8b0748cbdd2b6486a258c103b970b202bf9f0e63861b164c0bb19a00a8b68aab5fb1fda4535fc3d3a7fa533380bf2a0ff23ccaa456407815c08a338270fd2b1c2196166fc8c40e1b2380b872afd637afaa68bed8705937bfeac940b35c2cabf13ea69e7cc7144c1f0f8326675aa6d370aeccafb573fc27cc2af8e40b6db554e36ce79c2d337aa6c859936ef96e68693dbe2230549da4e6bc36cd06fafc398d94be9e7130f6", &(0x7f0000000380)="b2ef31357de3", 0x8000, r4}, 0x38) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f0000000040)=0xade, 0x4) sendto$packet(r12, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000100)=@ethtool_cmd={0x9, 0x0, 0x0, 0x0, 0x0, 0x80, 0xfe, 0x0, 0x87, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x80000045, [0x0, 0x7]}}) r13 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x2b8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0xd}, {0xb, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_multiq={{}, {0x0, 0x2, {0x8, 0x40}}}]}, 0x2b8}}, 0x0) 24.764624872s ago: executing program 2 (id=2556): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 32) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async, rerun: 64) unshare(0x6a040000) (rerun: 64) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r2 = socket(0x8, 0x3, 0x3) ioctl$sock_netrom_SIOCADDRT(r2, 0x6180, 0x0) (async, rerun: 32) sendmmsg$inet6(r2, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f0000000000)="1aa60fb3fd9511503544e3aa4bbfe809242bd72841e399059de439e791b1c189", 0x20}, {0x0}], 0x2}}], 0x1, 0xc0000) (async, rerun: 32) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) (async, rerun: 32) r5 = syz_genetlink_get_family_id$net_dm(0x0, 0xffffffffffffffff) (rerun: 32) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r5, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x4040004) (async) sendmsg$NET_DM_CMD_STOP(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r5, 0x20, 0x70bd26, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x40894) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) clock_gettime(0x0, &(0x7f0000003340)={0x0, 0x0}) recvmmsg$unix(r2, &(0x7f0000003500)=[{{&(0x7f0000000240), 0x6e, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/169, 0xa9}, {&(0x7f0000000400)=""/141, 0x8d}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/133, 0x85}], 0x4, &(0x7f0000000580)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000001600)=@abs, 0x6e, &(0x7f00000016c0)=[{&(0x7f0000001680)=""/16, 0x10}], 0x1, &(0x7f0000001700)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88}}, {{&(0x7f00000017c0), 0x6e, &(0x7f0000002c80)=[{&(0x7f0000001840)=""/9, 0x9}, {&(0x7f0000001880)=""/90, 0x5a}, {&(0x7f0000001900)=""/171, 0xab}, {&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f00000029c0)=""/149, 0x95}, {&(0x7f0000002a80)=""/224, 0xe0}, {&(0x7f0000002b80)=""/213, 0xd5}, {&(0x7f0000003780)=""/4096, 0x1000}], 0x8, &(0x7f0000002d00)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{&(0x7f0000002d80)=@abs, 0x6e, &(0x7f0000002f80)=[{&(0x7f0000002e00)=""/147, 0x93}, {&(0x7f0000002ec0)=""/192, 0xc0}], 0x2, &(0x7f0000002fc0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003000)=@abs, 0x6e, &(0x7f0000003140)=[{&(0x7f0000003080)=""/4, 0x4}, {&(0x7f00000030c0)=""/122, 0x7a}], 0x2, &(0x7f0000003680)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f0000003200)=@abs, 0x6e, &(0x7f0000003300)=[{&(0x7f0000003280)=""/121, 0x79}, {&(0x7f0000005280)=""/4096, 0x1000}, {&(0x7f0000003400)=""/223, 0xdf}, {&(0x7f0000006280)=""/4096, 0x1000}], 0x4}}], 0x6, 0x2000, &(0x7f0000003380)={r9, r10+60000000}) (async) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x3ec0) close(r8) (async) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 17.967150978s ago: executing program 35 (id=2476): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x26020480) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) (async) unshare(0x6a040000) (async) unshare(0x44000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x7ffffff, @mcast2, 0x40000000}, 0x1c) listen(r1, 0x0) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4e24, @private=0xa010100}, 0x10) (async) r3 = accept(r0, 0x0, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff48}, 0x1, 0x0, 0x0, 0x44080}, 0x40000) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc001}, 0x8891) (async) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x20010, 0xffffffffffffffff, 0x94173000) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x8400, 0x0) (async) getsockopt(r3, 0xfffffffd, 0x3, 0x0, &(0x7f0000000140)) (async) socket$pppoe(0x18, 0x1, 0x0) (async) socket$rxrpc(0x21, 0x2, 0xa) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000440), 0x10) (async) listen(r6, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) 13.742717131s ago: executing program 8 (id=2593): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000000000070000000c000180060001000a000000"], 0x20}, 0x1, 0x0, 0x0, 0x20048814}, 0x0) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) unshare(0x6a040000) (async, rerun: 32) socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18e790a924769bea0b7cd400000000000000000000cfffffff47970a92a8bf4f"], &(0x7f0000000040)='syzkaller\x00', 0x20000, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) (async, rerun: 32) r5 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x16, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) (async) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r2, r4, 0x25, 0x2, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r6, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0xa6, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800470400980000000000059078ac1414ff0a010100860800000002010200000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) r8 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000400)={0xffffffffffffffff}) setsockopt$sock_int(r9, 0x1, 0x3c, &(0x7f0000000440)=0x4, 0x4) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="8042435ff29f0000c537140003006d6163736563300500000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x0) (async) sendto$inet6(r7, &(0x7f0000000080), 0x0, 0x4014, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000500)=[{0x0}, {&(0x7f00000002c0)}, {&(0x7f0000000340)="d94469a91874fde3d54cf0261ed019a1743de9ea6aeb3a48c84fe243355bc50d49c475f6d7a83e162ee4ce52ba34872f5e0b62e54f0a669d25e869930f3f5858fc7ac5b45884996460645187518e98e83d588712c97a64a4806c", 0x5a}], 0x3}, 0x4000005) (async) epoll_create(0x1) (async) epoll_create1(0x80000) 12.476600883s ago: executing program 36 (id=2530): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async) unshare(0x62040200) (async) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) (async) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r1, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/36, 0x24}], 0x1}}], 0x1, 0x40010000, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414"], 0x44}, 0x1, 0x2}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4000000) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000e7ffffff00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)}, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_attach_bpf(r5, 0x6, 0x3, &(0x7f00000000c0), 0x4) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x400, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r7, {0xfffd, 0x10}, {0xd, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) (async) close(r5) (async) sendmsg$inet(r5, &(0x7f0000000200)={&(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000780)="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", 0x1000}], 0x1, &(0x7f0000001800)=[@ip_retopts={{0x60, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x24, 0x47, 0x1, 0x6, [{@private=0xa010102, 0x6}, {@loopback, 0xe}, {@private=0xa010101, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffff4}]}, @rr={0x7, 0x1f, 0x77, [@remote, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x2d}, @dev={0xac, 0x14, 0x14, 0x2e}, @dev={0xac, 0x14, 0x14, 0x12}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x7, 0x20, [@local]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11}}], 0x90}, 0x4004084) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 9.735807558s ago: executing program 37 (id=2556): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 32) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async, rerun: 64) unshare(0x6a040000) (rerun: 64) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r2 = socket(0x8, 0x3, 0x3) ioctl$sock_netrom_SIOCADDRT(r2, 0x6180, 0x0) (async, rerun: 32) sendmmsg$inet6(r2, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f0000000000)="1aa60fb3fd9511503544e3aa4bbfe809242bd72841e399059de439e791b1c189", 0x20}, {0x0}], 0x2}}], 0x1, 0xc0000) (async, rerun: 32) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) (async, rerun: 32) r5 = syz_genetlink_get_family_id$net_dm(0x0, 0xffffffffffffffff) (rerun: 32) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r5, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x4040004) (async) sendmsg$NET_DM_CMD_STOP(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r5, 0x20, 0x70bd26, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x40894) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) clock_gettime(0x0, &(0x7f0000003340)={0x0, 0x0}) recvmmsg$unix(r2, &(0x7f0000003500)=[{{&(0x7f0000000240), 0x6e, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/169, 0xa9}, {&(0x7f0000000400)=""/141, 0x8d}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/133, 0x85}], 0x4, &(0x7f0000000580)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000001600)=@abs, 0x6e, &(0x7f00000016c0)=[{&(0x7f0000001680)=""/16, 0x10}], 0x1, &(0x7f0000001700)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88}}, {{&(0x7f00000017c0), 0x6e, &(0x7f0000002c80)=[{&(0x7f0000001840)=""/9, 0x9}, {&(0x7f0000001880)=""/90, 0x5a}, {&(0x7f0000001900)=""/171, 0xab}, {&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f00000029c0)=""/149, 0x95}, {&(0x7f0000002a80)=""/224, 0xe0}, {&(0x7f0000002b80)=""/213, 0xd5}, {&(0x7f0000003780)=""/4096, 0x1000}], 0x8, &(0x7f0000002d00)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{&(0x7f0000002d80)=@abs, 0x6e, &(0x7f0000002f80)=[{&(0x7f0000002e00)=""/147, 0x93}, {&(0x7f0000002ec0)=""/192, 0xc0}], 0x2, &(0x7f0000002fc0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003000)=@abs, 0x6e, &(0x7f0000003140)=[{&(0x7f0000003080)=""/4, 0x4}, {&(0x7f00000030c0)=""/122, 0x7a}], 0x2, &(0x7f0000003680)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f0000003200)=@abs, 0x6e, &(0x7f0000003300)=[{&(0x7f0000003280)=""/121, 0x79}, {&(0x7f0000005280)=""/4096, 0x1000}, {&(0x7f0000003400)=""/223, 0xdf}, {&(0x7f0000006280)=""/4096, 0x1000}], 0x4}}], 0x6, 0x2000, &(0x7f0000003380)={r9, r10+60000000}) (async) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x3ec0) close(r8) (async) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 3.04874708s ago: executing program 9 (id=2665): socket$kcm(0x10, 0x3, 0x10) epoll_create1(0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/69, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) bind$xdp(r0, &(0x7f0000000280)={0x2c, 0x1, 0x0, 0x17}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) socket$inet6(0xa, 0x2, 0x0) r3 = epoll_create1(0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) epoll_pwait(r3, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000001c0)=0x304214, 0x4) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x10000000368}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020786c3100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) unshare(0x400) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 2.016676221s ago: executing program 9 (id=2670): unshare(0x20000400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f00000007c0)=""/250, 0x0, 0x8}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xec}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r5 = socket$inet6(0xa, 0x3, 0x5) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002ac0)=ANY=[@ANYBLOB="8c050000130001002bbd7000fb0e002508005400", @ANYRES32=0x0, @ANYBLOB="040071806e05bc80080013803a48ad0408001c"], 0x58c}], 0x1, 0x0, 0x0, 0x8000}, 0x8880) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) (async) r7 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x8, &(0x7f00000000c0)=0x2, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000001340)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000440), &(0x7f0000000480)=0x40) setsockopt$inet6_tcp_int(r7, 0x6, 0x0, &(0x7f0000000140)=0x80000000, 0x4) getpid() (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000780)=ANY=[@ANYBLOB="44000000040601040000000000000000070000050500010007000000050001000700000005000100070000000900020073797a32000000cb0900020073797a3100000000"], 0x44}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc) 1.897403842s ago: executing program 9 (id=2672): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r1], 0x448}}, 0x0) (async) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) (async) sendmmsg$inet(r1, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000380)=0x2) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) (rerun: 64) pselect6(0x40, &(0x7f0000000180)={0x2, 0x9, 0xa, 0x8001, 0x7f, 0xbec, 0x1, 0xf}, &(0x7f0000000840)={0xa, 0xec15, 0x100000000000000, 0x0, 0xb, 0x200, 0x800000009, 0x1000080000000}, 0x0, 0x0, 0x0) 1.759132722s ago: executing program 1 (id=2675): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000001dc0)={0x28, 0x15, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0x28}}, 0x20004000) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede-generic)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r2, &(0x7f0000000380)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/14, 0xe}, {&(0x7f0000000100)}, {&(0x7f00000001c0)=""/106, 0x6a}, {&(0x7f0000000240)=""/14, 0xe}, {&(0x7f0000000280)=""/59, 0x3b}], 0x5, &(0x7f0000000340)=""/21, 0x15}, 0x180) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad56000081000008000d00"/24, 0x18) 1.664592198s ago: executing program 9 (id=2676): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}], 0x1}, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000500)=0xd0) sendmmsg$inet6(r1, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001400)="2838f353786896fd288b396f689fad2306c43d14ca9a8689d16d539f914313b88187eec9e91aa76d8058d693b81e2da063c2f7d35735659a9f5448ee477118fe1d568922745ed5f408", 0x49}, {&(0x7f0000000180)="1664ed95a7d8514746fbaff9940841800c12487c3216c9c753e2593637e7c2583da1af7b87f0d69329990ab8e570d44deeeb1991782ce29b170c007f5b96d8b6bfef6dec8253cf1b24cdb3bbd582536c7bbadfe95bf41f15affed32968f701d499fb90fbddbb09ed329615ae561fe34e8d91d055e36338d4dbcd1109864d5011dea2351c2b593e1983b52f18cece4b91d58fb2c79dbea7229c925eeec0603a57a331758788c668c911c4f24485905e84482e8d9743d2112cac7e1de62011719f30aaec7876e092f14687693ee1fc4dada2", 0xd1}, {&(0x7f0000000280)="8090fc73dc54d7f6d4b8795ced29c60af3fd228d7882c93c5e56d96a3287c4740e2bdc7f49470f45008adf5e792e2dd0a9d6689058a09ea0c2cc9bf0375a10cad48e4c69f6c8b0bcd738c1fbdfb37026af2b9faaceec864d422bbea5397abb56230a2c0273953b006521df16", 0x6c}], 0x3}}], 0x1, 0x8045) 1.545438941s ago: executing program 9 (id=2677): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r0, &(0x7f0000000940), 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6509, 0xc060c1c97385cfe1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) listen(r0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) recvmmsg(r2, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0xe69}], 0x1, 0x41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711214000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) 1.308661487s ago: executing program 0 (id=2679): r0 = accept$netrom(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @bcast}, [@netrom, @netrom, @default, @null, @netrom, @rose, @null, @bcast]}, &(0x7f0000000140)=0x48) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'ovf\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r4) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) accept$netrom(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @bcast}, [@netrom, @netrom, @default, @null, @netrom, @rose, @null, @bcast]}, &(0x7f0000000140)=0x48) (async) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async) socket$kcm(0xa, 0x2, 0x0) (async) socket(0x2, 0x80805, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'ovf\x00', 0x1, 0x80005, 0x6f}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r4) (async) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) (async) 1.297360691s ago: executing program 6 (id=2680): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x7fffffff, 0x0, 0x1, 0xe37c}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1d, 0x5, 0x6, 0x8, 0x8, r0, 0xedf, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x4}, 0x50) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x2d75000) (async, rerun: 64) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000240)={[0x4]}, 0x8}) (async, rerun: 64) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100fdffffff020000001d00000008000300", @ANYRES32=r2, @ANYBLOB="2c002f800c0002008000000000000000080001"], 0x48}}, 0x0) 1.22301081s ago: executing program 0 (id=2681): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x13, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x22000042, 0x1, 0x2}, 0x10) sendmsg$tipc(r0, &(0x7f00000006c0)={&(0x7f0000000540)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x10000000}}, 0x10, 0x0}, 0x0) 1.124717099s ago: executing program 9 (id=2682): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) readv(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/214, 0xd6}], 0x1) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001e0001eb25bd70000000000001"], 0x114}], 0x1}, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="480000001000010028bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="4cf2040001050000140003006e657464657673696d3000000000000014001680100001800c0004"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001a00010000000000fdffffff0a00", @ANYRES32=0x0, @ANYBLOB="0000000000b47d619900000000000014000100fc000000000000000000000000000001000000000000000000"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x1010, r1, 0x6e566000) sendto$inet6(r1, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) unshare(0x22020400) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000e00000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r5}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001900)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x28, 0x0, 0x1, 0x8}, 0x28) socket$tipc(0x1e, 0x2, 0x0) unshare(0x2a020400) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.070394584s ago: executing program 0 (id=2683): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1d, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x6a}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000000240035b90000000000000000070000000600040000ef0000060003"], 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x703d2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xa, 0x100}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 1.004941123s ago: executing program 6 (id=2684): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x4, 0x9}}}, 0x24}}, 0x14000000) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="0632ea08409809"], 0xb) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000908a97d7bbd7af1822aea2904ff3660018ff7f000000000000b04b14011695587c34fb868900000003130000010002130800000003041145bc1d2942d78ac0871b10db96378281b2a39e18849a2bcac96a971c1ca2b39d61639d5a3d474f3f0b9b8094ee3c54807c37018a7047b9bf22ffb832f1f4503886"], 0x0, 0x36, 0x0, 0x1, 0x9b2987a6}, 0x28) unshare(0x24060400) unshare(0x2c060000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x8010, r2, 0x952de000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="7901c2b8b9c63de39e0014000000de86b5d46270e18f3bd48d0885efe67496b87298c7ac353308f049af76c7cf62b983a7825923dc7b6a24e89292ae8e0c17fd4976ba0000000000000006fb6bb9732de5294a9e096f0ba3beec30a4df852f57e59a411b44d040f1d46c86ff866cb36828b40916f11c3d56f99cb45db4f4509f1ef67d6f9c0d3ffa6cc0c98c013d6253bd56102831af70f7350c8d16521686456a5b086faa", @ANYRES16=0x0, @ANYBLOB="000829bd7000fddbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r7) write$cgroup_int(r2, &(0x7f0000000440)=0x100000000, 0x12) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="b444a514ac6c71fd5da1ae880000", @ANYRES16=r8, @ANYBLOB="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"], 0x4b4}, 0x1, 0x0, 0x0, 0x40800}, 0x80) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$alg(r6, &(0x7f0000000880)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000800)="5fb623d119f3e4da2db9b4553af0677977ea12f6b73b8ff595ab9ed7ff94bae363a6e6ac214704763d6ae69b8ae86ccfc8cee1cb621c7f97ef33c6d82611267c78567544c15d491118cee3ebde4c03cd07fdf428420476d020968bec7c7b0a2be6eecf1d117a", 0x66}], 0x1, 0x0, 0x0, 0x4040000}], 0x1, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x50, &(0x7f00000a2000)={0x0, 0x0}, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x54, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}, [@typed={0x4}, @nested={0x2d, 0x1, 0x0, 0x1, [@generic="dfb593f47f4b41673ac2d58b72156954218a740aae3edfa7d91b311c7ccceee30eb65b7f1634644f82"]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 920.942472ms ago: executing program 0 (id=2685): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000008f00000000004000da41000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf0900000000000055090100000000809500000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffcf02000008000000b70300000800000085000000060000002500f4fff0ffffffbf91000000000000b7020000070000008500000085000000b7000000000000009500"], &(0x7f0000000080)='GPL\x00', 0xa, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) 793.660065ms ago: executing program 6 (id=2686): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f0000000280)=ANY=[@ANYRESOCT], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 644.204698ms ago: executing program 6 (id=2687): unshare(0x2040400) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x30b501, 0x0) read(r0, 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x11, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, 0xffffffffffffffff, 0x11}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001a00010000000000fdffffff0a000000", @ANYRES32=0x0, @ANYBLOB="000000001400030005000000000000000000000000000002140001000000000000000000000080"], 0x44}}, 0x0) 560.171052ms ago: executing program 1 (id=2688): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001e00010a030000000000000007000000ce642a8e32e88d096d156f58f85197d1efbc6400fda470095f15c7a28071a5aa35299b9c9ec3f87b33d4af6b6dc821a3e4f94ccabd139442c53433f5d437e0065147af3a481eebabc260ae973349f3156202"], 0x28}, 0x1, 0x0, 0x0, 0x20008084}, 0x0) sendto$inet(r0, &(0x7f0000000580)="e1", 0xfffffffffffffef1, 0x40000, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r3}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000800)=""/140, 0x8c}], 0x1}, 0x10000) socket$inet_tcp(0x2, 0x1, 0x0) (async) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001e00010a030000000000000007000000ce642a8e32e88d096d156f58f85197d1efbc6400fda470095f15c7a28071a5aa35299b9c9ec3f87b33d4af6b6dc821a3e4f94ccabd139442c53433f5d437e0065147af3a481eebabc260ae973349f3156202"], 0x28}, 0x1, 0x0, 0x0, 0x20008084}, 0x0) (async) sendto$inet(r0, &(0x7f0000000580)="e1", 0xfffffffffffffef1, 0x40000, 0x0, 0x0) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r3}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r4, @ANYBLOB="05"], 0x10) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) (async) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000800)=""/140, 0x8c}], 0x1}, 0x10000) (async) 528.174016ms ago: executing program 6 (id=2689): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) (async, rerun: 32) r4 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 32) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000000, 0x3032, r4, 0x683b1000) (async, rerun: 64) r5 = socket$inet6(0xa, 0x2, 0x0) (rerun: 64) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x6, &(0x7f00000002c0)={0x24, {{0x29, 0x3, 0x2000000, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x81}}}, 0x88) (async, rerun: 32) r6 = socket(0x10, 0x80002, 0x0) (rerun: 32) recvmmsg(r6, 0x0, 0x0, 0x12000, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r7, &(0x7f0000000080)='syz1\x00', 0x1ff) r8 = openat$cgroup(r7, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000c40), 0x12) mmap(&(0x7f0000492000/0x3000)=nil, 0x3000, 0x100000e, 0x40010, 0xffffffffffffffff, 0xdc18e000) (async) socket$packet(0x11, 0x2, 0x300) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, r10, 0x40004}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socket(0x1, 0x803, 0x0) (async, rerun: 32) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x44}}, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0xfffffffd, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20008084) (async) ioctl$sock_SIOCBRDELBR(r13, 0x89a2, &(0x7f0000000000)='bridge0\x00') (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) (rerun: 64) 289.000165ms ago: executing program 0 (id=2690): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r2, &(0x7f0000000380)='/', &(0x7f0000000400)}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0x4}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1}, 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r2, &(0x7f0000000380)='/', &(0x7f0000000400)}, 0x20) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0x4}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async) 208.881416ms ago: executing program 1 (id=2691): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x70, 0x30, 0x871a15abc695f20d, 0x0, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x4000000, 0xffffffffffffffff, 0x0, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}]}, {0x4}, {0xfffffffffffffd80}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)={0xd4, 0x2b, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0xc0, 0x11, 0x0, 0x1, [@nested={0xba, 0xc8, 0x0, 0x1, [@generic="b147593bf8927fc9df0861cf8ca52ddb622e301fd7696ac5ca81a80484298bc16c0bc093d7f00491b90aecd74e534ee12e1d69c8987f71cfc3092cbb735ea2fbe69e8fdad116f565fbeeac0583f051e85864d3102ce790eee5ade4ca8321af937a15", @typed={0x8, 0x114, 0x0, 0x0, @ipv4=@private=0xa010100}, @nested={0x4c, 0x18, 0x0, 0x1, [@generic="67d4d7cbae067ee75390c77f480218ceda9451d223a8fe7fab2898e1fdd99c62463f8c02c0c39f02bf2d1b78ee29a3a25ab4caa410f3de1ac56588d31146663917acf6379989eecb"]}]}]}]}, 0xd4}], 0x1, 0x0, 0x0, 0x84}, 0x300) (async, rerun: 64) r1 = socket$inet6(0xa, 0x2, 0x0) (rerun: 64) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @private0, 0xfffffffc}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="24000000000000002900000032000000fe"], 0x28}, 0x40000) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 139.013487ms ago: executing program 1 (id=2692): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x1, 0x0, 0x0) bind$tipc(r0, &(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) sendmsg$tipc(r0, &(0x7f0000000540)={&(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x3, 0x3, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24010800}, 0x4004) socket$tipc(0x1e, 0x5, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_int(r1, 0x107, 0x1, 0x0, 0x0) (async) bind$tipc(r0, &(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) (async) sendmsg$tipc(r0, &(0x7f0000000540)={&(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x3, 0x3, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24010800}, 0x4004) (async) 100.114755ms ago: executing program 0 (id=2693): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x5}]}}}]}, 0x44}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 24.967757ms ago: executing program 1 (id=2694): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000d80)={&(0x7f0000000640)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x1, 0x1, 0x1, {0xa, 0x4e20, 0x3, @mcast2, 0x6}}}, 0x80, 0x0}, 0x20000800) (async) syz_emit_ethernet(0x76, &(0x7f0000000080)={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "f7d8ff", 0x40, 0x3c, 0x1, @local, @mcast2, {[@hopopts={0x0, 0x4, '\x00', [@hao={0xc9, 0x10, @mcast1}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}]}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x0, 0x0, @val=0x80}}}}}}}}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @dev={0xfe, 0x80, '\x00', 0xfc}}, 0x80, 0x0}, 0x20000804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) 22.080918ms ago: executing program 6 (id=2695): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 0s ago: executing program 1 (id=2696): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xcf, 0x12}}}}, [@NL80211_ATTR_TESTDATA={0x32, 0x45, "f2565ccb5a8d800b22836aa4316f9e95f40ccbcc39e8a619fda81691e2f6b3316b3366064511a5f110046c82882a"}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xd0, r3, 0x400, 0x70bd28, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000003c0)={'xfrm0\x00', 0x1000}) r5 = socket(0x10, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000400)=@name={0x1e, 0x2, 0x2, {{0x41, 0x2}, 0x1}}, 0x10) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f0000000440)={0x18, 0x0, {0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, 'veth0_virt_wifi\x00'}}) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20000004) syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r5) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x18, 0x140d, 0x2, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x10000000}, 0x4000000) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f00000006c0), &(0x7f0000000700)=0x4) r6 = socket$alg(0x26, 0x5, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r4, 0xc0109414, &(0x7f0000000740)={0x66d, 0x3, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) recvmsg$can_raw(r1, &(0x7f000000a340)={&(0x7f000000a1c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f000000a240), 0x0, &(0x7f000000a280)=""/167, 0xa7}, 0x10022) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f000000a3c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f000000a400)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f000000a440)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f000000a500)={&(0x7f000000a380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f000000a4c0)={&(0x7f000000a480)={0x24, r8, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x24}, 0x1, 0x0, 0x0, 0x20002025}, 0x20000801) r11 = openat$cgroup_ro(r2, &(0x7f000000a540)='cpuset.effective_mems\x00', 0x0, 0x0) sendmsg$IPSET_CMD_TEST(r11, &(0x7f000000a640)={&(0x7f000000a580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f000000a600)={&(0x7f000000a5c0)={0x40, 0xb, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x40018}, 0x44000800) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f000000a680)) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f000000a6c0)={{r11}, "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"}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f000000b840)={r11, &(0x7f000000b6c0)="4cfd0201fae199acb04d82c989440a051d2c8210c5b365983bc64f4be865ba95590034992ca6d280f1395ca3ee76e0fbf75e875d1fa8596d00ea2efcf09cfbe36ef20810937ff6c16c4d68d7a2662acf3f2fbc2daa723cb8d3d2c1089886abfe7fb117784da1f87a718218d56da56fa492e81ce8478f341a2357eac2f6612166a2008664bd9143e980776cfdf775f0ddf7ca5312c9d9be65032906a827f25f4143400832014a326671dbe869804bccb4760332547208f9a7a2c983413bb3ac095f3e889c713404111df9bd", &(0x7f000000b7c0)=""/97}, 0x20) ioctl$BTRFS_IOC_INO_LOOKUP(r6, 0xd0009412, &(0x7f000000b880)={0x0, 0x8c}) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0x7, &(0x7f000000c880)={0x7, 0xd8d3, 0x9, 0x7f}, 0x10) kernel console output (not intermixed with test programs): g VLAN 0 to HW filter on device hsr1 [ 197.977789][T10726] tipc: Resetting bearer [ 198.038148][T10735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1223'. [ 198.058618][T10726] tipc: Disabling bearer [ 198.096213][T10746] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1226'. [ 198.144865][T10748] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1225'. [ 198.372966][T10755] bond7: entered promiscuous mode [ 198.379519][T10755] 8021q: adding VLAN 0 to HW filter on device bond7 [ 198.431163][T10763] lo speed is unknown, defaulting to 1000 [ 198.470736][T10760] lo speed is unknown, defaulting to 1000 [ 198.573556][ T51] Bluetooth: hci4: link tx timeout [ 198.580449][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 198.597434][ T5839] Bluetooth: hci4: link tx timeout [ 198.602683][ T5839] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 198.610723][ T5839] Bluetooth: hci4: link tx timeout [ 198.615943][ T5839] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 198.624196][ T5839] Bluetooth: hci4: link tx timeout [ 198.629837][ T5839] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 198.639790][ T5839] Bluetooth: hci4: link tx timeout [ 198.644932][ T5839] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 198.652847][ T5839] Bluetooth: hci4: link tx timeout [ 198.658324][ T5839] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 199.074452][T10772] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1231'. [ 199.376304][T10778] syzkaller1: entered promiscuous mode [ 199.382582][T10778] syzkaller1: entered allmulticast mode [ 199.739125][T10792] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1238'. [ 199.771300][T10792] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1238'. [ 199.783453][T10794] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1239'. [ 200.458530][T10804] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 200.475485][T10804] bond4 (unregistering): Released all slaves [ 200.503178][T10650] Set syz1 is full, maxelem 65536 reached [ 200.617596][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 200.966514][T10845] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1253'. [ 201.038059][T10850] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1253'. [ 201.348434][T10860] netlink: 'syz.0.1258': attribute type 1 has an invalid length. [ 201.358458][T10857] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1256'. [ 201.368111][T10857] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1256'. [ 201.419450][ T51] Bluetooth: hci2: command 0x0401 tx timeout [ 201.419474][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 201.425479][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 201.508979][T10873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1260'. [ 201.518867][T10865] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1259'. [ 201.973841][T10894] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20001 [ 201.998059][T10897] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1266'. [ 202.049833][T10902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1266'. [ 202.102392][T10907] netlink: 'syz.3.1267': attribute type 21 has an invalid length. [ 202.118818][T10897] team1: entered promiscuous mode [ 202.147388][T10897] team1: entered allmulticast mode [ 202.154576][T10911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1270'. [ 202.174226][T10916] netlink: 'syz.1.1268': attribute type 10 has an invalid length. [ 202.191629][T10902] team2: entered promiscuous mode [ 202.197771][T10902] team2: entered allmulticast mode [ 202.203323][T10907] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1267'. [ 202.215404][T10916] bond0: (slave wlan1): Opening slave failed [ 202.420176][T10929] netlink: 'syz.3.1276': attribute type 21 has an invalid length. [ 202.458347][T10920] lo speed is unknown, defaulting to 1000 [ 203.117210][T10959] team0: Port device bridge0 removed [ 203.465530][T10971] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 203.675504][T10986] lo speed is unknown, defaulting to 1000 [ 204.225451][T10985] lo speed is unknown, defaulting to 1000 [ 204.648988][T11019] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 205.070939][T11036] netlink: 'syz.3.1304': attribute type 29 has an invalid length. [ 205.174968][T11040] lo speed is unknown, defaulting to 1000 [ 205.191782][T11041] bond0: entered promiscuous mode [ 205.212946][T11041] bond_slave_0: entered promiscuous mode [ 205.233469][T11041] bond_slave_1: entered promiscuous mode [ 205.268242][T11041] batadv0: entered promiscuous mode [ 205.299900][T11041] debugfs: 'hsr1' already exists in 'hsr' [ 205.313654][T11041] Cannot create hsr debugfs directory [ 205.327068][T11041] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 205.337981][T11041] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 205.363112][T11036] netlink: 'syz.3.1304': attribute type 29 has an invalid length. [ 205.372577][T11036] netlink: 'syz.3.1304': attribute type 29 has an invalid length. [ 205.409316][T11036] netlink: 'syz.3.1304': attribute type 29 has an invalid length. [ 205.497752][T11036] netlink: 'syz.3.1304': attribute type 29 has an invalid length. [ 205.526099][T11036] netlink: 'syz.3.1304': attribute type 29 has an invalid length. [ 205.757695][T11054] lo speed is unknown, defaulting to 1000 [ 205.908896][T11059] tipc: Enabling of bearer rejected, failed to enable media [ 206.416345][T11106] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 206.540949][T11112] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 206.917723][T11130] lo speed is unknown, defaulting to 1000 [ 207.085287][T11143] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 207.097202][ T5826] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 207.136983][T11138] validate_nla: 27 callbacks suppressed [ 207.136999][T11138] netlink: 'syz.0.1326': attribute type 14 has an invalid length. [ 207.314071][T11153] lo speed is unknown, defaulting to 1000 [ 207.456633][T11154] lo speed is unknown, defaulting to 1000 [ 207.457457][T11157] __nla_validate_parse: 9 callbacks suppressed [ 207.457470][T11157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1333'. [ 207.478205][T11155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1331'. [ 207.567938][T11163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1334'. [ 208.390299][T11214] netlink: 480 bytes leftover after parsing attributes in process `syz.0.1345'. [ 208.412423][T11216] netlink: 'syz.3.1346': attribute type 10 has an invalid length. [ 208.421824][T11216] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1346'. [ 208.453352][T11216] batadv_slave_1: entered promiscuous mode [ 208.460920][T11216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.475271][T11216] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.484426][T11216] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.515092][T11216] bridge0: port 3(batadv_slave_1) entered blocking state [ 208.526662][T11216] bridge0: port 3(batadv_slave_1) entered disabled state [ 208.538514][T11216] batadv_slave_1: entered allmulticast mode [ 208.553790][T11226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1349'. [ 208.587228][T11214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1345'. [ 208.641214][T11214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1345'. [ 208.657464][T11214] hsr_slave_0: left promiscuous mode [ 208.728297][T11214] hsr_slave_1: left promiscuous mode [ 208.789186][T11234] veth1_to_bond: entered allmulticast mode [ 208.795760][T11234] veth1_to_bond: entered promiscuous mode [ 208.872998][T11233] veth1_to_bond: left promiscuous mode [ 208.880329][T11233] veth1_to_bond: left allmulticast mode [ 209.039988][T11248] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1357'. [ 209.199464][T11259] netlink: 'syz.0.1360': attribute type 13 has an invalid length. [ 209.317703][T11266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1363'. [ 209.422128][ T6792] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.439582][ T6792] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.523036][T11266] 8021q: adding VLAN 0 to HW filter on device bond4 [ 209.573213][ T6792] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.600124][ T6792] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.675932][T11285] netlink: 'syz.2.1367': attribute type 1 has an invalid length. [ 209.912649][T11303] ip6gretap0: entered promiscuous mode [ 209.930426][T11303] macsec1: entered promiscuous mode [ 209.944128][T11303] macsec1: entered allmulticast mode [ 209.959028][T11303] ip6gretap0: entered allmulticast mode [ 209.980498][T11297] tipc: Enabling of bearer rejected, failed to enable media [ 210.003341][T11298] bridge6: entered promiscuous mode [ 210.019495][T11298] bridge6: entered allmulticast mode [ 210.039102][T11298] team0: Port device bridge6 added [ 210.795787][T11361] bridge7: entered promiscuous mode [ 210.807583][T11361] bridge7: entered allmulticast mode [ 210.932499][T11370] tipc: Enabled bearer , priority 0 [ 211.038461][T11371] syzkaller0: entered promiscuous mode [ 211.044983][T11371] syzkaller0: entered allmulticast mode [ 211.055015][T11371] tipc: Resetting bearer [ 211.131219][T11370] tipc: Resetting bearer [ 212.421021][T11370] tipc: Disabling bearer [ 212.432523][T11392] kthread_run failed with err -4 [ 212.624700][T11414] IPVS: set_ctl: invalid protocol: 50 100.1.1.0:20003 [ 212.832098][T11427] FAULT_INJECTION: forcing a failure. [ 212.832098][T11427] name failslab, interval 1, probability 0, space 0, times 1 [ 212.873496][T11427] CPU: 0 UID: 0 PID: 11427 Comm: syz.4.1406 Not tainted syzkaller #0 PREEMPT(full) [ 212.873522][T11427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 212.873532][T11427] Call Trace: [ 212.873539][T11427] [ 212.873547][T11427] dump_stack_lvl+0x189/0x250 [ 212.873570][T11427] ? __pfx____ratelimit+0x10/0x10 [ 212.873594][T11427] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.873611][T11427] ? __pfx__printk+0x10/0x10 [ 212.873635][T11427] ? nf_hook+0x9d/0x380 [ 212.873657][T11427] should_fail_ex+0x414/0x560 [ 212.873681][T11427] should_failslab+0xa8/0x100 [ 212.873702][T11427] kmem_cache_alloc_noprof+0x73/0x3c0 [ 212.873728][T11427] ? skb_clone+0x212/0x3a0 [ 212.873754][T11427] skb_clone+0x212/0x3a0 [ 212.873775][T11427] ? ip_mc_output+0x311/0x590 [ 212.873795][T11427] ip_mc_output+0x334/0x590 [ 212.873817][T11427] ip_send_skb+0x74/0x100 [ 212.873836][T11427] udp_send_skb+0xaf1/0x14c0 [ 212.873874][T11427] udp_sendmsg+0x195a/0x2170 [ 212.873909][T11427] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 212.873929][T11427] ? __pfx_udp_sendmsg+0x10/0x10 [ 212.873956][T11427] ? rcu_read_unlock_special+0x3a2/0x4b0 [ 212.873997][T11427] ? __lock_acquire+0xab9/0xd20 [ 212.874027][T11427] ? sock_rps_record_flow+0x19/0x410 [ 212.874050][T11427] ? inet_sendmsg+0x29c/0x370 [ 212.874068][T11427] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 212.874093][T11427] __sock_sendmsg+0x19c/0x270 [ 212.874115][T11427] ____sys_sendmsg+0x52d/0x830 [ 212.874145][T11427] ? __pfx_____sys_sendmsg+0x10/0x10 [ 212.874178][T11427] ? import_iovec+0x74/0xa0 [ 212.874202][T11427] ___sys_sendmsg+0x21f/0x2a0 [ 212.874228][T11427] ? __pfx____sys_sendmsg+0x10/0x10 [ 212.874290][T11427] ? __fget_files+0x2a/0x420 [ 212.874309][T11427] ? __fget_files+0x3a0/0x420 [ 212.874339][T11427] __sys_sendmmsg+0x227/0x430 [ 212.874368][T11427] ? __pfx___sys_sendmmsg+0x10/0x10 [ 212.874402][T11427] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 212.874439][T11427] ? ksys_write+0x22a/0x250 [ 212.874460][T11427] ? __pfx_ksys_write+0x10/0x10 [ 212.874487][T11427] __x64_sys_sendmmsg+0xa0/0xc0 [ 212.874512][T11427] do_syscall_64+0xfa/0xfa0 [ 212.874534][T11427] ? lockdep_hardirqs_on+0x9c/0x150 [ 212.874557][T11427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.874573][T11427] ? clear_bhb_loop+0x60/0xb0 [ 212.874595][T11427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.874611][T11427] RIP: 0033:0x7f778358eec9 [ 212.874627][T11427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.874641][T11427] RSP: 002b:00007f77844d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 212.874661][T11427] RAX: ffffffffffffffda RBX: 00007f77837e5fa0 RCX: 00007f778358eec9 [ 212.874673][T11427] RDX: 0400000000000284 RSI: 0000200000004d00 RDI: 0000000000000003 [ 212.874685][T11427] RBP: 00007f77844d3090 R08: 0000000000000000 R09: 0000000000000000 [ 212.874695][T11427] R10: 0000000000000f00 R11: 0000000000000246 R12: 0000000000000001 [ 212.874706][T11427] R13: 00007f77837e6038 R14: 00007f77837e5fa0 R15: 00007fff3ac185f8 [ 212.874744][T11427] [ 213.541894][T11437] __nla_validate_parse: 4 callbacks suppressed [ 213.541910][T11437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1409'. [ 213.624696][T11445] lo speed is unknown, defaulting to 1000 [ 213.714117][T11455] netlink: 'syz.2.1413': attribute type 9 has an invalid length. [ 213.732300][T11455] netlink: 448 bytes leftover after parsing attributes in process `syz.2.1413'. [ 214.228491][T11475] FAULT_INJECTION: forcing a failure. [ 214.228491][T11475] name failslab, interval 1, probability 0, space 0, times 0 [ 214.251668][T11475] CPU: 0 UID: 0 PID: 11475 Comm: syz.4.1421 Not tainted syzkaller #0 PREEMPT(full) [ 214.251698][T11475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 214.251708][T11475] Call Trace: [ 214.251715][T11475] [ 214.251723][T11475] dump_stack_lvl+0x189/0x250 [ 214.251746][T11475] ? __pfx____ratelimit+0x10/0x10 [ 214.251770][T11475] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.251787][T11475] ? __pfx__printk+0x10/0x10 [ 214.251802][T11475] ? ipt_do_table+0x2a3/0x1640 [ 214.251831][T11475] ? iptable_mangle_hook+0x189/0x4c0 [ 214.251852][T11475] should_fail_ex+0x414/0x560 [ 214.251876][T11475] should_failslab+0xa8/0x100 [ 214.251898][T11475] kmem_cache_alloc_noprof+0x73/0x3c0 [ 214.251915][T11475] ? dst_alloc+0x105/0x170 [ 214.251936][T11475] dst_alloc+0x105/0x170 [ 214.251950][T11475] ? __pfx_nf_hook+0x10/0x10 [ 214.251968][T11475] rt_dst_clone+0x52/0x680 [ 214.251988][T11475] ip_mc_finish_output+0xe9/0x2d0 [ 214.252011][T11475] ip_mc_output+0x3a3/0x590 [ 214.252032][T11475] ip_send_skb+0x74/0x100 [ 214.252051][T11475] udp_send_skb+0xaf1/0x14c0 [ 214.252091][T11475] udp_sendmsg+0x195a/0x2170 [ 214.252122][T11475] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 214.252143][T11475] ? __pfx_udp_sendmsg+0x10/0x10 [ 214.252168][T11475] ? __lock_acquire+0xab9/0xd20 [ 214.252211][T11475] ? __lock_acquire+0xab9/0xd20 [ 214.252237][T11475] ? sock_rps_record_flow+0x19/0x410 [ 214.252260][T11475] ? inet_sendmsg+0x29c/0x370 [ 214.252278][T11475] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 214.252304][T11475] __sock_sendmsg+0x19c/0x270 [ 214.252326][T11475] ____sys_sendmsg+0x52d/0x830 [ 214.252355][T11475] ? __pfx_____sys_sendmsg+0x10/0x10 [ 214.252388][T11475] ? import_iovec+0x74/0xa0 [ 214.252414][T11475] ___sys_sendmsg+0x21f/0x2a0 [ 214.252440][T11475] ? __pfx____sys_sendmsg+0x10/0x10 [ 214.252501][T11475] ? __fget_files+0x2a/0x420 [ 214.252521][T11475] ? __fget_files+0x3a0/0x420 [ 214.252551][T11475] __sys_sendmmsg+0x227/0x430 [ 214.252587][T11475] ? __pfx___sys_sendmmsg+0x10/0x10 [ 214.252620][T11475] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 214.252655][T11475] ? ksys_write+0x22a/0x250 [ 214.252675][T11475] ? __pfx_ksys_write+0x10/0x10 [ 214.252699][T11475] __x64_sys_sendmmsg+0xa0/0xc0 [ 214.252724][T11475] do_syscall_64+0xfa/0xfa0 [ 214.252746][T11475] ? lockdep_hardirqs_on+0x9c/0x150 [ 214.252769][T11475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.252785][T11475] ? clear_bhb_loop+0x60/0xb0 [ 214.252805][T11475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.252819][T11475] RIP: 0033:0x7f778358eec9 [ 214.252836][T11475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.252851][T11475] RSP: 002b:00007f77844d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 214.252870][T11475] RAX: ffffffffffffffda RBX: 00007f77837e5fa0 RCX: 00007f778358eec9 [ 214.252884][T11475] RDX: 0400000000000284 RSI: 0000200000004d00 RDI: 0000000000000003 [ 214.252895][T11475] RBP: 00007f77844d3090 R08: 0000000000000000 R09: 0000000000000000 [ 214.252906][T11475] R10: 0000000000000f00 R11: 0000000000000246 R12: 0000000000000001 [ 214.252916][T11475] R13: 00007f77837e6038 R14: 00007f77837e5fa0 R15: 00007fff3ac185f8 [ 214.252948][T11475] [ 214.744480][T11484] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1420'. [ 215.255312][T11492] bond4: option resend_igmp: invalid value (1712898059) [ 215.284502][T11492] bond4: option resend_igmp: allowed values 0 - 255 [ 215.341485][T11492] bond4 (unregistering): Released all slaves [ 215.427165][T11495] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 215.456613][T11497] team0: No ports can be present during mode change [ 215.610287][T11512] tipc: Enabled bearer , priority 0 [ 215.618509][T11512] syzkaller0: entered promiscuous mode [ 215.624078][T11512] syzkaller0: entered allmulticast mode [ 215.651464][T11512] veth0_to_hsr: mtu less than device minimum [ 215.662022][T11511] tipc: Resetting bearer [ 215.703088][T11511] tipc: Disabling bearer [ 215.879235][ T30] audit: type=1800 audit(1759874867.940:5): pid=11508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1424" name="memory.events" dev="tmpfs" ino=1413 res=0 errno=0 [ 215.944407][T11522] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 216.175445][T11536] lo speed is unknown, defaulting to 1000 [ 216.385580][T11550] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1444'. [ 216.485375][T11552] netlink: 'syz.4.1445': attribute type 15 has an invalid length. [ 216.986206][T11585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1455'. [ 217.263322][T11590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1456'. [ 217.387686][T11590] IPv6: sit2: Disabled Multicast RS [ 217.511890][T11607] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1460'. [ 217.614038][T11610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1461'. [ 217.953820][T11620] bond0: (slave team0): Releasing backup interface [ 217.965665][T11620] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 218.061660][T11625] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1467'. [ 218.085960][T11628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1468'. [ 218.554717][T11647] netlink: 'syz.2.1474': attribute type 8 has an invalid length. [ 218.583106][T11647] team0: No ports can be present during mode change [ 218.721089][T11651] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 218.776476][T11658] IPVS: length: 63 != 24 [ 219.000903][T11666] __nla_validate_parse: 4 callbacks suppressed [ 219.000922][T11666] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1479'. [ 219.673607][T11711] x_tables: duplicate underflow at hook 3 [ 219.690362][T11715] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1493'. [ 219.733437][T11719] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1495'. [ 219.871774][T11726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1496'. [ 220.053381][T11736] netlink: 'syz.2.1499': attribute type 1 has an invalid length. [ 220.083609][T11736] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1499'. [ 220.117767][T11744] netlink: 'syz.2.1499': attribute type 1 has an invalid length. [ 220.125985][T11744] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1499'. [ 220.252578][T11749] FAULT_INJECTION: forcing a failure. [ 220.252578][T11749] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 220.267685][T11749] CPU: 1 UID: 0 PID: 11749 Comm: syz.0.1503 Not tainted syzkaller #0 PREEMPT(full) [ 220.267710][T11749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 220.267721][T11749] Call Trace: [ 220.267728][T11749] [ 220.267736][T11749] dump_stack_lvl+0x189/0x250 [ 220.267759][T11749] ? __pfx____ratelimit+0x10/0x10 [ 220.267792][T11749] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.267810][T11749] ? __pfx__printk+0x10/0x10 [ 220.267828][T11749] ? __might_fault+0xb0/0x130 [ 220.267863][T11749] should_fail_ex+0x414/0x560 [ 220.267885][T11749] _copy_from_iter+0x1de/0x1790 [ 220.267911][T11749] ? rcu_is_watching+0x15/0xb0 [ 220.267928][T11749] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 220.267949][T11749] ? __pfx__copy_from_iter+0x10/0x10 [ 220.267971][T11749] ? __build_skb_around+0x257/0x3e0 [ 220.267996][T11749] ? netlink_sendmsg+0x642/0xb30 [ 220.268014][T11749] ? skb_put+0x11b/0x210 [ 220.268037][T11749] netlink_sendmsg+0x6b2/0xb30 [ 220.268068][T11749] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.268094][T11749] ? aa_sock_msg_perm+0xf1/0x1d0 [ 220.268118][T11749] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 220.268140][T11749] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.268162][T11749] __sock_sendmsg+0x21c/0x270 [ 220.268185][T11749] ____sys_sendmsg+0x505/0x830 [ 220.268215][T11749] ? __pfx_____sys_sendmsg+0x10/0x10 [ 220.268248][T11749] ? import_iovec+0x74/0xa0 [ 220.268274][T11749] ___sys_sendmsg+0x21f/0x2a0 [ 220.268300][T11749] ? __pfx____sys_sendmsg+0x10/0x10 [ 220.268362][T11749] ? __fget_files+0x2a/0x420 [ 220.268381][T11749] ? __fget_files+0x3a0/0x420 [ 220.268412][T11749] __x64_sys_sendmsg+0x19b/0x260 [ 220.268438][T11749] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 220.268471][T11749] ? __pfx_ksys_write+0x10/0x10 [ 220.268494][T11749] ? do_syscall_64+0xbe/0xfa0 [ 220.268520][T11749] do_syscall_64+0xfa/0xfa0 [ 220.268541][T11749] ? lockdep_hardirqs_on+0x9c/0x150 [ 220.268564][T11749] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.268581][T11749] ? clear_bhb_loop+0x60/0xb0 [ 220.268602][T11749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.268618][T11749] RIP: 0033:0x7f1c70d8eec9 [ 220.268634][T11749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.268650][T11749] RSP: 002b:00007f1c71c32038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.268669][T11749] RAX: ffffffffffffffda RBX: 00007f1c70fe5fa0 RCX: 00007f1c70d8eec9 [ 220.268682][T11749] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000008 [ 220.268693][T11749] RBP: 00007f1c71c32090 R08: 0000000000000000 R09: 0000000000000000 [ 220.268704][T11749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.268715][T11749] R13: 00007f1c70fe6038 R14: 00007f1c70fe5fa0 R15: 00007ffef7f55f88 [ 220.268747][T11749] [ 220.874502][T11762] netlink: 280 bytes leftover after parsing attributes in process `syz.0.1507'. [ 221.162569][T11767] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1508'. [ 221.210044][T11764] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1508'. [ 221.571651][T11784] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1513'. [ 221.870048][T11796] FAULT_INJECTION: forcing a failure. [ 221.870048][T11796] name failslab, interval 1, probability 0, space 0, times 0 [ 221.885170][T11796] CPU: 1 UID: 0 PID: 11796 Comm: syz.2.1517 Not tainted syzkaller #0 PREEMPT(full) [ 221.885195][T11796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 221.885205][T11796] Call Trace: [ 221.885211][T11796] [ 221.885219][T11796] dump_stack_lvl+0x189/0x250 [ 221.885242][T11796] ? __pfx____ratelimit+0x10/0x10 [ 221.885265][T11796] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.885281][T11796] ? __pfx__printk+0x10/0x10 [ 221.885305][T11796] ? __pfx___might_resched+0x10/0x10 [ 221.885326][T11796] ? fs_reclaim_acquire+0x7d/0x100 [ 221.885350][T11796] should_fail_ex+0x414/0x560 [ 221.885373][T11796] should_failslab+0xa8/0x100 [ 221.885394][T11796] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 221.885412][T11796] ? __alloc_skb+0x112/0x2d0 [ 221.885435][T11796] __alloc_skb+0x112/0x2d0 [ 221.885459][T11796] netlink_ack+0x146/0xa50 [ 221.885477][T11796] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 221.885513][T11796] netlink_rcv_skb+0x28c/0x470 [ 221.885531][T11796] ? __lock_acquire+0xab9/0xd20 [ 221.885558][T11796] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 221.885580][T11796] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 221.885612][T11796] ? netlink_deliver_tap+0x2e/0x1b0 [ 221.885655][T11796] netlink_unicast+0x82f/0x9e0 [ 221.885685][T11796] ? __pfx_netlink_unicast+0x10/0x10 [ 221.885707][T11796] ? netlink_sendmsg+0x642/0xb30 [ 221.885726][T11796] ? skb_put+0x11b/0x210 [ 221.885751][T11796] netlink_sendmsg+0x805/0xb30 [ 221.885782][T11796] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.885807][T11796] ? aa_sock_msg_perm+0xf1/0x1d0 [ 221.885831][T11796] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 221.885852][T11796] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.885874][T11796] __sock_sendmsg+0x21c/0x270 [ 221.885895][T11796] ____sys_sendmsg+0x505/0x830 [ 221.885924][T11796] ? __pfx_____sys_sendmsg+0x10/0x10 [ 221.885969][T11796] ? import_iovec+0x74/0xa0 [ 221.885995][T11796] ___sys_sendmsg+0x21f/0x2a0 [ 221.886021][T11796] ? __pfx____sys_sendmsg+0x10/0x10 [ 221.886085][T11796] ? __fget_files+0x2a/0x420 [ 221.886103][T11796] ? __fget_files+0x3a0/0x420 [ 221.886136][T11796] __x64_sys_sendmsg+0x19b/0x260 [ 221.886163][T11796] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 221.886197][T11796] ? __pfx_ksys_write+0x10/0x10 [ 221.886218][T11796] ? do_syscall_64+0xbe/0xfa0 [ 221.886245][T11796] do_syscall_64+0xfa/0xfa0 [ 221.886265][T11796] ? lockdep_hardirqs_on+0x9c/0x150 [ 221.886289][T11796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.886305][T11796] ? clear_bhb_loop+0x60/0xb0 [ 221.886327][T11796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.886343][T11796] RIP: 0033:0x7f05d2d8eec9 [ 221.886360][T11796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.886375][T11796] RSP: 002b:00007f05d3bea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.886394][T11796] RAX: ffffffffffffffda RBX: 00007f05d2fe5fa0 RCX: 00007f05d2d8eec9 [ 221.886407][T11796] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000008 [ 221.886419][T11796] RBP: 00007f05d3bea090 R08: 0000000000000000 R09: 0000000000000000 [ 221.886430][T11796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.886441][T11796] R13: 00007f05d2fe6038 R14: 00007f05d2fe5fa0 R15: 00007ffd043d99a8 [ 221.886475][T11796] [ 222.261610][T11800] tipc: Enabled bearer , priority 0 [ 222.269966][T11801] tipc: Enabling of bearer rejected, already enabled [ 222.928873][T11829] lo speed is unknown, defaulting to 1000 [ 223.364376][T11839] FAULT_INJECTION: forcing a failure. [ 223.364376][T11839] name failslab, interval 1, probability 0, space 0, times 0 [ 223.378232][ T8751] tipc: Node number set to 368142932 [ 223.408827][T11839] CPU: 1 UID: 0 PID: 11839 Comm: syz.3.1530 Not tainted syzkaller #0 PREEMPT(full) [ 223.408853][T11839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 223.408863][T11839] Call Trace: [ 223.408870][T11839] [ 223.408878][T11839] dump_stack_lvl+0x189/0x250 [ 223.408899][T11839] ? __pfx____ratelimit+0x10/0x10 [ 223.408921][T11839] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.408937][T11839] ? __pfx__printk+0x10/0x10 [ 223.408958][T11839] ? __pfx___might_resched+0x10/0x10 [ 223.408979][T11839] ? fs_reclaim_acquire+0x7d/0x100 [ 223.409002][T11839] should_fail_ex+0x414/0x560 [ 223.409024][T11839] should_failslab+0xa8/0x100 [ 223.409045][T11839] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 223.409064][T11839] ? __alloc_skb+0x112/0x2d0 [ 223.409088][T11839] __alloc_skb+0x112/0x2d0 [ 223.409111][T11839] netlink_ack+0x146/0xa50 [ 223.409129][T11839] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 223.409148][T11839] ? ref_tracker_free+0x63a/0x7d0 [ 223.409166][T11839] ? __asan_memcpy+0x40/0x70 [ 223.409186][T11839] ? __pfx_ref_tracker_free+0x10/0x10 [ 223.409212][T11839] netlink_rcv_skb+0x28c/0x470 [ 223.409233][T11839] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 223.409254][T11839] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 223.409288][T11839] ? netlink_deliver_tap+0x2e/0x1b0 [ 223.409316][T11839] netlink_unicast+0x82f/0x9e0 [ 223.409346][T11839] ? __pfx_netlink_unicast+0x10/0x10 [ 223.409366][T11839] ? netlink_sendmsg+0x642/0xb30 [ 223.409386][T11839] ? skb_put+0x11b/0x210 [ 223.409411][T11839] netlink_sendmsg+0x805/0xb30 [ 223.409443][T11839] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.409468][T11839] ? aa_sock_msg_perm+0xf1/0x1d0 [ 223.409500][T11839] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 223.409522][T11839] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.409545][T11839] __sock_sendmsg+0x21c/0x270 [ 223.409567][T11839] ____sys_sendmsg+0x505/0x830 [ 223.409597][T11839] ? __pfx_____sys_sendmsg+0x10/0x10 [ 223.409629][T11839] ? import_iovec+0x74/0xa0 [ 223.409656][T11839] ___sys_sendmsg+0x21f/0x2a0 [ 223.409720][T11839] ? __pfx____sys_sendmsg+0x10/0x10 [ 223.409784][T11839] ? __fget_files+0x2a/0x420 [ 223.409803][T11839] ? __fget_files+0x3a0/0x420 [ 223.409837][T11839] __x64_sys_sendmsg+0x19b/0x260 [ 223.409863][T11839] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 223.409896][T11839] ? __pfx_ksys_write+0x10/0x10 [ 223.409918][T11839] ? do_syscall_64+0xbe/0xfa0 [ 223.409946][T11839] do_syscall_64+0xfa/0xfa0 [ 223.409967][T11839] ? lockdep_hardirqs_on+0x9c/0x150 [ 223.409990][T11839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.410007][T11839] ? clear_bhb_loop+0x60/0xb0 [ 223.410028][T11839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.410044][T11839] RIP: 0033:0x7f04e458eec9 [ 223.410061][T11839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.410076][T11839] RSP: 002b:00007f04e534a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.410096][T11839] RAX: ffffffffffffffda RBX: 00007f04e47e5fa0 RCX: 00007f04e458eec9 [ 223.410109][T11839] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000008 [ 223.410120][T11839] RBP: 00007f04e534a090 R08: 0000000000000000 R09: 0000000000000000 [ 223.410131][T11839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.410142][T11839] R13: 00007f04e47e6038 R14: 00007f04e47e5fa0 R15: 00007ffc3296ae18 [ 223.410175][T11839] [ 224.126074][T11852] netlink: 'syz.0.1534': attribute type 4 has an invalid length. [ 224.162911][T11852] __nla_validate_parse: 3 callbacks suppressed [ 224.162930][T11852] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1534'. [ 224.184898][T11852] block nbd0: not configured, cannot reconfigure [ 224.445633][T11873] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1540'. [ 224.501197][T11883] erspan0: entered allmulticast mode [ 224.563450][T11882] sctp: [Deprecated]: syz.2.1542 (pid 11882) Use of struct sctp_assoc_value in delayed_ack socket option. [ 224.563450][T11882] Use struct sctp_sack_info instead [ 224.602810][T11883] erspan0: left allmulticast mode [ 225.498231][T11917] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1552'. [ 225.689015][T11924] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1554'. [ 225.762505][T11927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1555'. [ 225.868058][T11931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1556'. [ 225.879131][T11930] lo speed is unknown, defaulting to 1000 [ 226.131402][T11913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1551'. [ 226.429110][T11953] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1562'. [ 227.373247][T11967] netlink: 'syz.3.1565': attribute type 8 has an invalid length. [ 227.381315][T11967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1565'. [ 227.429237][T11967] bond0: entered promiscuous mode [ 227.457648][T11967] bond_slave_0: entered promiscuous mode [ 227.463764][T11967] bond_slave_1: entered promiscuous mode [ 227.475781][T11967] veth1_to_bridge: entered promiscuous mode [ 227.489008][T11967] debugfs: 'hsr1' already exists in 'hsr' [ 227.494782][T11967] Cannot create hsr debugfs directory [ 227.526991][T11967] hsr1: entered promiscuous mode [ 227.662147][T11983] vlan2: entered promiscuous mode [ 227.751135][T11984] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1571'. [ 227.841144][T11984] tun0: tun_chr_ioctl cmd 2147767521 [ 228.620325][T12025] lo speed is unknown, defaulting to 1000 [ 229.135555][T12041] lo speed is unknown, defaulting to 1000 [ 229.676193][T12063] __nla_validate_parse: 6 callbacks suppressed [ 229.676213][T12063] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1592'. [ 229.809192][T12074] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1597'. [ 229.833917][T12074] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1597'. [ 230.241565][T12104] netlink: 'syz.0.1607': attribute type 1 has an invalid length. [ 230.345684][T12104] 8021q: adding VLAN 0 to HW filter on device bond9 [ 230.378503][T12104] bond9: entered promiscuous mode [ 230.400447][T12104] netlink: 'syz.0.1607': attribute type 4 has an invalid length. [ 230.572477][T12123] tipc: Enabling of bearer rejected, already enabled [ 230.764688][T12130] lo speed is unknown, defaulting to 1000 [ 230.872934][T12126] mpoa:atm_mpoa_vcc_attach: mpoa:Short read (missed 12 bytes) from userland [ 230.889861][T12133] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1614'. [ 230.904426][T12142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1615'. [ 230.981298][T12141] syzkaller1: entered promiscuous mode [ 231.000408][T12141] syzkaller1: entered allmulticast mode [ 231.019594][T12145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1617'. [ 231.042021][T12145] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1617'. [ 231.057887][T12140] gretap3: entered promiscuous mode [ 231.070658][T12146] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1616'. [ 231.742752][T12177] team0 (unregistering): Port device bridge6 removed [ 231.866067][T12186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1625'. [ 232.364390][T12214] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1630'. [ 232.552160][T12224] lo speed is unknown, defaulting to 1000 [ 232.935422][T12252] netlink: 'syz.3.1636': attribute type 63 has an invalid length. [ 233.009090][T12250] lo speed is unknown, defaulting to 1000 [ 233.797725][T12278] lo speed is unknown, defaulting to 1000 [ 234.499326][T12318] batman_adv: batadv0: Adding interface: macvtap1 [ 234.505903][T12318] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.532162][T12318] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 234.634404][ T8751] IPVS: starting estimator thread 0... [ 234.739508][T12327] IPVS: using max 31 ests per chain, 74400 per kthread [ 234.759756][T12340] __nla_validate_parse: 7 callbacks suppressed [ 234.759775][T12340] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1658'. [ 234.859766][T12345] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1658'. [ 235.071519][ T6312] IPVS: stop unused estimator thread 0... [ 235.119457][T12354] bond0: Error: Cannot enslave bond to itself. [ 235.266540][T12366] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1669'. [ 235.316378][T12368] netlink: 324 bytes leftover after parsing attributes in process `syz.0.1670'. [ 235.585599][T12388] lo speed is unknown, defaulting to 1000 [ 235.825935][T12399] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1679'. [ 235.883462][T12401] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 235.913429][T12403] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 236.043525][T12409] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1682'. [ 236.409692][T12424] syzkaller0: entered promiscuous mode [ 236.429763][T12424] syzkaller0: entered allmulticast mode [ 236.485682][T12428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1689'. [ 236.501208][T12428] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1689'. [ 236.556256][T12430] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1688'. [ 236.814426][T12436] bond3: invalid ARP target 0.0.0.0 specified for addition [ 236.822013][T12436] bond3: option arp_ip_target: invalid value (0) [ 236.830612][T12436] bond3 (unregistering): Released all slaves [ 236.891273][T12440] netlink: 'syz.4.1691': attribute type 1 has an invalid length. [ 236.992902][T12440] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 237.014187][T12440] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 237.096226][T12447] bond5: (slave bridge3): Enslaving as an active interface with a down link [ 237.145520][T12440] bond5: (slave gretap2): making interface the new active one [ 237.180926][T12440] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 237.250524][T12447] macvlan2: entered promiscuous mode [ 237.265635][T12447] macvlan2: entered allmulticast mode [ 237.293470][T12447] bond5: entered promiscuous mode [ 237.319856][T12447] gretap2: entered promiscuous mode [ 237.328753][T12447] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 237.365244][T12447] bond5: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 237.386576][T12447] bond5: left promiscuous mode [ 237.395004][T12447] gretap2: left promiscuous mode [ 237.823421][T12503] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1708'. [ 238.046122][T12521] syzkaller0: entered promiscuous mode [ 238.057930][T12521] syzkaller0: entered allmulticast mode [ 238.752899][T12522] ip6tnl2: left promiscuous mode [ 238.762107][T12522] ip6tnl2: left allmulticast mode [ 238.787234][T12522] bond2: left promiscuous mode [ 238.798595][T12522] ip6gretap0: left allmulticast mode [ 238.804153][T12522] macsec1: left promiscuous mode [ 238.837536][T12522] macsec1: left allmulticast mode [ 238.861080][T12522] hsr1: left promiscuous mode [ 239.039006][T12558] netlink: 'syz.0.1718': attribute type 13 has an invalid length. [ 239.071474][T12558] netlink: 'syz.0.1718': attribute type 17 has an invalid length. [ 241.197572][T12573] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1721'. [ 241.255996][T12563] lo speed is unknown, defaulting to 1000 [ 241.615168][T12582] lo speed is unknown, defaulting to 1000 [ 241.715891][T12590] lo speed is unknown, defaulting to 1000 [ 242.304634][T12627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1739'. [ 242.455565][T12639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1741'. [ 242.566373][T12641] vlan0: entered promiscuous mode [ 242.604304][T12645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1743'. [ 242.607556][T12641] hsr_slave_1: entered promiscuous mode [ 242.657097][T12641] vlan0: entered allmulticast mode [ 242.671569][T12641] hsr_slave_1: entered allmulticast mode [ 242.722975][T12647] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 243.056318][T12660] netlink: 'syz.2.1748': attribute type 5 has an invalid length. [ 243.182476][T12650] lo speed is unknown, defaulting to 1000 [ 243.291647][T12665] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1749'. [ 243.301926][T12665] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1749'. [ 243.448080][T12668] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1750'. [ 243.484171][T12668] 8021q: adding VLAN 0 to HW filter on device bond3 [ 243.514672][T12668] vlan0: entered promiscuous mode [ 243.520699][T12668] bond3: entered promiscuous mode [ 243.526045][T12668] vlan0: entered allmulticast mode [ 243.531826][T12668] bond3: entered allmulticast mode [ 243.640029][T12684] ieee802154 phy1 wpan1: encryption failed: -22 [ 244.079551][T12708] lo speed is unknown, defaulting to 1000 [ 244.153515][T12709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1762'. [ 244.337402][T12720] netlink: 'syz.4.1765': attribute type 4 has an invalid length. [ 244.353172][T12721] netlink: 'syz.4.1765': attribute type 4 has an invalid length. [ 244.413619][T12726] netlink: 300 bytes leftover after parsing attributes in process `syz.2.1766'. [ 244.418097][T12725] netlink: 'syz.4.1765': attribute type 4 has an invalid length. [ 244.760408][T12747] netlink: 'syz.4.1773': attribute type 33 has an invalid length. [ 244.802366][T12747] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1773'. [ 244.953805][T12759] bond4 (unregistering): Released all slaves [ 245.103137][T12763] lo speed is unknown, defaulting to 1000 [ 245.193457][T12770] tipc: Enabled bearer , priority 0 [ 245.202222][T12770] syzkaller0: entered promiscuous mode [ 245.211496][T12770] syzkaller0: entered allmulticast mode [ 245.319315][T12770] tipc: Resetting bearer [ 245.361292][T12769] tipc: Resetting bearer [ 245.428036][T12769] tipc: Disabling bearer [ 245.440946][ T2936] bridge0: port 3(dummy0) entered disabled state [ 245.734489][T12800] netlink: 'syz.2.1785': attribute type 153 has an invalid length. [ 245.929357][T12806] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 245.935388][T12806] syzkaller1: linktype set to 823 [ 246.149082][T12817] bond0: (slave dummy0): Releasing backup interface [ 246.176246][T12817] dummy0 (unregistering): left promiscuous mode [ 246.307349][T12824] netlink: 'syz.3.1793': attribute type 1 has an invalid length. [ 246.405362][T12831] bond4: entered promiscuous mode [ 246.424697][T12831] bond4: entered allmulticast mode [ 246.442778][T12824] __nla_validate_parse: 6 callbacks suppressed [ 246.442798][T12824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1793'. [ 246.493370][T12831] 8021q: adding VLAN 0 to HW filter on device bond4 [ 246.498364][T12824] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1793'. [ 246.543712][T12834] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1795'. [ 246.739112][T12855] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1800'. [ 246.754346][T12858] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1802'. [ 246.833074][T12855] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1800'. [ 246.953312][T12867] lo speed is unknown, defaulting to 1000 [ 247.368029][T12892] lo speed is unknown, defaulting to 1000 [ 247.934546][T12880] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 247.956378][T12880] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 247.992338][T12880] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 248.006473][T12880] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 248.028296][T12880] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 248.042133][T12880] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 248.070070][T12880] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 248.079714][T12880] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 248.287604][T12917] syzkaller1: entered promiscuous mode [ 248.297406][T12917] syzkaller1: entered allmulticast mode [ 248.468587][T12922] lo speed is unknown, defaulting to 1000 [ 248.860049][T12944] tipc: Enabled bearer , priority 0 [ 248.871617][T12944] syzkaller0: entered promiscuous mode [ 248.900714][T12944] syzkaller0: entered allmulticast mode [ 249.052969][T12944] tipc: Resetting bearer [ 249.091906][T12943] tipc: Resetting bearer [ 249.142710][T12943] tipc: Disabling bearer [ 249.164165][T12956] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1827'. [ 249.180486][T12956] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1827'. [ 249.190736][T12957] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1827'. [ 249.201347][T12957] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1827'. [ 249.556705][T12977] netlink: 'syz.4.1832': attribute type 10 has an invalid length. [ 249.614149][T12977] bridge0: port 3(dummy0) entered disabled state [ 249.644265][T12977] dummy0: left allmulticast mode [ 249.652582][T12977] dummy0: left promiscuous mode [ 249.659627][T12977] bridge0: port 3(dummy0) entered disabled state [ 249.679182][T12977] dummy0: entered promiscuous mode [ 249.697338][T12977] bond0: (slave dummy0): Enslaving as an active interface with a down link [ 250.400850][T13025] tipc: Failed to remove unknown binding: 66,1,1/0:505712114/505712116 [ 250.427774][T13025] tipc: Failed to remove unknown binding: 66,1,1/0:505712114/505712116 [ 250.449915][T13025] tipc: Failed to remove unknown binding: 66,1,1/0:505712114/505712116 [ 250.731332][T13050] netlink: 'syz.4.1852': attribute type 4 has an invalid length. [ 250.782649][T13050] netlink: 'syz.4.1852': attribute type 4 has an invalid length. [ 251.029338][T13066] lo speed is unknown, defaulting to 1000 [ 251.157338][T13075] netlink: 'syz.3.1860': attribute type 15 has an invalid length. [ 251.571939][T13101] lo speed is unknown, defaulting to 1000 [ 252.564687][T13131] tipc: Enabled bearer , priority 0 [ 252.572731][T13131] syzkaller0: entered promiscuous mode [ 252.578816][T13131] syzkaller0: entered allmulticast mode [ 252.603657][T13131] tipc: Resetting bearer [ 252.766589][T13130] tipc: Resetting bearer [ 252.823370][T13130] tipc: Disabling bearer [ 252.845698][T13145] __nla_validate_parse: 8 callbacks suppressed [ 252.845716][T13145] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1878'. [ 252.913976][T13150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1881'. [ 253.437550][T13188] x_tables: duplicate underflow at hook 2 [ 253.443432][T13188] x_tables: duplicate underflow at hook 2 [ 253.450813][T13188] x_tables: duplicate underflow at hook 2 [ 253.456727][T13188] x_tables: duplicate underflow at hook 2 [ 253.463715][T13188] x_tables: duplicate underflow at hook 2 [ 253.469994][T13188] x_tables: duplicate underflow at hook 2 [ 253.512451][T13193] netlink: 'syz.0.1891': attribute type 30 has an invalid length. [ 253.664818][T13201] lo speed is unknown, defaulting to 1000 [ 254.133198][T13213] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1898'. [ 254.153164][T13213] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1898'. [ 254.169137][T13214] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1898'. [ 254.248769][T13221] netlink: 'syz.1.1900': attribute type 1 has an invalid length. [ 254.259587][T13221] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1900'. [ 254.395368][T13227] lo speed is unknown, defaulting to 1000 [ 254.545536][T13237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1904'. [ 255.555653][T13260] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1909'. [ 255.666346][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.934163][T13266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1910'. [ 255.965809][T13266] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1910'. [ 256.355344][T13290] pim6reg1: entered promiscuous mode [ 256.375930][T13290] pim6reg1: entered allmulticast mode [ 256.395146][T13295] macvtap2: entered promiscuous mode [ 256.409325][T13295] bridge0: entered promiscuous mode [ 256.414922][T13295] macvtap2: entered allmulticast mode [ 256.422376][T13295] bridge0: entered allmulticast mode [ 256.672417][T13311] netlink: 'syz.3.1925': attribute type 58 has an invalid length. [ 256.693873][T13311] netlink: 'syz.3.1925': attribute type 1 has an invalid length. [ 256.733346][T13311] bond5: entered promiscuous mode [ 256.739749][T13311] 8021q: adding VLAN 0 to HW filter on device bond5 [ 256.812101][T13324] netlink: 'syz.3.1929': attribute type 3 has an invalid length. [ 256.820809][T13324] netlink: 'syz.3.1929': attribute type 3 has an invalid length. [ 256.851231][T13326] openvswitch: netlink: Missing key (keys=1040, expected=100) [ 256.965989][T13326] xt_CT: No such helper "snmp" [ 257.015652][T13337] netlink: 'syz.3.1932': attribute type 1 has an invalid length. [ 257.024309][T13332] lo speed is unknown, defaulting to 1000 [ 257.109392][T13337] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 257.300734][T13352] lo speed is unknown, defaulting to 1000 [ 257.843336][T13373] lo speed is unknown, defaulting to 1000 [ 258.052525][T13387] lo speed is unknown, defaulting to 1000 [ 258.078662][T13391] netlink: 'syz.4.1942': attribute type 16 has an invalid length. [ 258.086517][T13391] netlink: 'syz.4.1942': attribute type 17 has an invalid length. [ 258.174830][T13391] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 258.577780][T13412] __nla_validate_parse: 8 callbacks suppressed [ 258.577805][T13412] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1949'. [ 258.615480][T13417] netlink: 'syz.2.1950': attribute type 9 has an invalid length. [ 258.623869][T13417] netlink: 448 bytes leftover after parsing attributes in process `syz.2.1950'. [ 258.934403][T13436] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1955'. [ 259.096697][T13444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1958'. [ 259.163411][T13440] lo speed is unknown, defaulting to 1000 [ 259.334553][T13451] lo speed is unknown, defaulting to 1000 [ 259.727484][T13468] lo speed is unknown, defaulting to 1000 [ 259.795666][T13477] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 260.070436][T13488] lo speed is unknown, defaulting to 1000 [ 260.398059][T13500] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1969'. [ 260.485380][T13502] lo speed is unknown, defaulting to 1000 [ 260.842719][T13513] lo speed is unknown, defaulting to 1000 [ 260.966642][T13521] netlink: 'syz.4.1974': attribute type 1 has an invalid length. [ 261.069649][T13523] netem: change failed [ 261.316342][T13528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1976'. [ 261.515755][T13539] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 261.545851][T13536] tipc: Resetting bearer [ 261.592217][T13537] pimreg: entered allmulticast mode [ 261.607672][T13534] pimreg: left allmulticast mode [ 261.635120][T13544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1980'. [ 261.695164][T13535] lo speed is unknown, defaulting to 1000 [ 261.728711][T13543] lo speed is unknown, defaulting to 1000 [ 261.935071][T13546] tipc: Resetting bearer [ 261.999476][T13549] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1982'. [ 262.013834][T13546] bridge0: left allmulticast mode [ 262.039380][T13546] bridge0: left promiscuous mode [ 262.153287][T13549] bond1: entered promiscuous mode [ 262.176521][T13549] 8021q: adding VLAN 0 to HW filter on device bond1 [ 262.218672][T13551] lo speed is unknown, defaulting to 1000 [ 262.616485][T13576] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1988'. [ 262.719317][T13576] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.871443][T13576] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.955291][T13576] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.037647][T13576] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.272799][ T6777] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.314598][ T6777] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.343452][ T6777] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.384304][ T6777] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.834648][T13616] nicvf0: entered promiscuous mode [ 263.871784][T13620] lo speed is unknown, defaulting to 1000 [ 264.386298][T13634] tipc: Enabled bearer , priority 0 [ 264.479613][T13634] syzkaller0: entered promiscuous mode [ 264.485198][T13634] syzkaller0: entered allmulticast mode [ 264.508321][T13634] tipc: Resetting bearer [ 264.514366][T13636] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2003'. [ 264.530506][T13636] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2003'. [ 264.561153][T13633] tipc: Resetting bearer [ 265.406985][ T5882] tipc: Node number set to 3772860538 [ 266.085082][T13633] tipc: Disabling bearer [ 266.101053][T13658] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2010'. [ 266.118377][T13658] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2010'. [ 266.129591][T13658] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2010'. [ 266.147191][T13657] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2010'. [ 266.157105][T13657] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2010'. [ 266.166353][T13657] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2010'. [ 266.301469][T13667] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2012'. [ 266.418258][T13669] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2013'. [ 266.455123][T13669] veth0_to_bond: entered promiscuous mode [ 266.478147][T13669] veth0_to_bond: left promiscuous mode [ 266.771872][T13687] netlink: 'syz.1.2020': attribute type 2 has an invalid length. [ 266.780065][T13687] netlink: 'syz.1.2020': attribute type 8 has an invalid length. [ 267.938504][T13740] bond6: option ad_user_port_key: invalid value (65535) [ 267.945738][T13740] bond6: option ad_user_port_key: allowed values 0 - 1023 [ 268.015598][T13740] bond6 (unregistering): Released all slaves [ 268.125416][T13748] tipc: Enabled bearer , priority 0 [ 268.133771][T13748] syzkaller0: entered promiscuous mode [ 268.139739][T13748] syzkaller0: entered allmulticast mode [ 268.172203][T13748] tipc: Resetting bearer [ 268.204690][T13756] netlink: 'syz.3.2038': attribute type 4 has an invalid length. [ 268.341407][T13764] lo speed is unknown, defaulting to 1000 [ 268.389327][T13768] netlink: 'syz.3.2040': attribute type 9 has an invalid length. [ 269.064991][T13747] tipc: Resetting bearer [ 269.082189][T13747] tipc: Disabling bearer [ 269.392202][T13803] lo speed is unknown, defaulting to 1000 [ 269.421979][T13806] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 269.589592][T13813] __nla_validate_parse: 14 callbacks suppressed [ 269.589609][T13813] netlink: 20824 bytes leftover after parsing attributes in process `syz.1.2055'. [ 269.835547][T13819] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2056'. [ 269.989155][T13826] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 270.418708][T13844] netlink: zone id is out of range [ 270.424413][T13847] netlink: zone id is out of range [ 270.430337][T13844] netlink: zone id is out of range [ 270.435528][T13844] netlink: zone id is out of range [ 270.441814][T13847] netlink: zone id is out of range [ 270.454242][T13847] netlink: zone id is out of range [ 270.484557][T13843] netlink: del zone limit has 4 unknown bytes [ 270.500945][T13844] netlink: zone id is out of range [ 270.514625][T13847] netlink: zone id is out of range [ 270.737545][T13857] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2066'. [ 270.940522][T13861] lo speed is unknown, defaulting to 1000 [ 270.953739][T13866] netlink: 'syz.2.2069': attribute type 4 has an invalid length. [ 270.964820][T13862] lo speed is unknown, defaulting to 1000 [ 270.997283][T13865] lo speed is unknown, defaulting to 1000 [ 271.653305][T13898] blkio.reset_stats is deprecated [ 271.770805][T13909] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2076'. [ 272.039625][T13923] netlink: 'syz.4.2082': attribute type 32 has an invalid length. [ 272.233559][T13928] lo speed is unknown, defaulting to 1000 [ 272.414445][T13937] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2084'. [ 272.494370][T13940] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2085'. [ 272.520526][T13941] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2085'. [ 272.544915][T13940] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2085'. [ 272.555771][T13941] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2085'. [ 272.591506][T13941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2085'. [ 273.259681][T13979] lo speed is unknown, defaulting to 1000 [ 273.815089][T14013] lo speed is unknown, defaulting to 1000 [ 273.867779][ T30] audit: type=1800 audit(1759874925.940:6): pid=14025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2108" name="memory.events" dev="tmpfs" ino=2175 res=0 errno=0 [ 273.898117][T14011] syzkaller1: entered promiscuous mode [ 273.904930][T14011] syzkaller1: entered allmulticast mode [ 273.917706][ T30] audit: type=1804 audit(1759874925.960:7): pid=14025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2108" name="/newroot/418/memory.events" dev="tmpfs" ino=2175 res=1 errno=0 [ 273.921441][T14021] lo speed is unknown, defaulting to 1000 [ 274.076353][T14034] C: renamed from lo [ 274.187418][T14021] lo speed is unknown, defaulting to 1000 [ 274.194372][T14021] lo speed is unknown, defaulting to 1000 [ 274.241652][T14021] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 274.283144][T14021] lo speed is unknown, defaulting to 1000 [ 274.293232][T14021] lo speed is unknown, defaulting to 1000 [ 274.302619][T14021] lo speed is unknown, defaulting to 1000 [ 274.313291][T14021] lo speed is unknown, defaulting to 1000 [ 274.321750][T14021] lo speed is unknown, defaulting to 1000 [ 274.330474][T14021] lo speed is unknown, defaulting to 1000 [ 274.628277][T14044] __nla_validate_parse: 12 callbacks suppressed [ 274.628296][T14044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2111'. [ 274.835824][T14048] netlink: 'syz.3.2113': attribute type 32 has an invalid length. [ 274.993082][T14052] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2115'. [ 275.009144][T14056] netlink: 'syz.2.2115': attribute type 3 has an invalid length. [ 275.787260][T14090] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2127'. [ 275.994080][T14099] netlink: 'syz.1.2129': attribute type 10 has an invalid length. [ 276.002893][T14099] bond0: (slave wlan1): Opening slave failed [ 276.221281][T14107] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2131'. [ 276.232650][T14107] netlink: 'syz.1.2131': attribute type 1 has an invalid length. [ 276.258384][T14107] 8021q: adding VLAN 0 to HW filter on device bond4 [ 276.394592][T14113] lo speed is unknown, defaulting to 1000 [ 276.402580][T14115] syz_tun: entered allmulticast mode [ 276.473813][T14119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2133'. [ 276.492940][T14119] syz_tun (unregistering): left allmulticast mode [ 276.629755][T14122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2134'. [ 277.175433][T14142] tipc: New replicast peer: 255.255.255.255 [ 277.183492][T14142] tipc: Enabled bearer , priority 10 [ 277.235191][T14142] 8021q: adding VLAN 0 to HW filter on device bond6 [ 277.334483][T14145] netlink: 'syz.4.2143': attribute type 1 has an invalid length. [ 277.759195][T14159] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»– [ 277.816499][T14166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2148'. [ 277.858349][T14166] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2148'. [ 277.889249][T14171] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2149'. [ 278.115618][T14185] netlink: 'syz.2.2152': attribute type 2 has an invalid length. [ 278.124824][T14185] netlink: 'syz.2.2152': attribute type 1 has an invalid length. [ 278.133720][T14185] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2152'. [ 278.197563][ T8607] tipc: Node number set to 1904622423 [ 278.391537][T14200] bridge0: entered promiscuous mode [ 278.409840][T14200] bridge0: left promiscuous mode [ 278.788076][T14207] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.795928][T14207] bridge0: port 1(1¾x9ÿ) entered disabled state [ 279.156532][T14207] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.200126][T14207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.277799][T14207] veth1_vlan: left allmulticast mode [ 279.692251][ T2936] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.711387][ T2936] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.724244][ T2936] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.737600][ T2936] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.119696][T14244] __nla_validate_parse: 3 callbacks suppressed [ 280.119713][T14244] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2167'. [ 280.135777][T14244] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2167'. [ 280.145945][T14244] netlink: 'syz.4.2167': attribute type 2 has an invalid length. [ 281.432120][T14274] netlink: 'syz.2.2178': attribute type 1 has an invalid length. [ 281.471204][T14274] 8021q: adding VLAN 0 to HW filter on device bond5 [ 281.484989][ T30] audit: type=1800 audit(1759874933.550:8): pid=14274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2178" name="memory.events" dev="tmpfs" ino=2401 res=0 errno=0 [ 281.486987][T14279] netlink: 'syz.3.2179': attribute type 10 has an invalid length. [ 281.514885][T14279] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2179'. [ 281.515368][T14274] erspan0: entered allmulticast mode [ 281.533711][T14279] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.541179][T14279] bridge0: port 4(team0) entered blocking state [ 281.547706][T14279] bridge0: port 4(team0) entered disabled state [ 281.554124][T14279] team0: entered allmulticast mode [ 281.560059][T14279] team_slave_0: entered allmulticast mode [ 281.565792][T14279] team_slave_1: entered allmulticast mode [ 281.680745][T14284] lo speed is unknown, defaulting to 1000 [ 281.777432][T14284] lo speed is unknown, defaulting to 1000 [ 281.965879][T14289] bond0: (slave gretap0): Opening slave failed [ 282.191458][T14303] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2185'. [ 282.201274][T14303] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2185'. [ 282.210545][T14303] netlink: 'syz.3.2185': attribute type 5 has an invalid length. [ 282.220959][T14303] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2185'. [ 283.406161][T14313] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2188'. [ 283.429202][T14320] netlink: 'syz.4.2191': attribute type 1 has an invalid length. [ 283.442613][T14320] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2191'. [ 283.452306][T14320] netlink: 'syz.4.2191': attribute type 1 has an invalid length. [ 283.695300][T14337] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2197'. [ 283.716401][T14337] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2197'. [ 283.974893][T14344] sctp: [Deprecated]: syz.3.2199 (pid 14344) Use of struct sctp_assoc_value in delayed_ack socket option. [ 283.974893][T14344] Use struct sctp_sack_info instead [ 284.691528][T14387] netlink: 'syz.1.2213': attribute type 10 has an invalid length. [ 284.699696][T14386] netlink: 'syz.1.2213': attribute type 10 has an invalid length. [ 284.712889][T14387] dummy0: entered promiscuous mode [ 284.721090][T14387] net_ratelimit: 9 callbacks suppressed [ 284.721105][T14387] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 284.795931][T14386] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 284.885129][T14388] lo speed is unknown, defaulting to 1000 [ 285.052264][T14399] netlink: 'syz.1.2218': attribute type 12 has an invalid length. [ 285.207858][T14414] lo speed is unknown, defaulting to 1000 [ 285.435775][T14421] lo speed is unknown, defaulting to 1000 [ 285.673258][T14444] lo speed is unknown, defaulting to 1000 [ 286.369697][T14485] __nla_validate_parse: 5 callbacks suppressed [ 286.369716][T14485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2240'. [ 286.601281][T14501] tipc: Enabled bearer , priority 0 [ 286.609899][T14501] syzkaller0: entered promiscuous mode [ 286.615386][T14501] syzkaller0: entered allmulticast mode [ 286.651582][T14501] tipc: Resetting bearer [ 286.666142][T14499] tipc: Resetting bearer [ 286.693293][T14499] tipc: Disabling bearer [ 286.704839][T14507] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2246'. [ 286.727889][T14507] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20001 [ 287.294495][T14533] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2252'. [ 287.325367][T14533] netlink: 'syz.1.2252': attribute type 10 has an invalid length. [ 287.358965][T14533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.376195][T14533] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 287.519027][T14542] lo speed is unknown, defaulting to 1000 [ 287.909429][T14561] xfrm0: mtu less than device minimum [ 288.143786][T14579] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2261'. [ 288.311969][T14592] netlink: 'syz.2.2267': attribute type 1 has an invalid length. [ 288.320459][T14592] netlink: 'syz.2.2267': attribute type 2 has an invalid length. [ 288.381877][T14595] netlink: 'syz.1.2268': attribute type 1 has an invalid length. [ 288.398887][T14595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2268'. [ 288.484936][T14601] batadv_slave_1: entered promiscuous mode [ 288.492360][T14600] batadv_slave_1: left promiscuous mode [ 288.987622][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 288.997410][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 289.005261][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 289.013380][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 289.037579][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 289.067455][ T5826] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 289.078335][ T5826] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 289.085671][ T5826] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 289.094158][ T5826] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 289.103099][ T5826] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 289.195148][T14624] lo speed is unknown, defaulting to 1000 [ 289.379181][T14633] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2279'. [ 289.851360][T14624] chnl_net:caif_netlink_parms(): no params data found [ 290.045810][T14624] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.063255][T14624] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.077214][T14624] bridge_slave_0: entered allmulticast mode [ 290.092407][T14624] bridge_slave_0: entered promiscuous mode [ 290.115107][T14624] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.123187][T14624] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.130945][T14624] bridge_slave_1: entered allmulticast mode [ 290.145555][T14624] bridge_slave_1: entered promiscuous mode [ 290.236485][T14646] syzkaller0: entered promiscuous mode [ 290.244656][T14646] syzkaller0: entered allmulticast mode [ 291.190537][ T5826] Bluetooth: hci5: command tx timeout [ 291.468601][T14624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.482033][T14624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.502981][T14662] tipc: Enabled bearer , priority 0 [ 291.552536][T14662] tipc: Disabling bearer [ 291.564791][T14667] vti0: entered promiscuous mode [ 291.594706][T14624] team0: Port device team_slave_0 added [ 291.597065][T14668] netlink: 1372 bytes leftover after parsing attributes in process `syz.2.2284'. [ 291.621986][T14624] team0: Port device team_slave_1 added [ 291.625538][T14671] netlink: 'syz.1.2285': attribute type 1 has an invalid length. [ 291.785378][T14676] bond5: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 291.795717][T14624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.826962][T14624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 291.871249][T14624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.885181][T14624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.899196][T14624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 291.926028][T14624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.993572][T14624] hsr_slave_0: entered promiscuous mode [ 292.000714][T14624] hsr_slave_1: entered promiscuous mode [ 292.008088][T14624] debugfs: 'hsr0' already exists in 'hsr' [ 292.014447][T14624] Cannot create hsr debugfs directory [ 292.269867][T14624] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 292.282630][T14624] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 292.299289][T14624] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 292.312539][T14624] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 292.471152][T14624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.517745][T14624] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.576228][T14708] tipc: Enabled bearer , priority 0 [ 292.592507][ T6308] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.599734][ T6308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.618218][T14708] syzkaller0: entered promiscuous mode [ 292.623715][T14708] syzkaller0: entered allmulticast mode [ 292.674412][T14708] tipc: Resetting bearer [ 292.709097][ T6308] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.716269][ T6308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.794886][T14729] lo speed is unknown, defaulting to 1000 [ 292.853963][T14726] lo speed is unknown, defaulting to 1000 [ 292.912712][T14707] tipc: Resetting bearer [ 292.931763][T14707] tipc: Disabling bearer [ 293.154224][T14741] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2300'. [ 293.256967][ T5826] Bluetooth: hci5: command tx timeout [ 293.371470][T14624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.587978][T14763] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2303'. [ 293.617467][T14763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2303'. [ 293.666380][T14768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2304'. [ 293.863747][T14624] veth0_vlan: entered promiscuous mode [ 293.875539][T14775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2305'. [ 293.881254][T14624] veth1_vlan: entered promiscuous mode [ 293.921656][T14775] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.071057][T14624] veth0_macvtap: entered promiscuous mode [ 294.095819][T14624] veth1_macvtap: entered promiscuous mode [ 294.142859][T14624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.180789][T14624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.232536][ T1334] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.243165][ T1334] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.292505][ T1334] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.309213][ T1334] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.315099][T14792] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2310'. [ 294.342296][T14794] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2311'. [ 294.343413][T14795] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2310'. [ 294.354982][T14794] netlink: 'syz.4.2311': attribute type 7 has an invalid length. [ 294.369007][T14794] netlink: 'syz.4.2311': attribute type 8 has an invalid length. [ 294.376768][T14794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2311'. [ 294.449427][ T6086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.483721][ T6086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.501079][T14799] netlink: 'syz.1.2312': attribute type 1 has an invalid length. [ 294.589785][T14808] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 294.601568][T14808] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 294.756596][ T1334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.783402][T14814] vlan1: entered allmulticast mode [ 294.797186][ T1334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.817371][T14814] bridge0: entered allmulticast mode [ 294.832454][T14814] bond6: (slave vlan1): Opening slave failed [ 294.957848][T14801] lo speed is unknown, defaulting to 1000 [ 295.165459][T14821] lo speed is unknown, defaulting to 1000 [ 295.337555][ T5826] Bluetooth: hci5: command tx timeout [ 295.716456][T14860] af_packet: tpacket_rcv: packet too big, clamped from 3956 to 3952. macoff=96 [ 295.852095][T14867] batadv_slave_0: entered promiscuous mode [ 296.200546][T14883] block nbd1: server does not support multiple connections per device. [ 296.210639][T14883] block nbd1: shutting down sockets [ 296.274571][T14888] netlink: 'syz.2.2328': attribute type 6 has an invalid length. [ 296.331221][T14890] lo speed is unknown, defaulting to 1000 [ 296.530690][T14893] lo speed is unknown, defaulting to 1000 [ 297.080644][T14938] lo speed is unknown, defaulting to 1000 [ 297.216698][T14945] netlink: 'syz.1.2341': attribute type 10 has an invalid length. [ 297.242572][T14945] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.252817][T14945] bond0: (slave team0): Enslaving as an active interface with an up link [ 297.417349][ T5826] Bluetooth: hci5: command tx timeout [ 297.442266][T14949] __nla_validate_parse: 4 callbacks suppressed [ 297.442286][T14949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2342'. [ 297.621663][T14960] syzkaller1: entered promiscuous mode [ 297.627833][T14960] syzkaller1: entered allmulticast mode [ 298.845677][T14971] lo speed is unknown, defaulting to 1000 [ 298.967399][T14972] lo speed is unknown, defaulting to 1000 [ 299.893066][T15009] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2356'. [ 299.909839][T15009] netlink: 'syz.2.2356': attribute type 12 has an invalid length. [ 299.922156][T15009] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2356'. [ 299.931816][T15009] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2356'. [ 300.141429][T15015] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2358'. [ 300.825193][ T5839] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 300.834641][ T5839] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 300.842765][ T5839] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 300.851710][ T5839] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 300.860764][ T5839] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 300.930184][T15035] lo speed is unknown, defaulting to 1000 [ 301.152691][T15035] chnl_net:caif_netlink_parms(): no params data found [ 301.269755][T15035] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.277470][T15035] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.284972][T15035] bridge_slave_0: entered allmulticast mode [ 301.293852][T15035] bridge_slave_0: entered promiscuous mode [ 301.306081][T15035] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.313445][T15035] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.321361][T15035] bridge_slave_1: entered allmulticast mode [ 301.328932][T15035] bridge_slave_1: entered promiscuous mode [ 301.362955][T15035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.376192][T15035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.431613][T15035] team0: Port device team_slave_0 added [ 301.441036][T15035] team0: Port device team_slave_1 added [ 301.486291][T15035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.494056][T15035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.520985][T15035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.551206][T15035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.558935][T15035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.585252][T15035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.673973][T15035] hsr_slave_0: entered promiscuous mode [ 301.682572][T15035] hsr_slave_1: entered promiscuous mode [ 301.689226][T15035] debugfs: 'hsr0' already exists in 'hsr' [ 301.695099][T15035] Cannot create hsr debugfs directory [ 301.766667][T15073] sctp: [Deprecated]: syz.2.2373 (pid 15073) Use of int in max_burst socket option deprecated. [ 301.766667][T15073] Use struct sctp_assoc_value instead [ 301.928970][T15080] netlink: 'syz.2.2376': attribute type 12 has an invalid length. [ 301.977476][T15080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2376'. [ 302.123087][T15086] vlan2: entered promiscuous mode [ 302.128418][T15086] geneve1: entered promiscuous mode [ 302.133820][T15086] vlan2: entered allmulticast mode [ 302.140557][T15086] geneve1: entered allmulticast mode [ 302.240041][T15035] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 302.262046][T15035] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 302.290606][T15035] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 302.318421][T15035] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 302.509621][T15111] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 302.536186][T15035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.558810][T15035] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.579032][ T6308] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.586257][ T6308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.602162][ T6308] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.609390][ T6308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.670424][T15118] vlan2: entered promiscuous mode [ 302.676504][T15118] macvtap0: entered promiscuous mode [ 302.725322][T15121] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2388'. [ 302.740043][T15121] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2388'. [ 302.750427][T15118] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2386'. [ 302.762185][T15125] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2387'. [ 302.790668][T15121] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2388'. [ 302.807762][T15121] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2388'. [ 302.826256][T15119] lo speed is unknown, defaulting to 1000 [ 302.833394][T15035] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 302.845645][T15035] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 302.859476][T15121] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2388'. [ 302.888328][T15121] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2388'. [ 302.900356][T15121] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2388'. [ 302.936059][T15121] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2388'. [ 302.946480][ T5826] Bluetooth: hci6: command tx timeout [ 303.245316][T15137] netlink: 'syz.2.2390': attribute type 1 has an invalid length. [ 303.362659][T15144] netlink: 'syz.1.2393': attribute type 1 has an invalid length. [ 303.430886][T15035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.774779][T15159] lo speed is unknown, defaulting to 1000 [ 304.049480][T15035] veth0_vlan: entered promiscuous mode [ 304.071717][T15035] veth1_vlan: entered promiscuous mode [ 304.122478][T15035] veth0_macvtap: entered promiscuous mode [ 304.135857][T15035] veth1_macvtap: entered promiscuous mode [ 304.174347][T15035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.194370][T15035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.215553][ T6308] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.234924][ T6308] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.262848][ T6308] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.298567][ T6308] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.370915][ T6308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.388987][ T6308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.429277][ T6775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.437818][ T6775] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.020019][ T5826] Bluetooth: hci6: command tx timeout [ 305.130449][T15224] netlink: zone id is out of range [ 305.149081][T15224] netlink: zone id is out of range [ 305.154240][T15224] netlink: zone id is out of range [ 305.161128][T15224] netlink: zone id is out of range [ 305.198590][T15224] netlink: zone id is out of range [ 305.203759][T15224] netlink: zone id is out of range [ 305.216933][T15224] netlink: zone id is out of range [ 305.241474][T15225] netlink: del zone limit has 4 unknown bytes [ 305.279317][T15224] netlink: zone id is out of range [ 305.332726][T15222] tipc: Started in network mode [ 305.349731][T15222] tipc: Node identity da6694a5afd, cluster identity 4711 [ 305.387551][T15222] tipc: Enabled bearer , priority 0 [ 305.529302][T15231] syzkaller0: entered promiscuous mode [ 305.542388][T15231] syzkaller0: entered allmulticast mode [ 305.569023][T15217] tipc: Resetting bearer [ 305.616090][T15236] netlink: 'syz.5.2406': attribute type 1 has an invalid length. [ 305.711463][T15217] tipc: Disabling bearer [ 305.973852][T15250] netlink: 'syz.1.2410': attribute type 2 has an invalid length. [ 306.004996][T15250] : entered promiscuous mode [ 306.011884][T15251] netlink: 'syz.2.2409': attribute type 12 has an invalid length. [ 306.229290][T15261] netlink: 'syz.6.2413': attribute type 12 has an invalid length. [ 306.240705][T15263] netlink: 'syz.1.2414': attribute type 1 has an invalid length. [ 306.281224][T15263] 8021q: adding VLAN 0 to HW filter on device bond7 [ 306.399720][T15269] lo speed is unknown, defaulting to 1000 [ 307.098099][ T5826] Bluetooth: hci6: command tx timeout [ 307.214997][T15306] bond6: entered promiscuous mode [ 307.221582][T15306] 8021q: adding VLAN 0 to HW filter on device bond6 [ 307.234206][T15306] netlink: 'syz.2.2425': attribute type 28 has an invalid length. [ 307.394060][T15320] bridge_slave_0: left allmulticast mode [ 307.401312][T15320] bridge_slave_0: left promiscuous mode [ 307.407901][T15320] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.416646][T15320] bridge_slave_1: left allmulticast mode [ 307.424390][T15320] bridge_slave_1: left promiscuous mode [ 307.430954][T15320] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.444257][T15320] bond0: (slave bond_slave_0): Releasing backup interface [ 307.453807][T15320] bond_slave_0: left promiscuous mode [ 307.463811][T15320] bond0: (slave bond_slave_1): Releasing backup interface [ 307.474983][T15320] bond_slave_1: left promiscuous mode [ 307.487979][T15320] team0: Port device team_slave_0 removed [ 307.496656][T15320] team0: Port device team_slave_1 removed [ 307.504260][T15320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.518170][T15320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.526010][T15320] net_ratelimit: 12 callbacks suppressed [ 307.526026][T15320] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 307.622846][T15328] netlink: 'syz.2.2432': attribute type 6 has an invalid length. [ 307.636163][T15329] netlink: 'syz.2.2432': attribute type 6 has an invalid length. [ 307.896791][T15343] can: request_module (can-proto-0) failed. [ 308.216583][T15366] __nla_validate_parse: 43 callbacks suppressed [ 308.216601][T15366] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2442'. [ 308.328922][T15369] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2444'. [ 309.177895][ T5826] Bluetooth: hci6: command tx timeout [ 309.444203][T15412] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2454'. [ 309.492141][T15412] veth9: entered promiscuous mode [ 309.558011][T15415] lo speed is unknown, defaulting to 1000 [ 309.949468][T15431] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2456'. [ 310.486494][T15442] delete_channel: no stack [ 310.550053][T15451] netlink: 'syz.5.2463': attribute type 1 has an invalid length. [ 310.567231][T15451] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2463'. [ 310.683600][T15459] syz.5.2464 (15459) used obsolete PPPIOCDETACH ioctl [ 310.715231][T15461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2465'. [ 310.743670][T15463] netlink: 'syz.1.2466': attribute type 16 has an invalid length. [ 310.753257][T15463] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.2466'. [ 310.776776][T15463] netlink: 'syz.1.2466': attribute type 3 has an invalid length. [ 310.785087][T15463] netlink: 'syz.1.2466': attribute type 1 has an invalid length. [ 310.793370][T15463] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.2466'. [ 310.933814][T15470] ip6t_REJECT: ECHOREPLY is not supported [ 311.269851][ T5826] Bluetooth: hci6: command tx timeout [ 311.978661][ T5839] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 312.014225][ T5839] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 312.028285][ T5839] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 312.049690][ T5839] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 312.064378][ T5839] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 312.471178][T15473] lo speed is unknown, defaulting to 1000 [ 312.538487][T15476] tipc: Enabling of bearer rejected, failed to enable media [ 312.708769][T15485] Unsupported ieee802154 address type: 0 [ 312.723425][T15488] IPv6: sit2: Disabled Multicast RS [ 312.733726][T15488] sit2: entered allmulticast mode [ 312.822115][T15499] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2477'. [ 312.838713][T15499] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2477'. [ 312.875371][T15502] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 312.892591][T15494] lo speed is unknown, defaulting to 1000 [ 312.954802][T15495] lo speed is unknown, defaulting to 1000 [ 313.247091][T15473] chnl_net:caif_netlink_parms(): no params data found [ 313.252656][T15522] __nla_validate_parse: 8 callbacks suppressed [ 313.252673][T15522] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2483'. [ 313.542322][T15526] bridge0: port 1(veth0_to_bridge) entered blocking state [ 313.557086][T15526] bridge0: port 1(veth0_to_bridge) entered disabled state [ 313.564476][T15526] veth0_to_bridge: entered allmulticast mode [ 313.576695][T15526] veth0_to_bridge: entered promiscuous mode [ 313.858955][T15532] tipc: Enabling of bearer rejected, failed to enable media [ 313.974474][T15473] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.994544][T15473] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.002745][T15473] bridge_slave_0: entered allmulticast mode [ 314.012320][T15473] bridge_slave_0: entered promiscuous mode [ 314.024279][T15473] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.032036][T15473] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.040534][T15473] bridge_slave_1: entered allmulticast mode [ 314.048831][T15473] bridge_slave_1: entered promiscuous mode [ 314.123257][T15473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.139351][ T5826] Bluetooth: hci7: command tx timeout [ 314.147953][T15546] syzkaller0: entered promiscuous mode [ 314.153445][T15546] syzkaller0: entered allmulticast mode [ 314.231638][T15473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.339855][T15473] team0: Port device team_slave_0 added [ 314.352348][T15473] team0: Port device team_slave_1 added [ 314.395172][T15473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.402418][T15473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.437234][T15473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.474839][T15473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.482742][T15473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.551301][T15473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.653927][T15473] hsr_slave_0: entered promiscuous mode [ 314.663982][T15473] hsr_slave_1: entered promiscuous mode [ 314.671217][T15473] debugfs: 'hsr0' already exists in 'hsr' [ 314.677965][T15473] Cannot create hsr debugfs directory [ 314.715252][T15565] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2491'. [ 314.822446][T15569] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2493'. [ 314.868338][T15569] 8021q: adding VLAN 0 to HW filter on device bond1 [ 314.881249][T15572] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2493'. [ 315.007211][T15576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2495'. [ 315.025174][T15576] netlink: 'syz.1.2495': attribute type 8 has an invalid length. [ 315.033570][T15576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2495'. [ 315.051214][T15576] geneve2: entered promiscuous mode [ 315.056550][T15576] geneve2: entered allmulticast mode [ 315.080054][ T6777] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.100031][ T6777] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.125433][T15582] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2494'. [ 315.149680][ T6777] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.164953][ T6777] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.178964][T15578] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2494'. [ 315.188413][T15582] 0ªX¹¦À: renamed from caif0 [ 315.202929][T15582] 0ªX¹¦À: entered allmulticast mode [ 315.212955][T15582] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 315.249073][T15586] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2494'. [ 315.259894][T15575] lo speed is unknown, defaulting to 1000 [ 315.429165][T15590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2498'. [ 315.551994][T15473] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 315.566508][T15473] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 315.593443][T15473] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 315.608232][T15473] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 315.729882][T15580] netlink: 'syz.6.2496': attribute type 2 has an invalid length. [ 315.869675][T15473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.918901][T15473] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.936473][ T6791] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.943667][ T6791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.970486][ T6791] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.977721][ T6791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.990589][ T6302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.998541][ T6302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.217102][ T5826] Bluetooth: hci7: command tx timeout [ 316.408773][T15473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.773648][T15473] veth0_vlan: entered promiscuous mode [ 316.793822][T15473] veth1_vlan: entered promiscuous mode [ 316.838771][T15473] veth0_macvtap: entered promiscuous mode [ 316.853183][T15473] veth1_macvtap: entered promiscuous mode [ 316.881215][T15473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.899943][T15473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.916336][ T6302] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.925413][ T6302] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.935860][ T6302] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.949603][ T6302] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.041328][ T6302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.060248][ T6302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.094600][ T6791] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.121580][ T6791] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.714710][T15693] bond1: option min_links: invalid value (18446744073709551612) [ 317.723466][T15693] bond1: option min_links: allowed values 0 - 2147483647 [ 317.733944][T15693] bond1 (unregistering): Released all slaves [ 317.963740][T15701] netlink: 'syz.7.2527': attribute type 19 has an invalid length. [ 317.964433][T15702] netlink: 'syz.7.2527': attribute type 19 has an invalid length. [ 317.973125][T15701] netlink: 'syz.7.2527': attribute type 20 has an invalid length. [ 317.984385][T15702] netlink: 'syz.7.2527': attribute type 20 has an invalid length. [ 318.051999][T15703] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.150988][T15703] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.274630][T15703] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.308267][ T5826] Bluetooth: hci7: command tx timeout [ 318.328529][T15712] lo speed is unknown, defaulting to 1000 [ 318.375696][T15703] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.382835][T15713] __nla_validate_parse: 13 callbacks suppressed [ 318.382854][T15713] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2530'. [ 318.437933][T15713] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2530'. [ 318.612435][ T6791] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.639150][ T6777] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.815222][ T6785] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.824855][ T6785] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.960495][T15722] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2532'. [ 318.972263][T15722] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2532'. [ 319.080425][T15724] lo speed is unknown, defaulting to 1000 [ 319.206229][T15727] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2533'. [ 319.356111][T15739] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2536'. [ 319.379472][T15738] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2536'. [ 319.529350][T15750] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2539'. [ 320.120814][T15788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2549'. [ 320.131104][T15788] netlink: 'syz.1.2549': attribute type 1 has an invalid length. [ 320.377231][ T5826] Bluetooth: hci7: command tx timeout [ 320.802703][T15804] dvmrp8: entered allmulticast mode [ 321.050931][T15813] lo speed is unknown, defaulting to 1000 [ 321.158584][T15819] tipc: Enabled bearer , priority 0 [ 321.197567][T15819] syzkaller0: entered promiscuous mode [ 321.203075][T15819] syzkaller0: entered allmulticast mode [ 321.238824][T15819] tipc: Resetting bearer [ 321.246199][T15818] tipc: Resetting bearer [ 322.227991][ T5884] tipc: Node number set to 1505489315 [ 322.758946][T15818] tipc: Disabling bearer [ 323.361527][T15833] tipc: Enabling of bearer rejected, failed to enable media [ 324.010318][T15848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2564'. [ 324.165915][T15851] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2564'. [ 325.818129][T15872] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2570'. [ 325.825190][T15875] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2571'. [ 325.957908][T15883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2573'. [ 325.974428][T15883] geneve3: entered promiscuous mode [ 325.981196][T15883] geneve3: entered allmulticast mode [ 325.994148][T15883] netlink: 'syz.1.2573': attribute type 10 has an invalid length. [ 326.001346][T15885] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 326.002743][T15883] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2573'. [ 326.028844][T15883] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 326.053410][T15885] team_slave_0: entered promiscuous mode [ 326.059216][T15885] team_slave_1: entered promiscuous mode [ 326.066309][T15885] vlan2: entered promiscuous mode [ 326.072696][T15885] team0: entered promiscuous mode [ 326.122796][T15887] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 326.141427][T15887] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2575'. [ 326.211017][T15889] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2576'. [ 326.220535][T15889] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2576'. [ 326.231475][T15889] netlink: 'syz.1.2576': attribute type 5 has an invalid length. [ 326.240990][T15889] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2576'. [ 326.414990][T15900] tipc: Enabling of bearer rejected, failed to enable media [ 327.232210][T15922] netlink: 'syz.6.2589': attribute type 13 has an invalid length. [ 327.240933][T15922] netlink: 'syz.6.2589': attribute type 17 has an invalid length. [ 327.317820][T15922] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 327.618493][T15932] netlink: 'syz.1.2590': attribute type 1 has an invalid length. [ 327.630211][T15932] netlink: 'syz.1.2590': attribute type 1 has an invalid length. [ 327.687753][T15933] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 328.295835][ T5839] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 328.308685][ T5839] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 328.317859][ T5839] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 328.329505][ T5839] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 328.340881][ T5839] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 328.402216][T15941] lo speed is unknown, defaulting to 1000 [ 328.822279][T15941] chnl_net:caif_netlink_parms(): no params data found [ 329.023525][T15941] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.041260][T15941] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.060406][T15941] bridge_slave_0: entered allmulticast mode [ 329.092935][T15941] bridge_slave_0: entered promiscuous mode [ 329.111960][T15941] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.123345][T15941] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.132048][T15941] bridge_slave_1: entered allmulticast mode [ 329.140855][T15941] bridge_slave_1: entered promiscuous mode [ 329.211110][T15941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.226213][T15941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.284392][T15941] team0: Port device team_slave_0 added [ 329.298670][T15941] team0: Port device team_slave_1 added [ 329.346053][T15941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.354868][T15941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.384437][T15941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.403154][T15941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.410418][T15941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.438200][T15941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.510485][T15941] hsr_slave_0: entered promiscuous mode [ 329.519435][T15941] hsr_slave_1: entered promiscuous mode [ 329.525955][T15941] debugfs: 'hsr0' already exists in 'hsr' [ 329.533069][T15941] Cannot create hsr debugfs directory [ 329.846775][T15941] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 329.862682][T15941] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 329.877333][T15941] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 329.891876][T15941] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 329.910387][T15959] netlink: 'syz.6.2597': attribute type 13 has an invalid length. [ 329.918718][T15959] netlink: 'syz.6.2597': attribute type 17 has an invalid length. [ 329.945724][T15959] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 330.090377][T15941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.119465][T15971] __nla_validate_parse: 3 callbacks suppressed [ 330.119482][T15971] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2598'. [ 330.127462][T15941] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.176078][ T6777] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.183377][ T6777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.272797][T10089] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.280054][T10089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.379224][ T5826] Bluetooth: hci8: command tx timeout [ 330.753702][T15975] team_slave_0: left promiscuous mode [ 330.765846][T15975] team0 (unregistering): Port device team_slave_0 removed [ 330.774468][T15975] team_slave_1: left promiscuous mode [ 330.788470][T15975] team0 (unregistering): Port device team_slave_1 removed [ 330.870984][T15941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.376585][T15941] veth0_vlan: entered promiscuous mode [ 331.406200][T15941] veth1_vlan: entered promiscuous mode [ 331.473617][T15941] veth0_macvtap: entered promiscuous mode [ 331.496091][T15941] veth1_macvtap: entered promiscuous mode [ 331.523759][T15941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.556302][T15941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.584228][ T6785] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.601774][ T6785] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.643521][ T6785] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.659383][T16004] netlink: 'syz.6.2603': attribute type 13 has an invalid length. [ 331.678470][T16004] netlink: 'syz.6.2603': attribute type 17 has an invalid length. [ 331.691654][ T6785] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.711563][T16004] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 331.837420][ T6777] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.859548][ T6777] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.909762][ T6777] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.933275][ T6777] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.190397][T16016] lo speed is unknown, defaulting to 1000 [ 332.456320][T16032] netlink: 'syz.6.2608': attribute type 16 has an invalid length. [ 332.465885][T16032] netlink: 'syz.6.2608': attribute type 17 has an invalid length. [ 332.472878][ T5826] Bluetooth: hci8: command tx timeout [ 332.489429][T16032] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 333.211487][T16039] netlink: 42 bytes leftover after parsing attributes in process `syz.6.2610'. [ 333.269125][T16041] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2611'. [ 333.296489][T16041] netlink: 'syz.6.2611': attribute type 11 has an invalid length. [ 333.307188][T16041] netlink: 'syz.6.2611': attribute type 4 has an invalid length. [ 333.315192][T16041] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2611'. [ 333.552275][T16046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2614'. [ 333.574862][ T5839] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 333.585898][ T5839] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 333.602342][ T5839] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 333.613050][ T5839] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 333.624784][ T5839] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 333.682888][T16048] lo speed is unknown, defaulting to 1000 [ 333.692828][T16053] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2616'. [ 333.705832][T16053] nbd: must specify at least one socket [ 333.910974][T16048] chnl_net:caif_netlink_parms(): no params data found [ 334.007948][T16048] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.015645][T16048] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.023672][T16048] bridge_slave_0: entered allmulticast mode [ 334.031281][T16048] bridge_slave_0: entered promiscuous mode [ 334.042162][T16048] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.050109][T16048] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.058042][T16048] bridge_slave_1: entered allmulticast mode [ 334.066006][T16048] bridge_slave_1: entered promiscuous mode [ 334.103662][T16048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.118344][T16048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.156126][T16048] team0: Port device team_slave_0 added [ 334.164763][T16048] team0: Port device team_slave_1 added [ 334.199305][T16048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.206297][T16048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.234674][T16048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.248952][T16048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.255913][T16048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.283843][T16048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.339707][T16067] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2619'. [ 334.366701][T16048] hsr_slave_0: entered promiscuous mode [ 334.374639][T16048] hsr_slave_1: entered promiscuous mode [ 334.384576][T16048] debugfs: 'hsr0' already exists in 'hsr' [ 334.391641][T16048] Cannot create hsr debugfs directory [ 334.433791][T16070] ip_vti0: entered promiscuous mode [ 334.441994][T16070] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2620'. [ 334.537468][ T5839] Bluetooth: hci8: command tx timeout [ 334.680795][T16077] netlink: 'syz.6.2623': attribute type 1 has an invalid length. [ 334.682404][T16048] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 334.688897][T16077] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2623'. [ 334.688917][T16077] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2623'. [ 334.725848][T16048] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 334.740684][T16048] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 334.760206][T16048] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 334.771811][T16077] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.779581][T16077] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.848067][T16048] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.855259][T16048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.862775][T16048] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.870013][T16048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.962629][ T6777] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.979753][ T6777] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.038906][T16091] lo speed is unknown, defaulting to 1000 [ 335.073139][T16048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.148590][T16048] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.176694][ T6302] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.185010][ T6302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.236694][ T6302] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.243962][ T6302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.356663][T16101] __nla_validate_parse: 6 callbacks suppressed [ 335.356680][T16101] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2628'. [ 335.371573][T16048] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 335.604738][T16110] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2629'. [ 335.659897][ T5839] Bluetooth: hci9: command tx timeout [ 335.687794][T16048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.767752][T16119] netlink: 248 bytes leftover after parsing attributes in process `syz.6.2632'. [ 335.980404][T16129] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2636'. [ 336.182369][T16048] veth0_vlan: entered promiscuous mode [ 336.244405][T16048] veth1_vlan: entered promiscuous mode [ 336.331357][T16048] veth0_macvtap: entered promiscuous mode [ 336.354783][T16048] veth1_macvtap: entered promiscuous mode [ 336.410897][T16048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.435116][T16048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.481616][ T6777] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.491862][ T6777] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.508141][ T6777] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.534092][ T5839] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 336.534720][ T6777] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.544982][ T5839] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 336.566470][ T5839] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 336.582144][ T5839] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 336.600511][ T5839] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 336.618393][ T5839] Bluetooth: hci8: command tx timeout [ 336.660380][T16139] lo speed is unknown, defaulting to 1000 [ 336.678037][ T6302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.688902][ T6302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.749978][ T6308] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.759655][ T6308] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.010129][T16149] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2639'. [ 337.043470][T16144] syzkaller0: entered promiscuous mode [ 337.049910][T16144] syzkaller0: entered allmulticast mode [ 337.058373][T16139] chnl_net:caif_netlink_parms(): no params data found [ 337.244798][T16139] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.259143][T16139] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.268647][T16139] bridge_slave_0: entered allmulticast mode [ 337.278678][T16139] bridge_slave_0: entered promiscuous mode [ 337.737489][ T5826] Bluetooth: hci9: command tx timeout [ 337.963667][T16161] netlink: 'syz.1.2641': attribute type 2 has an invalid length. [ 338.700159][ T5826] Bluetooth: hci10: command tx timeout [ 338.707112][ T5839] Bluetooth: hci8: command tx timeout [ 339.481215][T16139] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.489045][T16139] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.496454][T16139] bridge_slave_1: entered allmulticast mode [ 339.505476][T16139] bridge_slave_1: entered promiscuous mode [ 339.515001][T16164] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 339.612718][T16139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.692512][T16139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.799602][T16139] team0: Port device team_slave_0 added [ 339.818460][ T5839] Bluetooth: hci9: command tx timeout [ 339.845601][T16139] team0: Port device team_slave_1 added [ 339.974223][T16139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.999771][T16139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.029702][T16139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.055678][T16139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.066304][T16139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.095333][T16139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.268439][T16139] hsr_slave_0: entered promiscuous mode [ 340.275764][T16139] hsr_slave_1: entered promiscuous mode [ 340.284106][T16139] debugfs: 'hsr0' already exists in 'hsr' [ 340.291885][T16139] Cannot create hsr debugfs directory [ 340.424953][T16204] atomic_op ffff88808f048998 conn xmit_atomic 0000000000000000 [ 340.483326][T16206] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 340.590844][T16208] geneve4: entered promiscuous mode [ 340.596229][T16208] geneve4: entered allmulticast mode [ 340.603582][ T6777] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 45547 - 0 [ 340.614442][ T6777] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 41180 - 0 [ 340.638247][ T6777] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 45547 - 0 [ 340.648807][ T6777] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 41180 - 0 [ 340.659267][ T6777] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 45547 - 0 [ 340.670827][ T6777] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 41180 - 0 [ 340.681002][ T6777] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 45547 - 0 [ 340.692226][ T6777] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 41180 - 0 [ 340.781950][ T5839] Bluetooth: hci10: command tx timeout [ 340.874023][T16218] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20002 [ 340.896267][T16218] IPVS: set_ctl: invalid protocol: 135 10.1.1.1:20001 [ 340.921008][T16139] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 340.932024][T16139] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 340.944139][T16139] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 340.958361][T16139] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 340.974174][T16219] netlink: 'syz.1.2658': attribute type 6 has an invalid length. [ 341.115527][T16139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.149612][T16139] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.187421][ T1334] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.194624][ T1334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.236773][ T1334] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.244123][ T1334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.521733][T16233] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 341.897539][ T5839] Bluetooth: hci9: command tx timeout [ 342.004131][T16139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.054077][T16139] veth0_vlan: entered promiscuous mode [ 342.072688][T16139] veth1_vlan: entered promiscuous mode [ 342.116631][T16139] veth0_macvtap: entered promiscuous mode [ 342.129849][T16139] veth1_macvtap: entered promiscuous mode [ 342.153122][T16139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.171184][T16139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.189008][ T6777] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.199296][ T6777] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.209935][ T6777] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.219300][ T6777] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.858757][ T5839] Bluetooth: hci10: command tx timeout [ 342.879710][ T6302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.902723][ T6302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.946591][ T6785] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.956278][ T6785] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.380269][ T24] IPVS: starting estimator thread 0... [ 343.469794][T16273] IPVS: using max 31 ests per chain, 74400 per kthread [ 343.823416][T16281] netlink: 1372 bytes leftover after parsing attributes in process `syz.9.2670'. [ 343.915956][T16287] pim6reg1: entered promiscuous mode [ 343.924571][T16287] pim6reg1: entered allmulticast mode [ 344.341580][T16305] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2678'. [ 344.367407][T16302] bond1: entered promiscuous mode [ 344.400251][T16302] 8021q: adding VLAN 0 to HW filter on device bond1 [ 344.781627][T16321] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2682'. [ 344.838057][ T30] audit: type=1800 audit(1759874996.910:9): pid=16327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2684" name="memory.events" dev="tmpfs" ino=505 res=0 errno=0 [ 344.868657][T16327] openvswitch: netlink: Message has 41 unknown bytes. [ 344.900774][ T30] audit: type=1804 audit(1759874996.930:10): pid=16327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.2684" name="memory.events" dev="tmpfs" ino=505 res=1 errno=0 [ 344.937667][ T5839] Bluetooth: hci10: command tx timeout [ 345.088382][T16321] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.198005][T16334] netlink: 'syz.6.2687': attribute type 3 has an invalid length. [ 345.222115][T16321] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.323113][T16321] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.395396][T16339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2688'. [ 345.495872][T16321] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.561145][T16349] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2691'. [ 345.578526][T16349] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2691'. [ 345.811910][ T6785] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.822979][ T6785] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.871125][ T6785] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.906380][ T1334] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.030219][T16373] macsec1: entered promiscuous mode [ 346.086787][T16379] netlink: 'syz.9.2700': attribute type 13 has an invalid length. [ 346.108470][T16379] netlink: 'syz.9.2700': attribute type 17 has an invalid length. [ 346.247655][T16379] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 346.339353][T16375] lo speed is unknown, defaulting to 1000 [ 346.374424][T16382] lo speed is unknown, defaulting to 1000 [ 346.425241][T16388] lo speed is unknown, defaulting to 1000 [ 411.337273][ T5826] Bluetooth: hci5: command 0x0406 tx timeout [ 418.858445][ T31] INFO: task kworker/u8:38:6792 blocked for more than 143 seconds. [ 418.866403][ T31] Not tainted syzkaller #0 [ 418.871550][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 418.880377][ T31] task:kworker/u8:38 state:D stack:21160 pid:6792 tgid:6792 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 418.892801][ T31] Workqueue: netns cleanup_net [ 418.897672][ T31] Call Trace: [ 418.900935][ T31] [ 418.903855][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 418.908432][ T31] ? __lock_acquire+0xab9/0xd20 [ 418.913303][ T31] ? __lock_acquire+0xab9/0xd20 [ 418.918467][ T31] ? __pfx___schedule+0x10/0x10 [ 418.923357][ T31] ? schedule+0x91/0x360 [ 418.927684][ T31] schedule+0x165/0x360 [ 418.931894][ T31] schedule_preempt_disabled+0x13/0x30 [ 418.976992][ T31] __mutex_lock+0x7e6/0x1350 [ 418.981665][ T31] ? __mutex_lock+0x5bb/0x1350 [ 418.986441][ T31] ? rdma_dev_change_netns+0x39/0x300 [ 419.064879][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 419.071494][ T31] ? kasan_quarantine_put+0xdd/0x220 [ 419.095386][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 419.105681][ T31] ? kobject_put+0x270/0x480 [ 419.117017][ T31] ? kfree+0x18e/0x440 [ 419.121132][ T31] rdma_dev_change_netns+0x39/0x300 [ 419.126344][ T31] rdma_dev_exit_net+0x203/0x340 [ 419.146987][ T31] ? __pfx___might_resched+0x10/0x10 [ 419.152334][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 419.166924][ T31] ? net_generic+0x1e/0x240 [ 419.171476][ T31] ? mutex_is_locked+0x17/0x50 [ 419.176244][ T31] ? rtnl_is_locked+0x15/0x20 [ 419.196958][ T31] ops_undo_list+0x49a/0x990 [ 419.201655][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 419.206780][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 419.227024][ T31] cleanup_net+0x4d8/0x820 [ 419.231495][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 419.236448][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 419.257560][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 419.263385][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 419.286958][ T31] process_scheduled_works+0xade/0x17b0 [ 419.292598][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 419.307088][ T31] worker_thread+0x8a0/0xda0 [ 419.311754][ T31] kthread+0x711/0x8a0 [ 419.315836][ T31] ? __pfx_worker_thread+0x10/0x10 [ 419.329435][ T31] ? __pfx_kthread+0x10/0x10 [ 419.334069][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 419.339921][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 419.345136][ T31] ? __pfx_kthread+0x10/0x10 [ 419.351066][ T31] ret_from_fork+0x4b9/0x870 [ 419.355688][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 419.361684][ T31] ? __switch_to_asm+0x39/0x70 [ 419.366458][ T31] ? __switch_to_asm+0x33/0x70 [ 419.372700][ T31] ? __pfx_kthread+0x10/0x10 [ 419.378550][ T31] ret_from_fork_asm+0x1a/0x30 [ 419.383352][ T31] [ 419.388012][ T31] INFO: task syz.0.2106:14018 blocked for more than 143 seconds. [ 419.395739][ T31] Not tainted syzkaller #0 [ 419.401391][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 419.421176][ T31] task:syz.0.2106 state:D stack:25576 pid:14018 tgid:14014 ppid:5820 task_flags:0x400140 flags:0x00080003 [ 419.434055][ T31] Call Trace: [ 419.437997][ T31] [ 419.441041][ T31] __schedule+0x1798/0x4cc0 [ 419.445551][ T31] ? validate_chain+0x897/0x2140 [ 419.450539][ T31] ? __lock_acquire+0xab9/0xd20 [ 419.455379][ T31] ? __pfx___schedule+0x10/0x10 [ 419.460319][ T31] ? schedule+0x91/0x360 [ 419.464585][ T31] schedule+0x165/0x360 [ 419.468956][ T31] schedule_timeout+0x9a/0x270 [ 419.473710][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 419.479138][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 419.484340][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 419.489644][ T31] ? wait_for_completion+0x267/0x5d0 [ 419.494943][ T31] wait_for_completion+0x2bf/0x5d0 [ 419.503611][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 419.509350][ T31] ? up_write+0x1c4/0x420 [ 419.513683][ T31] ? remove_client_context+0xc0/0x1e0 [ 419.519136][ T31] disable_device+0x1c6/0x320 [ 419.523795][ T31] ? __pfx_disable_device+0x10/0x10 [ 419.529030][ T31] __ib_unregister_device+0x2cb/0x3f0 [ 419.534408][ T31] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 419.540398][ T31] ib_unregister_device_and_put+0xb8/0xf0 [ 419.546122][ T31] nldev_dellink+0x2d1/0x320 [ 419.551447][ T31] ? is_bpf_text_address+0x292/0x2b0 [ 419.556748][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 419.561972][ T31] ? apparmor_capable+0x137/0x1b0 [ 419.567077][ T31] ? bpf_lsm_capable+0x9/0x20 [ 419.571750][ T31] ? security_capable+0x7e/0x2e0 [ 419.576671][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 419.582205][ T31] rdma_nl_rcv+0x6ab/0x980 [ 419.586643][ T31] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 419.591629][ T31] ? __lock_acquire+0xab9/0xd20 [ 419.596477][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 419.601734][ T31] netlink_unicast+0x82f/0x9e0 [ 419.606488][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 419.611812][ T31] ? netlink_sendmsg+0x642/0xb30 [ 419.616734][ T31] ? skb_put+0x11b/0x210 [ 419.621065][ T31] netlink_sendmsg+0x805/0xb30 [ 419.625836][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.631169][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 419.636093][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 419.641433][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.646704][ T31] __sock_sendmsg+0x21c/0x270 [ 419.651485][ T31] ____sys_sendmsg+0x505/0x830 [ 419.656258][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 419.661972][ T31] ? import_iovec+0x74/0xa0 [ 419.666489][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 419.671234][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 419.676440][ T31] ? __fget_files+0x2a/0x420 [ 419.681060][ T31] ? __fget_files+0x3a0/0x420 [ 419.685726][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 419.690730][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 419.696183][ T31] ? do_syscall_64+0xbe/0xfa0 [ 419.700947][ T31] do_syscall_64+0xfa/0xfa0 [ 419.705438][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 419.710669][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.716715][ T31] ? clear_bhb_loop+0x60/0xb0 [ 419.721439][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.727417][ T31] RIP: 0033:0x7f1c70d8eec9 [ 419.731829][ T31] RSP: 002b:00007f1c71c11038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.740334][ T31] RAX: ffffffffffffffda RBX: 00007f1c70fe6090 RCX: 00007f1c70d8eec9 [ 419.748396][ T31] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 419.756373][ T31] RBP: 00007f1c70e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 419.764499][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 419.773201][ T31] R13: 00007f1c70fe6128 R14: 00007f1c70fe6090 R15: 00007ffef7f55f88 [ 419.781320][ T31] [ 419.798204][ T31] [ 419.798204][ T31] Showing all locks held in the system: [ 419.806081][ T31] 3 locks held by kworker/1:0/24: [ 419.818925][ T31] #0: ffff88801a481148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 419.847361][ T31] #1: ffffc900001e7ba0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 419.867186][ T31] #2: ffffffff8e1403f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 419.908700][ T31] 1 lock held by khungtaskd/31: [ 419.913605][ T31] #0: ffffffff8e13a960 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 419.947970][ T31] 3 locks held by kworker/u8:5/1334: [ 419.953298][ T31] #0: ffff88802f486948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 419.977560][ T31] #1: ffffc9000457fba0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 420.008026][ T31] #2: ffffffff8f4d3c08 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 420.037042][ T31] 2 locks held by getty/5578: [ 420.041760][ T31] #0: ffff88814d6de0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 420.063205][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 420.088269][ T31] 1 lock held by syz-executor/5822: [ 420.093505][ T31] #0: ffffffff8f4d3c08 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 420.102674][ T31] 4 locks held by kworker/u8:38/6792: [ 420.109198][ T31] #0: ffff88801b2f6948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 420.120675][ T31] #1: ffffc9000551fba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 420.132561][ T31] #2: ffffffff8f4c6d70 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 420.142589][ T31] #3: ffff888056e44700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 420.154731][ T31] 6 locks held by kworker/0:9/8594: [ 420.160349][ T31] #0: ffff8880b863a018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 420.170962][ T31] #1: ffff8880b8624048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 420.180167][ T31] #2: ffff888051fa4fe0 (&r->consumer_lock#2){+.+.}-{3:3}, at: wg_packet_decrypt_worker+0x8ad/0xd40 [ 420.191626][ T31] #3: ffff8880b873a018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 420.201912][ T31] #4: ffff8880b8724048 (psi_seq){-.-.}-{0:0}, at: psi_task_change+0xd9/0x340 [ 420.211122][ T31] #5: ffff8880b8724048 (psi_seq){-.-.}-{0:0}, at: psi_task_change+0xd9/0x340 [ 420.220512][ T31] 2 locks held by syz.0.2106/14018: [ 420.225696][ T31] #0: ffffffff99d460b8 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980 [ 420.236126][ T31] #1: ffff888056e44700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 420.247691][ T31] 2 locks held by syz.3.2223/14421: [ 420.252891][ T31] #0: ffffffff8f4c6d70 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 420.262404][ T31] #1: ffff888056e44700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 420.273741][ T31] 2 locks held by syz.4.2329/14890: [ 420.279007][ T31] #0: ffffffff8f4c6d70 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 420.288486][ T31] #1: ffff888056e44700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 420.299857][ T31] 2 locks held by syz.4.2329/14893: [ 420.305132][ T31] #0: ffffffff8f4c6d70 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 420.314604][ T31] #1: ffff888056e44700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 420.325881][ T31] 5 locks held by syz-executor/15035: [ 420.331292][ T31] #0: ffff88805681cdc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 420.341274][ T31] #1: ffff88805681c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 420.350971][ T31] #2: ffffffff8f63ce08 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 420.361047][ T31] #3: ffff888028959b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 420.370425][ T31] #4: ffffffff8e1403f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 420.382486][ T31] 2 locks held by syz.5.2476/15494: [ 420.387782][ T31] #0: ffffffff8f4c6d70 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 420.397252][ T31] #1: ffff888056e44700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 420.408580][ T31] 2 locks held by syz.5.2476/15495: [ 420.413776][ T31] #0: ffffffff8f4c6d70 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 420.423232][ T31] #1: ffff888056e44700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 420.434558][ T31] 2 locks held by syz.7.2530/15712: [ 420.439802][ T31] #0: ffffffff8f4c6d70 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 420.449238][ T31] #1: ffff888056e44700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 420.460582][ T31] 2 locks held by syz.2.2556/15813: [ 420.465779][ T31] #0: ffffffff8f4c6d70 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 420.475237][ T31] #1: ffff888056e44700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 420.486510][ T31] 2 locks held by syz.8.2593/16016: [ 420.491744][ T31] #0: ffffffff8f4c6d70 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 420.501196][ T31] #1: ffff888056e44700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 420.512498][ T31] 3 locks held by syz-executor/16048: [ 420.517939][ T31] #0: ffff8880317e8dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 420.527969][ T31] #1: ffff8880317e80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 420.538084][ T31] #2: ffffffff8f63ce08 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 420.548268][ T31] 3 locks held by syz-executor/16139: [ 420.553621][ T31] #0: ffff88808e474dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 420.563573][ T31] #1: ffff88808e4740b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 420.573330][ T31] #2: ffffffff8f63ce08 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 420.583472][ T31] [ 420.594391][ T31] ============================================= [ 420.594391][ T31] [ 420.610465][ T31] NMI backtrace for cpu 0 [ 420.610488][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 420.610515][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 420.610525][ T31] Call Trace: [ 420.610532][ T31] [ 420.610541][ T31] dump_stack_lvl+0x189/0x250 [ 420.610566][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 420.610585][ T31] ? __pfx__printk+0x10/0x10 [ 420.610616][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 420.610641][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 420.610664][ T31] ? __pfx__printk+0x10/0x10 [ 420.610686][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 420.610712][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 420.610735][ T31] watchdog+0xf93/0xfe0 [ 420.610763][ T31] ? watchdog+0x1de/0xfe0 [ 420.610792][ T31] kthread+0x711/0x8a0 [ 420.610814][ T31] ? __pfx_watchdog+0x10/0x10 [ 420.610836][ T31] ? __pfx_kthread+0x10/0x10 [ 420.610857][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 420.610879][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 420.610901][ T31] ? __pfx_kthread+0x10/0x10 [ 420.610921][ T31] ret_from_fork+0x4b9/0x870 [ 420.610947][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 420.610979][ T31] ? __switch_to_asm+0x39/0x70 [ 420.610996][ T31] ? __switch_to_asm+0x33/0x70 [ 420.611012][ T31] ? __pfx_kthread+0x10/0x10 [ 420.611032][ T31] ret_from_fork_asm+0x1a/0x30 [ 420.611067][ T31] [ 420.611074][ T31] Sending NMI from CPU 0 to CPUs 1: [ 420.763187][ C1] NMI backtrace for cpu 1 [ 420.763205][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 420.763223][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 420.763233][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 420.763258][ C1] Code: 43 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 66 23 00 f3 0f 1e fa fb f4 18 e8 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 420.763273][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 420.763287][ C1] RAX: f52f8c15b3c87d00 RBX: ffffffff81958c97 RCX: f52f8c15b3c87d00 [ 420.763300][ C1] RDX: 0000000000000001 RSI: ffffffff8d7ddcda RDI: ffffffff8bc03b60 [ 420.763311][ C1] RBP: ffffc90000197f10 R08: ffff8880b8732fdb R09: 1ffff110170e65fb [ 420.763323][ C1] R10: dffffc0000000000 R11: ffffed10170e65fc R12: ffffffff8f9d4c30 [ 420.763334][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d4b58 [ 420.763345][ C1] FS: 0000000000000000(0000) GS:ffff888125e3b000(0000) knlGS:0000000000000000 [ 420.763358][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 420.763368][ C1] CR2: 000056223d8e9000 CR3: 000000000df36000 CR4: 00000000003526f0 [ 420.763383][ C1] Call Trace: [ 420.763390][ C1] [ 420.763396][ C1] default_idle+0x13/0x20 [ 420.763412][ C1] default_idle_call+0x73/0xb0 [ 420.763429][ C1] do_idle+0x1e7/0x510 [ 420.763454][ C1] ? __pfx_do_idle+0x10/0x10 [ 420.763483][ C1] cpu_startup_entry+0x44/0x60 [ 420.763503][ C1] start_secondary+0x101/0x110 [ 420.763522][ C1] common_startup_64+0x13e/0x147 [ 420.763551][ C1] [ 420.766080][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 420.931735][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 420.940832][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 420.950872][ T31] Call Trace: [ 420.954141][ T31] [ 420.957059][ T31] dump_stack_lvl+0x99/0x250 [ 420.961641][ T31] ? __asan_memcpy+0x40/0x70 [ 420.966224][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 420.971407][ T31] ? __pfx__printk+0x10/0x10 [ 420.975994][ T31] vpanic+0x281/0x750 [ 420.979968][ T31] ? __pfx_vpanic+0x10/0x10 [ 420.984462][ T31] ? preempt_schedule+0xae/0xc0 [ 420.989303][ T31] ? preempt_schedule_common+0x83/0xd0 [ 420.994756][ T31] panic+0xb9/0xc0 [ 420.998470][ T31] ? __pfx_panic+0x10/0x10 [ 421.002875][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 421.008241][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 421.014388][ T31] watchdog+0xfd2/0xfe0 [ 421.018539][ T31] ? watchdog+0x1de/0xfe0 [ 421.022865][ T31] kthread+0x711/0x8a0 [ 421.026924][ T31] ? __pfx_watchdog+0x10/0x10 [ 421.031589][ T31] ? __pfx_kthread+0x10/0x10 [ 421.036165][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 421.041349][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 421.046532][ T31] ? __pfx_kthread+0x10/0x10 [ 421.051108][ T31] ret_from_fork+0x4b9/0x870 [ 421.055692][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 421.060800][ T31] ? __switch_to_asm+0x39/0x70 [ 421.065549][ T31] ? __switch_to_asm+0x33/0x70 [ 421.070295][ T31] ? __pfx_kthread+0x10/0x10 [ 421.074875][ T31] ret_from_fork_asm+0x1a/0x30 [ 421.079639][ T31] [ 421.082912][ T31] Kernel Offset: disabled [ 421.087226][ T31] Rebooting in 86400 seconds..