last executing test programs: 2m23.792537328s ago: executing program 2 (id=2152): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0xf, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x814}, 0x4004814) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="2f0014000000000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x2, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xffe0}, {0x0, 0x7}, {0x14, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x40004) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x1}, @IFLA_GRE_IKEY={0x8, 0x4, 0x40000}]}}}]}, 0x48}}, 0x88890) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x4000000) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB='/'], 0x20) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_emit_ethernet(0x9d, &(0x7f0000000000)={@local, @random="0074d47f4800", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1800", 0x67, 0x3a, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x38}, {[], @echo_request={0x80, 0x0, 0x0, 0x3, 0x0, "ceb21659a0196f43d70080f11faca763f011771a3cbed2afe11af2ac6a56b6873e609e83a568851e028e7fdf820716176402581745e806f6f2d4843095498cc8f2c8bb29a02dd9d50167ee4ff30000000000005ad9e2a848a1b45400d4e90b"}}}}}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000580)=[@in6={0xa, 0x4e22, 0x5, @mcast2, 0x2}, @in6={0xa, 0x4e21, 0x6, @local, 0x4279c29b}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e23, 0x40, @mcast1, 0x1000}, @in6={0xa, 0x4e20, 0x8e, @mcast2, 0x8}], 0x80) writev(r4, &(0x7f0000000500)=[{&(0x7f00000000c0)="b4cbde7cb1a74ef98442614304a42e88de67c7d15da84dc92306d8d81501756769e45cbea5451160ce87d30946af0888aba0115e89b3b65cc7560cfc2ef66109577a4dd99c2285ebb5657acc641e97b6c4bd513486e2eea916eb3f0952a4226403503f4858f80eba9fa9d8ddc3f2d72b5a5239ad1d7c25e101b5fa2af76586b0ca6b87b723db91a49d159078212664c430bbd79fb584a6133650acc59cc1f12e314f0e23cfc3b5bcbdc4219920bf63b8f7d944d7e3b8f9c27ce1498a6b7199295ecc62c0fbca802f38b6ca5f2d77", 0xce}, {&(0x7f0000000280)="abcb15bd061bee19c45aacb29666d2fb7e4e230f309a3f027d5e23e7dd00bc2ef6b28ab0ff9440fa883a7af46d44336c2f647fdb3475413aa5347d4c82c73e2975e7e37a7c258cbc2346583fcd271a9603fb0e0dbeb141aee4f8f4b9cf3eed6259a064c298c02504", 0x68}, {&(0x7f0000000300)="0bba2342156c6dbd4248604df56a4578cafd44f90c31bfecd6c965221298223f7b5c7069f822af374f45e1f55c5002c7da347277e3c6e36cb5313857409048748e5951fdb8c1ebb73d982d5b35ecb14a6c430193e8f2d89721c00c94934b01e54c308b39d77eeaa060945c3e0b203669948dd217030a81034b328607cb2cb2451abd506bb3ae69b618d76cad6a", 0x8d}, {&(0x7f00000003c0)="b99957eadeae823b6ebbf0671c5c43af3d2cac9bfa6e012e3bc9ee2e918afe06387261db1fca951aa87b0c79eb02fd75c7c04a7d51278d14436d68c2ad5035f32fb667db349bb4b7768c36753e72bc6953301c8e2831b209874f68d05c253f1d1fc87bb573461adf0c0636ed11516a5a52df5b62ee2b411cd44a6b956a3e3912b11b1fbe0117143af3", 0x89}, {&(0x7f0000000480)="1251f8ae27c6ccf9c4ebae709425c2ea6474db27e4a9e44ed0bff40ddf9d0e05fb352818c84f9cdc5b408588b1c79107de149a8e2496e2fd9ec91f746af3f4f4b141e8df41ce4d590e36cb75b9a7acc2f90e186603e3e64ff728b270834f3d732a4b2a890d", 0x65}], 0x5) syz_emit_ethernet(0x7e, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0xfdef) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="14090000330001000000000000000000070100800c0001"], 0x114}], 0x1, 0x0, 0x0, 0x8010}, 0x4004084) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0xf, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x814}, 0x4004814) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="2f0014000000000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x2, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xffe0}, {0x0, 0x7}, {0x14, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x40004) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x1}, @IFLA_GRE_IKEY={0x8, 0x4, 0x40000}]}}}]}, 0x48}}, 0x88890) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x4000000) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB='/'], 0x20) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) syz_emit_ethernet(0x9d, &(0x7f0000000000)={@local, @random="0074d47f4800", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1800", 0x67, 0x3a, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x38}, {[], @echo_request={0x80, 0x0, 0x0, 0x3, 0x0, "ceb21659a0196f43d70080f11faca763f011771a3cbed2afe11af2ac6a56b6873e609e83a568851e028e7fdf820716176402581745e806f6f2d4843095498cc8f2c8bb29a02dd9d50167ee4ff30000000000005ad9e2a848a1b45400d4e90b"}}}}}}, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000580)=[@in6={0xa, 0x4e22, 0x5, @mcast2, 0x2}, @in6={0xa, 0x4e21, 0x6, @local, 0x4279c29b}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e23, 0x40, @mcast1, 0x1000}, @in6={0xa, 0x4e20, 0x8e, @mcast2, 0x8}], 0x80) (async) writev(r4, &(0x7f0000000500)=[{&(0x7f00000000c0)="b4cbde7cb1a74ef98442614304a42e88de67c7d15da84dc92306d8d81501756769e45cbea5451160ce87d30946af0888aba0115e89b3b65cc7560cfc2ef66109577a4dd99c2285ebb5657acc641e97b6c4bd513486e2eea916eb3f0952a4226403503f4858f80eba9fa9d8ddc3f2d72b5a5239ad1d7c25e101b5fa2af76586b0ca6b87b723db91a49d159078212664c430bbd79fb584a6133650acc59cc1f12e314f0e23cfc3b5bcbdc4219920bf63b8f7d944d7e3b8f9c27ce1498a6b7199295ecc62c0fbca802f38b6ca5f2d77", 0xce}, {&(0x7f0000000280)="abcb15bd061bee19c45aacb29666d2fb7e4e230f309a3f027d5e23e7dd00bc2ef6b28ab0ff9440fa883a7af46d44336c2f647fdb3475413aa5347d4c82c73e2975e7e37a7c258cbc2346583fcd271a9603fb0e0dbeb141aee4f8f4b9cf3eed6259a064c298c02504", 0x68}, {&(0x7f0000000300)="0bba2342156c6dbd4248604df56a4578cafd44f90c31bfecd6c965221298223f7b5c7069f822af374f45e1f55c5002c7da347277e3c6e36cb5313857409048748e5951fdb8c1ebb73d982d5b35ecb14a6c430193e8f2d89721c00c94934b01e54c308b39d77eeaa060945c3e0b203669948dd217030a81034b328607cb2cb2451abd506bb3ae69b618d76cad6a", 0x8d}, {&(0x7f00000003c0)="b99957eadeae823b6ebbf0671c5c43af3d2cac9bfa6e012e3bc9ee2e918afe06387261db1fca951aa87b0c79eb02fd75c7c04a7d51278d14436d68c2ad5035f32fb667db349bb4b7768c36753e72bc6953301c8e2831b209874f68d05c253f1d1fc87bb573461adf0c0636ed11516a5a52df5b62ee2b411cd44a6b956a3e3912b11b1fbe0117143af3", 0x89}, {&(0x7f0000000480)="1251f8ae27c6ccf9c4ebae709425c2ea6474db27e4a9e44ed0bff40ddf9d0e05fb352818c84f9cdc5b408588b1c79107de149a8e2496e2fd9ec91f746af3f4f4b141e8df41ce4d590e36cb75b9a7acc2f90e186603e3e64ff728b270834f3d732a4b2a890d", 0x65}], 0x5) (async) syz_emit_ethernet(0x7e, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86"], 0x0) (async) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0xfdef) (async) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="14090000330001000000000000000000070100800c0001"], 0x114}], 0x1, 0x0, 0x0, 0x8010}, 0x4004084) (async) 2m23.750744222s ago: executing program 2 (id=2154): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001880)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2d}]}, 0x1c}}, 0x0) 2m23.616525361s ago: executing program 2 (id=2156): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x8000000, 0x2000001}, 0x8) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)={0x14, 0x25, 0x301, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r2 = gettid() r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r2}, @IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) r5 = socket$netlink(0x10, 0x3, 0xc) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, r6, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x10001, 0x7e}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3ff}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xe}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x6}]}, 0x50}}, 0x800) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000002840)={0x0, 0x0}, &(0x7f0000002880)=0xc) sendmsg$netlink(r5, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000980)={0x10, 0x32, 0x4, 0x70bd25, 0x25dfdbff}, 0x10}], 0x1, &(0x7f0000002900)=[@cred={{0x1c, 0x1, 0x2, {0x0, r8}}}], 0x20, 0x50}, 0x40880) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) sendmsg$netlink(r1, &(0x7f0000000380)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)=[{&(0x7f0000000080)={0x10, 0x3c, 0x200, 0x70bd26, 0x25dfdbfb}, 0x10}, {&(0x7f0000000100)={0x100, 0x32, 0x10, 0x70bd26, 0x25dfdbfe, "", [@generic="6ffd9a2d3ec2d392d1f286b6e124a5bcb69d73ce65a7970441593f76e6f127a590885c127c8a10b2432ec6d46f291c644315e647980db0b98347dbdba8bb57d7da88dae022b368e4b01b87a26c1d00257d8dbff0f55601b36960979f63d17974bc0f001cbf4b936b335447475f85929dc1ce85ad86966f62b3ee84de299ef60cd2cc87bf080dc80a0dd7a495ae6e0a9c4b29512fcc5c718ead7c48219043cbd0ef7a8502733ce69604ff6f996a9bbbd4537f664e", @generic="a18340190f9813664711e4a7b827dbdc3537277943fe1e74c422d335bbb7ae533472ac5cdf963b31bae45d906d7486105d", @typed={0x7, 0xe1, 0x0, 0x0, @str='\'\\\x00'}]}, 0x100}], 0x2, &(0x7f0000000340)=[@cred={{0x1c, 0x1, 0x2, {r2, r8, r9}}}], 0x20, 0x400c4}, 0x801) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x20, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x1}}]}, 0x20}}, 0x0) 2m15.376557796s ago: executing program 0 (id=2280): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) (async) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) (async, rerun: 64) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) (async, rerun: 64) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000140)="84", 0x1}, {&(0x7f0000000180)="ca701a95cff495e330f7b33c5f49acf2baa71efeaa18a8ba67e1", 0x1a}], 0x3}}], 0x1, 0x4400c800) sendto$inet6(r1, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) (async) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000200001002bbd700000ff00000a108000000000080400010014000200fc02000000000000000000000000000014000100200100"/67], 0x44}}, 0x40000) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b002100697036746e6c00002c000280140003002001000000540c533300000000000001ff010200fc020100"/68], 0x5c}}, 0x0) 2m15.248167257s ago: executing program 0 (id=2282): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x200}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x10, &(0x7f0000000200)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2m15.112694288s ago: executing program 0 (id=2285): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x2e90) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x2082, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0xffffffff, [{0x0, 0x2}]}, @ptr={0x0, 0x0, 0x0, 0x9, 0x3}, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x4a}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000040)=0x4, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0xfffffffc, 0x0, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendfile(r3, r3, 0x0, 0xa) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xb, 0x0, 0x0, 0x0, 0x0, {[@mss, @sack_perm={0x4, 0x2}, @generic={0x0, 0xfffffffffffffc7e, "a2898405704bcf372ce6"}]}}}}}}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r7, {0xfff2, 0x4}, {}, {0x5, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040054) 2m14.956840261s ago: executing program 0 (id=2287): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x10001}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x4000004) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x54, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x48000) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000020c0)=ANY=[@ANYRES32=0x0, @ANYBLOB='/\x006d'], 0xfe0d) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018004000000000000c0000000c00000002000000000000000000008f050000000000"], &(0x7f0000000040)=""/249, 0x26, 0xf9, 0x6}, 0x20) socket$kcm(0x10, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r7}, 0x10) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r8}, 0x8) close(r9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x13, 0x10, 0x8, 0x0, 0x0, 0x1, 0x3}, 0x50) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x40e00}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r11, 0x0, 0x0}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r10, 0x0, 0x0}, 0x20) sendmsg$IPSET_CMD_TYPE(r6, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x4000000) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b703000000d50b00850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='vm_unmapped_area\x00', r13, 0x0, 0x4000000000000000}, 0x18) 2m14.009203466s ago: executing program 0 (id=2295): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001340)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001180), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x19, 0x3, &(0x7f00000011c0)=ANY=[@ANYRES32=r0, @ANYRES64=r1], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r3, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r4, 0x118, 0x0, &(0x7f0000000a40)=0xc, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) getsockopt$bt_hci(r6, 0x84, 0x84, &(0x7f0000000040)=""/4146, &(0x7f0000000000)=0x1032) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r8 = accept4(r6, 0x0, 0x0, 0x661065582d42b392) sendmmsg(r8, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="b896a15f48052eec7bc7fe285f228824877bd9d7deef9ae32aa7eaa025f93fb406", 0x21}], 0x1}}], 0x1, 0x4040050) bind$alg(r8, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\n\x00\x00\x00\b\x00\x00\x00B\x00\x00\x00@\x00\x00\x00B\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000880), 0x1006, r10, 0x0, 0xd88d02a0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={0x1, &(0x7f0000000100), &(0x7f0000002240)=""/99}, 0x20) accept4(r5, &(0x7f00000012c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, &(0x7f0000001280)=0xb8, 0x80000) sendmsg$netlink(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x90}, 0x20000010) r11 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r11, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af00000000", 0x17) setsockopt$inet6_opts(r11, 0x29, 0x39, 0x0, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r12, 0x89b0, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, 0x0, 0x0) 2m13.870997966s ago: executing program 0 (id=2298): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000740)={0xc4, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xac, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID, @ETHTOOL_A_STRINGSET_ID, @ETHTOOL_A_STRINGSET_ID, @ETHTOOL_A_STRINGSET_ID, @ETHTOOL_A_STRINGSET_ID, @ETHTOOL_A_STRINGSET_ID={0x1c}, @ETHTOOL_A_STRINGSET_ID, @ETHTOOL_A_STRINGSET_ID, @ETHTOOL_A_STRINGSET_ID]}]}]}, 0xc4}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r3, 0x0, 0xfaf}, 0x18) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m12.407660575s ago: executing program 32 (id=2089): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r4}]}}}]}, 0x38}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[@ANYRESDEC=r5, @ANYRES64=r5, @ANYRESHEX=r5, @ANYRESHEX=r5, @ANYRESOCT=r5, @ANYRES64=r5, @ANYRESOCT=r5, @ANYRESDEC=r5], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x7, '\x00', r4, r5, 0x5, 0x1, 0x5}, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x800, 0x2, [0xd, 0x7]}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000100)={r8, 0x4a}, 0x8) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f616400340002800800044000000000080005400000000808000340000000000800024000000000080006400000000108000840000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r10, 0x84, 0x70, &(0x7f00000005c0)={r8, @in={{0x2, 0x4e21, @remote}}, [0x2, 0x80000001, 0x3, 0x1ff, 0x9, 0x7ff, 0x644d6625, 0x80, 0x1, 0x460, 0x5, 0x81, 0x7ff, 0xc00000000000000, 0x6]}, &(0x7f0000000300)=0x100) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f00000006c0)={r12, 0x802, 0x4, 0xfffffffd, 0x4002, 0x5}, 0x14) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f00000002c0)={r11, 0x6, 0x6, [0x0, 0xff, 0x6, 0x3f7, 0x1ff, 0x9529]}, 0x14) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_SREG={0x8}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8}, @NFTA_BYTEORDER_SIZE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) 2m8.57156586s ago: executing program 33 (id=2156): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x8000000, 0x2000001}, 0x8) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)={0x14, 0x25, 0x301, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r2 = gettid() r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r2}, @IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) r5 = socket$netlink(0x10, 0x3, 0xc) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, r6, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x10001, 0x7e}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3ff}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xe}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x6}]}, 0x50}}, 0x800) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000002840)={0x0, 0x0}, &(0x7f0000002880)=0xc) sendmsg$netlink(r5, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000980)={0x10, 0x32, 0x4, 0x70bd25, 0x25dfdbff}, 0x10}], 0x1, &(0x7f0000002900)=[@cred={{0x1c, 0x1, 0x2, {0x0, r8}}}], 0x20, 0x50}, 0x40880) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) sendmsg$netlink(r1, &(0x7f0000000380)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)=[{&(0x7f0000000080)={0x10, 0x3c, 0x200, 0x70bd26, 0x25dfdbfb}, 0x10}, {&(0x7f0000000100)={0x100, 0x32, 0x10, 0x70bd26, 0x25dfdbfe, "", [@generic="6ffd9a2d3ec2d392d1f286b6e124a5bcb69d73ce65a7970441593f76e6f127a590885c127c8a10b2432ec6d46f291c644315e647980db0b98347dbdba8bb57d7da88dae022b368e4b01b87a26c1d00257d8dbff0f55601b36960979f63d17974bc0f001cbf4b936b335447475f85929dc1ce85ad86966f62b3ee84de299ef60cd2cc87bf080dc80a0dd7a495ae6e0a9c4b29512fcc5c718ead7c48219043cbd0ef7a8502733ce69604ff6f996a9bbbd4537f664e", @generic="a18340190f9813664711e4a7b827dbdc3537277943fe1e74c422d335bbb7ae533472ac5cdf963b31bae45d906d7486105d", @typed={0x7, 0xe1, 0x0, 0x0, @str='\'\\\x00'}]}, 0x100}], 0x2, &(0x7f0000000340)=[@cred={{0x1c, 0x1, 0x2, {r2, r8, r9}}}], 0x20, 0x400c4}, 0x801) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x20, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x1}}]}, 0x20}}, 0x0) 2m7.14448846s ago: executing program 3 (id=2356): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x2b, 0x80801, 0x1) connect$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) poll(&(0x7f0000000180)=[{r2, 0x1}], 0x1, 0x8) socket$inet6(0xa, 0x2, 0x3a) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtfilter={0x64, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0x3}, {}, {0x1, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x0, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a3, 0xd5}}, @TCA_U32_MARK={0x10, 0xa, {0x9, 0x7}}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x24008000) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000007c0)={{{@in=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x200000000, 0x40000000007, 0x20000a0de, 0x40000000000004, 0x2, 0x200000003, 0x400}, {0x5}, 0x4, 0xfffffffe, 0x1, 0x1, 0x3, 0x3}, {{@in=@empty, 0x4d2, 0x6c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0xe}, 0x3502, 0x1, 0x8, 0x0, 0x9075}}, 0xe8) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e00000000000000ca0000000300000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000face00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x31}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x6c}}}, &(0x7f0000000200)='GPL\x00'}, 0x90) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f00000001c0)={r9, @in6={{0xa, 0x4e23, 0x9, @empty, 0x8}}, 0x3, 0x8000}, &(0x7f0000000400)=0x90) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x8000, 0x8, 0x25b, 0x8, r9}, 0x10) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x6, 0x8, 0x39e4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) socket(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000002c0)=ANY=[@ANYBLOB="e00000027f00000101000000020000007f"], 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) writev(r11, &(0x7f0000000040)=[{&(0x7f0000000340)="390000001300034702bb65e1c3e4ffff01000000010000005600000025000000190004000400060007fd17e5ffff0800040000008c00000000be", 0x3a}], 0x1) 2m6.588929957s ago: executing program 3 (id=2363): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54010000100001002abd700000000000fc0100000000000000000000000000000000000000000000000000000000000000000000000000000000001900000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000004d632000000ac1414bb0000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000008000000000000000000000000000000ffffffffffffffff000000001000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000a000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017"], 0x154}}, 0x0) 2m6.035003742s ago: executing program 3 (id=2369): sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x1c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x43}, 0x4008085) socket(0x1f, 0x5, 0x2000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4a24, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x4e21, @empty}, 0x4, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200001, 0x1ff, 0x9}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 2m5.092806357s ago: executing program 3 (id=2375): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg0\x00'}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000010c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000004c00088048000080200009801c000080060001000200007f0f000200ac1414aa05000300020000002400010000000000000000000000000000000000000000000000000000000000000000000800050001000000140002007767310000"], 0x7c}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) 2m4.699145323s ago: executing program 3 (id=2378): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000000040001000000000008000300"/32], 0x20}}, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r4, &(0x7f00000003c0)='V', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002180)=@ipv4_newroute={0x34, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0x6, 0x1, {0x0, 0x8}}}]}, 0x34}}, 0x0) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}}, 0x1}, 0x90) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000280)={'ip6gre0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500100001a0013040000000000000000e000000100000000000000000000000020010000000000000000000000000000000000004e2400040200002000000000", @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRESDEC=r1], 0x150}, 0x1, 0x0, 0x0, 0x20}, 0x0) 2m4.403485189s ago: executing program 3 (id=2379): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c000089", @ANYRES16=r3, @ANYBLOB="00032bbd7000fedbdf2507000000050029000000000008002b006500000008003100e2000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20020000}, 0x20008001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000300)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000380)={'gre0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='pmap_register\x00', r1, 0x0, 0x3}, 0x18) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r5, 0x89a1, &(0x7f0000000080)='bridge0\x00') sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m58.796847903s ago: executing program 34 (id=2298): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000740)={0xc4, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xac, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID, @ETHTOOL_A_STRINGSET_ID, @ETHTOOL_A_STRINGSET_ID, @ETHTOOL_A_STRINGSET_ID, @ETHTOOL_A_STRINGSET_ID, @ETHTOOL_A_STRINGSET_ID={0x1c}, @ETHTOOL_A_STRINGSET_ID, @ETHTOOL_A_STRINGSET_ID, @ETHTOOL_A_STRINGSET_ID]}]}]}, 0xc4}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r3, 0x0, 0xfaf}, 0x18) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m52.219034742s ago: executing program 7 (id=2501): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x4, 0x2, 0x4, 0x3}, {0xfffc, 0x6, 0x28, 0x5}]}) bind$bt_hci(r2, &(0x7f0000000240)={0x1f, 0x2}, 0x3e) write$bt_hci(r2, &(0x7f0000000040)=ANY=[], 0x6) sendmsg$can_raw(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x1d, r0}, 0x10, &(0x7f0000000300)={&(0x7f00000002c0)=@can={{0x0, 0x0, 0x1}, 0x7, 0x1, 0x0, 0x0, "b7bb5b716836d547"}, 0x10}, 0x1, 0x0, 0x0, 0x4001080}, 0xc800) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000180)) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$netlink(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="240100002a00000827bd7000fcdbdf253100c580c48ca20fca20ddceb00eec4f0005b195b6a7a4535602a5621a9439e5000af4440917ea53a5ec7b509ea9a05b3700000004001b00dc002f800400178008007b00ac1e07010c001400030000000000000004004080b500fb0095475d71fb262a11760b3b261754b75497925dcb81f5e494a289b2f1a16b77e7976721dc5d73bde25df772159b0c24d323cc6c1e5923fc2c727b6ebecab6ce00385b75cd577430c75746ec25d89908150b5ae4b7acc4f61ad3ee02276af48b633528eec0c635a8081212be8456e515a6d4eb3e927cf51eb33934619bbcec9933be66f15260369d24f47ba9cbec06af97fd035092215c61c61e8045903ee9a307db9c818be9a52a9cea93e0236981c73caa00000004003280da8129a0e4b43dd168b31eb0c813718fc5692b392c845cdd9970a0d1b9bf3ef53416a825a160e4ae3b638527df6b21ef9f3a4e6e5679f505fcf88960df604c23597ccd176e9fdb6f46c89df8dbf5da30e05ffc026110ae4ce8bfde149b137724fdc35f44fa25b094c8bf73f3de0019f9c84d64716ae553a695b357c0390240391091e36fadb39fdef6bf3ee1bbbcaf8d"], 0x124}], 0x1, 0x0, 0x0, 0x2000c040}, 0x20000000) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0x8}, 0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r1, @ANYRES32=0x0, @ANYBLOB="0800000000001705a000001c0012800b00010067726574617000000c00020a000000000000000b0a0001000cc5035c44"], 0x48}}, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000200)=0x5, 0xfffffe97) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x10, &(0x7f00000003c0)=ANY=[@ANYRES8=r3, @ANYRES32=r7, @ANYRES8=r7, @ANYRES16=r6, @ANYRESHEX=0x0, @ANYRES64, @ANYRESDEC=0x0], &(0x7f0000005d80)='syzkaller\x00', 0xf}, 0x94) 1m51.904662643s ago: executing program 7 (id=2506): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e20, 0xffffffff, @empty, 0xffffffff}}, 0x0, 0x1}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xffffffff}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x8000) 1m51.758250998s ago: executing program 7 (id=2508): r0 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x8, 0x1000}, 0xc) socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) connect$l2tp6(r2, 0x0, 0x0) (async) connect$l2tp6(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000731139000000000020000000000000009500200000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000731139000000000020000000000000009500200000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x10, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x20008000) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7000fddbdf252100000008000300", @ANYRES32=r6, @ANYBLOB="0400848038002d800a000000010181010101000004"], 0x58}, 0x1, 0x0, 0x0, 0x4000011}, 0x40000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra}}}}}, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000003e0000000000000003dbdff6037c0000040036800c0001800600060086dd768a44a0f97549b14aad22719d1e6147792aa9ee6e31dcd447841fdfb2c6c43192c050a8e63de8abdf94f143f633a683b0ff8f68cef0eaae08af6664ca58474cb245b1f5"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 1m51.596683256s ago: executing program 7 (id=2511): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x21}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={r1, 0xb9}, &(0x7f0000000100)=0x8) 1m51.468092533s ago: executing program 7 (id=2513): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x8, 0x5, 0x3c0, 0x0, 0x270, 0xffffffff, 0x1c8, 0x270, 0x328, 0x328, 0xffffffff, 0x328, 0x328, 0x5, 0x0, {[{{@uncond, 0xae01, 0xd8, 0x110, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@unspec=@connlimit={{0x40}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @broadcast, @loopback, @icmp_id, @icmp_id}}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'bridge0\x00', 'ipvlan0\x00'}, 0x3f5, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@empty, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0xff00, {0x0, @multicast1, @multicast1, @gre_key}}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'caif0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4, @ipv6=@loopback, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x200, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m51.412250464s ago: executing program 7 (id=2514): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r2, 0x0, 0x1}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) socket(0xb, 0x1, 0x9) r3 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f00000002c0)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m49.133843754s ago: executing program 35 (id=2379): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c000089", @ANYRES16=r3, @ANYBLOB="00032bbd7000fedbdf2507000000050029000000000008002b006500000008003100e2000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20020000}, 0x20008001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000300)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000380)={'gre0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='pmap_register\x00', r1, 0x0, 0x3}, 0x18) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r5, 0x89a1, &(0x7f0000000080)='bridge0\x00') sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m36.316733374s ago: executing program 36 (id=2514): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r2, 0x0, 0x1}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) socket(0xb, 0x1, 0x9) r3 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f00000002c0)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m31.156272255s ago: executing program 8 (id=2717): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4000000000000007910480000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_POWER(r8, 0x112, 0x9, 0x0, &(0x7f0000000140)) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) write(r6, &(0x7f0000000100)="ab74efd76a620ea165a11145cf87e9c4fff7d0ad5edd51792d193b7069f4bef51c7b4de70df07f03736eb920e33ca61b82e53b79239b7e1578199bff294282477468ba2e2c977082398a401bc623716a80b14c06a70c0fb39cc227af08c909a8ebc63ffcd783af36e32a06c302085e75a17a586b3cf1feca55f48c2657fa4724aeb6cc1aba4db319bfb5cf9fd6ab995741f45b2e516ef029b6acbb1a930200147dd54b9fb2f5c3391eca8b300f9366c1fb8b388f51ea0ed26e4c5fa20d7a7d6f2e65", 0xffffffd0) r9 = socket(0x40000000015, 0x5, 0x6) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r9) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r10, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3f}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r10, 0x1, 0x19, 0x0, 0x0) r11 = accept4$bt_l2cap(r9, 0x0, &(0x7f0000000480), 0x80c00) getsockopt$bt_l2cap_L2CAP_LM(r11, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) r12 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newtaction={0x48, 0x30, 0x51b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbmod={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4, 0x14}, {0xc}, {0xc, 0x6, {0x2}}}}]}]}, 0x48}}, 0x0) sendmsg$key(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x2, 0xe, 0x0, 0x3, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x0, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private=0xa010101}}, @sadb_address={0x3, 0x6}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x33, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in=@empty}}]}, 0x80}}, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xf, 0x0, 0x0, 0x0, 0x0, 0xf}}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="070000007400009b48fe5e6618d4214bb6cb7beefb823db1b778431628c581cf4778d9d6c75da4a39219f5891802a64cfc97fe63027906edcc7b7ec4e5211e0192947fba43cc2c3604de58cd03b87d1f600c0423be9d4118a89d31c3e1a9a91199f91eae53f35bfb56c0f8f680cdfe374db3293a3e202f8275841c2b1fb90796b58a24d9b0d345eb937a0de860736037296dba170eec354fc7fe10bd171379837740ceb93b661424822572f8a218fa496bf7337afd83c9f0921e786e477587c6ec85be6efc592903d13d0a3f5c926b8df108e0fffdfeb9f04827ac7683315a7aba62978c2453b395053fea478d9cff63664a2b7a8dfa40f48200903f1f2d78b2ef5b680d55e6a4c7a2adf9a6414559ff086a68718bd9b416aaf6393236949dd42cd9807e99a9afa89b05512067b0739dacd1357a0e9dfdd8e2c85789afdd263ab46748d937cfbf788bb7defc7df877de0024a5b7c2b0879f14528f62942fff0a473cc477d23d0ba78cee74f10cc024d08164f592", @ANYRES32=0x0, @ANYBLOB="00080000075005001c0012800b00010062726964676500000c0002800500190002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r13, 0x8946, &(0x7f0000000040)={'lo\x00', &(0x7f0000000440)=@ethtool_eeprom={0xb, 0xff, 0xaa2}}) 1m30.164702866s ago: executing program 8 (id=2719): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={0x0, 0x950}, 0x1, 0x0, 0x0, 0x8041}, 0x41) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) close(r2) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000002000010000000000000000000a000000000000000000000008001a"], 0x2c}}, 0x0) 1m22.484073403s ago: executing program 8 (id=2777): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) socket$igmp6(0xa, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000181000010000000000000000000000000a40000000060a010400000000000000000200050000000000000400000000000000796e73657400001800028009"], 0x68}}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x800452d2, &(0x7f0000000100)) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000eeff130000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r4, &(0x7f0000000000)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0xffffffffffffff4d}, 0x1, 0x0, 0x0, 0x4000005}, 0x804) 1m22.240812942s ago: executing program 8 (id=2779): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}]}}]}, 0x45c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff4}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{0x7fff, 0x7f, 0x192, 0xf, 0x7fff, 0x205}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x1, 0x1, 0x80000000}}]}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x400000000000001, 0x0, 0x0, 0x1bb, 0x400}}]}}}]}, 0x90}}, 0x0) 1m21.970004042s ago: executing program 8 (id=2786): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0xb, 0x0, &(0x7f0000000140)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa6, 0x0, 0x0, 0x10, 0x3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000880)={0x8, 0x5, 0x7fff, 0x71, 0x0, 0x1a, 0x17, "d8f693ddf9dfd88b19b942e6941b79b871c43f0d", "4e310690029ffd2fd84c35833f8b062ab6ac9c46"}) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000000)={0x7, 0xff, 0x2, 0x5, 0xcf, 0x11, 0xd, "a52d2d4468c55f2fdfc170f40614c466843090d4", "15b84b713e6d8222b278c11254a216e488ab234d"}) 1m21.736739696s ago: executing program 8 (id=2791): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000080)="817bb97cdac2f8f819447aa4a50c293af36b43cab2641b7753df26944b52221c709e644460775e7a942249eb1ac40767256fe046accef57318edba88127ac70000d50884da6e5b920dc8c4df000deaa45d0ef4b4c714424b1618e6f5a23085a5277d67fe000000008ed9c37b2c5ba1861dbc62306c107dd5f6769eba26de83c0483092280e1675af60810ffd38815d030956e4f93acc42b9b6163776847b7dd7552a08ee3dfe640e7e7f64c0d1e8e484c22c7182391816a5a4fe8ab4de1fc700"/203, 0xcb}], 0x2}, 0x24040050) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES8=0x0], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r3, 0x0, 0xf}, 0x18) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2, 0xd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x25dfdbfd}, 0x10}}, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m6.672542013s ago: executing program 37 (id=2791): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000080)="817bb97cdac2f8f819447aa4a50c293af36b43cab2641b7753df26944b52221c709e644460775e7a942249eb1ac40767256fe046accef57318edba88127ac70000d50884da6e5b920dc8c4df000deaa45d0ef4b4c714424b1618e6f5a23085a5277d67fe000000008ed9c37b2c5ba1861dbc62306c107dd5f6769eba26de83c0483092280e1675af60810ffd38815d030956e4f93acc42b9b6163776847b7dd7552a08ee3dfe640e7e7f64c0d1e8e484c22c7182391816a5a4fe8ab4de1fc700"/203, 0xcb}], 0x2}, 0x24040050) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES8=0x0], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r3, 0x0, 0xf}, 0x18) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2, 0xd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x25dfdbfd}, 0x10}}, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 53.650279086s ago: executing program 6 (id=3121): vmsplice(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000000)="fe252d3cf0f68f1eedaa4bdb7e38a0a38623a56a4c6010eb420a2a94f5153d893af74af305c0a81304ce889aaabfea7a9c733412327d5718b458384dfec118fa32a349ebb5c1c8d491e413c659ae28328256b8f3c985a461fa71f59acdc8fca0a068138410e40ecc3a501ad264bb7c89ead22313d3f60c8067812ee2f96d72b696e645b8f7ccf07d7fa17f82f1e9fcdb0a37c6985b7169f342c29d5ecb57538e6bdc0fab01afde6dfb23533cb3d840baeadae2b502480205e7a5560696f7bc0f593f23d39a1d74e1ae5be2eea03c3e7b609a61bcb77a76d199f28d7486fee1ff04", 0xe1}, {&(0x7f0000000100)="75a0c555d8b4198ea6d7bbcce3ecd83c1b6becd03a01d8087f9e8b6bceb0bd50539333bcf155a370ce4f3e12c2f3964fd221a686aa1619ffd0f685bb2b09a271352a399555928cf5e2c83cd9030309c41e5883bcb35e4464899262f506f8099df286f79216ae3c4e1e050053ed8d8b83928fa4c192a5ca7014e606851a0e50702a11e954a69efb74e3daf1829ea8507c71fc111d86b66e0c4b8024876c405beb65ce6dbe49c64dbef368c465cb42154544487588b6e0ed881288adfed3f9b170249cd4654090f0cc83072093d8010832f05a7032e676f01d", 0xd8}, {&(0x7f0000000200)="b24637e019e5515ec237f6daeb6c2fb3584962794fa885a74dc10d09856c0ed20b3ea9ed77af264343414bb051f4d9019ad375d9af59b46eaccb70636e3cf072b2621c24594c841a41b90118c6caaee7d6e61e5704473f35e16f851e7e667618403168db61181b", 0x67}, {&(0x7f0000000280)="9a9c96ea87680e92e8c2da83f312e0b36a87b60b8d5da50e01f8d828b5d74689ae0957a2b248a3217e03944ebec6b81c281a767807e7fe791ac97b7922ad916cdd8148a9b58a8ca8c0789cd03bfc2b5fd132f08a21632b7ae89c563c1a1015ec0e5118cc35fbc1fba0528d69bce6221681134b7f0c62f608142ecb070d1c066ccaa646373aba2f558ced7bf5c8fdcfd6362abe947f", 0x95}, {&(0x7f0000000340)="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", 0xfb}, {&(0x7f0000000440)="d53ea5fd178cde1da46ed1ab0e988501466a4c68f816281cad62f10e94d4fef49e91e055b0827cb01b8c9123cc3c1c44b18c54d460b99121ba06ddc9a1831b67bed5f57566e5be7d5916f6aa2d83cadb406e7f161135cf6b08e1bf3c9cbfae2ff1946d5db7790012c0f8c2fb74de71df07a390599a76c909e2f146d6e1ce8db03022c70ad4b81ed22d8e917402fb95655ae22b121aece9f5155bf73b341e0079bc5db63f8b985e563f1360288037dd050535abe216975d63e93e2c3eff5fdff8", 0xc0}, {&(0x7f0000000500)="7083b6460d3df2441cc7d8a73d029e5825b5a1d9ea84bc46a2d2a2156b0968285cd670860760727e87158df3d24c80bc988d02da196b26ebc94839387ed96a4d0f11e3083d3b8c2d7fe470b7ca6995b642cd53880a7c75a1c23530fcb17b2e07a2a512263d08bcb30adacacfbfef3fe36dbe6d689ec79da0dca3d89f134dc6ba1fdb6dd6988d84ad2400dc3d4bbc4ac3706a2fe38d549040b43fac2b8cd72cf4982c105d7aee092a131509f1ffb45bdf216daa4bc55626d1965354c4bb1e96be01763379eff8238040454ab8", 0xcc}, {&(0x7f0000000600)="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", 0x1000}], 0x8, 0x2) r0 = accept4(0xffffffffffffffff, &(0x7f0000001680)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001700)=0x80, 0x81800) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001780)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) splice(r0, &(0x7f0000001740)=0x7, r1, &(0x7f00000017c0)=0x6, 0xa, 0xc) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000001800)={0x0, 0x3}, &(0x7f0000001840)=0x8) r3 = openat$cgroup_ro(r1, &(0x7f0000001880)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000018c0), 0x10) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002a40)={&(0x7f0000001900)="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", &(0x7f0000002900)=""/58, &(0x7f0000002940)="a4788bba9f5ad1cafda3ea0f7da9fc9f37475d293bc3f64552e37f2c3d1fe3d2add4b001ba42398dfdbdf8950ae63b238323e179ffc09aea35af1910536da451a3987650260a6fddafceeb3a70161f290084113db6ba6691378debafbfbec3a9688e56f4736e4b49d273ac5e54a48cfc18bea51558625e03b0f5e9e42e15bae043df", &(0x7f0000002a00)="4903b9d541", 0xf, r1}, 0x38) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002ac0), r0) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000002bc0)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002b00)={0x50, r5, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x73}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x50}}, 0x4040) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000002c00)='nv\x00', 0x3) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000002c40)={r2, 0x2}, &(0x7f0000002c80)=0x8) sendmsg$nl_route(r0, &(0x7f0000002dc0)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002d80)={&(0x7f0000002d00)=@delnexthop={0x48, 0x69, 0x200, 0x70bd26, 0x25dfdbfc, {}, [{0x8, 0x1, 0x2}, {0x8}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x2}, {0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x28802) r6 = accept$inet6(r3, &(0x7f0000002e00)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000002e40)=0x1c) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r6, 0xf503, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000002f40)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f00)={&(0x7f0000002ec0)={0x28, 0x140c, 0x8, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r7 = openat$cgroup_ro(r3, &(0x7f0000002f80)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000003000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000030c0)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003080)={&(0x7f0000003040)={0x38, r5, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x9, 0x46}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7954}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x240000d4}, 0x20008001) openat$ppp(0xffffffffffffff9c, &(0x7f0000003100), 0x20000, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000003240)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003200)={&(0x7f0000003180)={0x7c, r5, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x1}, @NL80211_ATTR_BSS_BASIC_RATES={0x11, 0x24, [{0x12, 0x1}, {0x48}, {0x4, 0x1}, {0x16}, {0x53}, {0x36, 0x1}, {0x6c}, {0xb}, {0x4, 0x1}, {0x6, 0x1}, {0x30, 0x1}, {0x60, 0x1}, {0x6c, 0x1}]}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6e5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1d3}], @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x80f}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5}]}, 0x7c}}, 0x4) syz_emit_ethernet(0xe9, &(0x7f0000003280)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @multicast, @val={@void, {0x8100, 0x1, 0x0, 0x3}}, {@x25={0x805, {0x3, 0x97, 0x1b, "f2b8446f8ae10db1ec55b26064f445acf49b02936a01b5991c49450cfbc3ae4667494a94d07800b3b9346f9a61a8326b7684bc9a76f6f47910757a4442dcd636ba03a753cd34cd67823d6237f1aaa075644382d3dae261e2b8c8fb08c16464cc067ef55079fcb4ceb2f19ed7a0045c20b9c33992ff2c5e92340c1427206bdba88d22a358d88509123e9c407ca2b889ed9adf18bde399aaba662bc391f932a5c276183eef3c15e3d41bf580e4ea26a56adf539c0f16f7091cb3db4ca7a17dede3fd2dfd92c21ac65b4bf7d92b946d16208fa7b530"}}}}, &(0x7f0000003380)={0x0, 0x2, [0x4d7, 0xcbb, 0xd76, 0x1c8]}) getsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f00000033c0), &(0x7f0000003400)=0x10) r9 = socket$alg(0x26, 0x5, 0x0) getsockopt$bt_hci(r9, 0x0, 0x3, &(0x7f0000003440)=""/214, &(0x7f0000003540)=0xd6) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000003580)=0x1) r10 = openat$cgroup_devices(r3, &(0x7f00000035c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r10, &(0x7f0000003600)={'c', ' *:* ', 'rwm\x00'}, 0xa) 53.399903175s ago: executing program 6 (id=3124): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x5}, 0x50) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) (async) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e0003002f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x38, r3, 0x5, 0x70bd25, 0x8, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x14, 0x49, [0xfac05, 0xfac09, 0xfac01, 0xfac0d]}]]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x488c0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000680)={0x7c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x6f}}}}, [@NL80211_ATTR_MESH_SETUP={0x24, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x5}, @NL80211_ATTR_BSS_BASIC_RATES={0x13, 0x24, [{0x48, 0x1}, {0xef90c43184204f6, 0x1}, {0x2}, {0x6c}, {0x18, 0x1}, {0x60}, {}, {0x4c}, {0x12, 0x1}, {0x30}, {0x18}, {0xb, 0x1}, {0x6}, {0x6, 0x1}, {0x12}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x44, r11, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x80000002}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}]}, 0x44}}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r9, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, r11, 0x1, 0x70bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x42}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x480d0}, 0x80dc) (async) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="08002600b409000008002700b0"], 0x3c}}, 0x44000) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x3, 0x4}]}}}]}, 0x3c}}, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_idx={0x18, 0xd, 0x5, 0x0, 0x3}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x9}, @generic={0x20, 0x4, 0xc, 0xff, 0xffffffff}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r13}}, @call={0x85, 0x0, 0x0, 0x26}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00'}, 0xc5) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) 53.050448158s ago: executing program 6 (id=3130): r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x44080) sendmsg(r0, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r2 = accept4$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @netrom}, [@remote, @netrom, @remote, @default, @remote, @null, @remote, @bcast]}, &(0x7f0000000140)=0x48, 0x80000) ioctl$SIOCAX25ADDFWD(r2, 0x89ea, &(0x7f0000000180)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000001c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000200)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={r4, 0x8}, 0x8) r5 = socket$inet6(0xa, 0xa, 0x100) setsockopt$inet6_int(r5, 0x29, 0x3c, &(0x7f0000000040)=0x6, 0x4) 52.4924444s ago: executing program 6 (id=3137): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0xfffffffe}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r2}, {}, {0x15, 0x0, 0x0, 0x80000000}}], {{0x7, 0x1, 0xa, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) socket$alg(0x26, 0x5, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e0030000280080006001000000010"], 0x68}}, 0x0) (async) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) (async) preadv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/41, 0x29}], 0x1, 0x9, 0x9) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='fsi_master_gpio_cmd_abs_addr\x00', r3}, 0x18) 52.235509291s ago: executing program 6 (id=3143): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002d00090027bd7000fedbdf250500000008000a00", @ANYRES32=0x0, @ANYBLOB="423b7869b7c07af2eb52b5e6fe1e589865a53186bd9eadc8bcb7112ba796732a0b3b8a5282f85ed661a01e97d03c48fa64270caebaff0049f08cddd0fa31aadfe50f7ba7c6c3f09c7b0d767892e7bcdf11caba94eaf952c1d89b99711eb98282dea8a8ad11727f0f578b1c39b52a0ad6eaa1332c4e262eab636eb02c65ad7d64b8cab4d033adcb2ff60c8f187ca4eb722100fcb38755f47a90b37321cb5c40e6ed2d64c129acf2a4f0859be1fd9284a261188e10d8ad84e4ee9444461b482b"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000086) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000000)=ANY=[], 0x114}], 0x1}, 0x0) 52.039274894s ago: executing program 6 (id=3148): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007c80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000007cc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f0000007dc0)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f0000000580)={0x60, r3, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "0fe4a3c6a6f185f3f48f262c02bc2310"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x6}, @NL80211_ATTR_PMK={0x14, 0xfe, "d551c68dad84c9740a87e3cf1701f742"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r5, 0x0, 0xf}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 38.680825333s ago: executing program 5 (id=3254): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000120000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000660000000000000018000000f8ffffff00000000000000809500000000000000360a00000000000018010000202078250000000000202020db1af8ff10010000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x12}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x80087601, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000300)={r5, r2, 0x4, r2}, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r2) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000100)={r8, 0x9}, 0xc) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r6, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20894}, 0x4090) 37.604901306s ago: executing program 5 (id=3265): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt(r1, 0xff, 0x7, &(0x7f0000000900)="7c73c6e9", 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x40, &(0x7f0000000000)={&(0x7f0000000080)={{0x14, 0x10, 0x9000, 0x6}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 37.508543069s ago: executing program 5 (id=3267): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x2a, 0x2, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r2, 0x0, 0xcf, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x80, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x80}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000440)={r6, 0x80000001, 0xfffffffffffffffe, 0x6bf}) sendmmsg$inet_sctp(r7, &(0x7f0000000540)=[{&(0x7f0000000480)=@in6={0xa, 0x4e22, 0x2, @rand_addr=' \x01\x00', 0x7f}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000680)="aae1b3e2f104fe4d9393e790e909d96b7c301f2a4410dcea1c0103d37b6841cfb8a91a77858e1789ff0b0c13535683960dfc4e9e94ff470d1cc88566df1298991daca746a809ccfa37dba8c8b2e6eb1e452c06be2b2c9266dfcd17a1ceaadb29fa201573435ba88339b779020e1933ae411cf2286c52d4c52253eb604bb16768aab995506e35798bc9b18e213c1dd606936e026f6fcd6a01f52faa110f4981d3cd5a4df6598041278b91cdce76a0d014a3e18e462680c973c47155e1a3bf9caf47948d9a18fe90bcf4db82b2d7e9632239957671888a3d60939883", 0xdb}, {&(0x7f0000000780)="252d475a664d5dc18c89c518eb63f006814a5fdfbee73fb81215c23bddfd186d8f18fe6a4558b58380a94900fc6058c2b56cb2f1bba55328e565874252cd6831f287a5507e6d20915c501f861cefa7e51a1af1dac9e9faf21a00d3f55bf8c4140f253efb54a115c3a8d168ddd62a1cf772bd35754a8f72c6c61b90081cbde9cea8a7b8552f834214e098b3caeef371b2e55411d063f5d481fe50dbaead1fcafa06588a463fce5d30daea7ea69cf165b3f979712c070526d087041c7e693264c341b080853b5b4a09562b71f798328eff4c7e6b5885583058153f3825f9768f8c", 0xe0}, {&(0x7f0000000880)="9f7aba59bd85d0fe261320a71be9468b9f935eba22fae0542d9bc88f2433971084abcaad3cb4155d6ef01cd6d67c99f3be1a7ec40f5721a436e2dbf2a54cf55f7d07c609495aad011f92e59c04b08ffdccf971bc48141cb79d040f20e58e3d65bff6365e99d3a2f0003ce680c267024b27532cc1484c1cd028424f48c3ba3bdf5ec84cd315ff54700dba5c52f53da00c6ba762b82f9ca398a47abeccbed31c9ee8583c9371145aae789805c7c33a25d7d77f73931efffd99b69e6a5cb3829dfd2c47e983eb0bfe5be7c100754e901454d8e5d3cda53ef7b2030c7b03fe4d17261972af0ff2cbbee0c4461b1950", 0xed}], 0x3, &(0x7f0000000980)=[@dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}, @dstaddrv6={0x20, 0x84, 0x8, @empty}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x5}}, @authinfo={0x18, 0x84, 0x6, {0x6}}], 0x88, 0x20004010}], 0x1, 0x4) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x4}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xfffb, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_LINK={0x8}, @TCA_U32_SEL={0x14, 0x5, {0xb, 0x0, 0x0, 0xe60, 0xc, 0x9, 0x0, 0x2}}]}}]}, 0x4c}}, 0x24000000) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x4}]}], {0x14}}, 0x90}}, 0x0) 37.21481471s ago: executing program 5 (id=3271): r0 = socket$inet(0xa, 0x801, 0x84) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000068000100030000000000008000000000000000000e0002"], 0x28}}, 0x40000) (async) ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)=0x7fffffffffffffff) (async) listen(r1, 0x0) (async) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x2, {0x41}}, 0x10, 0x0}, 0x0) (async) r4 = accept4(r1, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) (async) r6 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x458, 0x98, 0x0, 0x0, 0x0, 0x0, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x6, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x190}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x228}}, {{@ip={@remote, @empty, 0x0, 0x0, 'vcan0\x00', 'veth1_to_team\x00'}, 0x0, 0xc8, 0xf8, 0x0, {}, [@common=@icmp={{0x58}, {0x0, "d1a1"}}, @common=@addrtype={{0x30}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @remote}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth0_macvtap\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) (async) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) sendmsg$AUDIT_TTY_GET(r4, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x10, 0x3f8, 0x8, 0x70bd27, 0x25dfdbfd, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) (async) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r7, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) (async) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) listen(r0, 0x8) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x9, @mcast1, 0x6}}, {{0xa, 0x4, 0x0, @loopback, 0x8b2}}}, 0x108) (async) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f0000000540)=ANY=[@ANYBLOB="08000000000000000a00000000000000ff010000000000000000000000000501000000000000000000000000004000000000000000000000000000000000000000000000000082650000000000000000000000158a436c78446faf31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000006900"/384], 0x190) (async) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r9, 0x89f6, &(0x7f00000006c0)={'sit0\x00', &(0x7f00000004c0)={@broadcast, 0x0, 0x0, 0x50, 0x0, [{@empty}, {@local}, {@broadcast}, {@local}, {}]}}) (async, rerun: 32) accept4(r0, 0x0, 0x0, 0x0) (rerun: 32) 37.007651773s ago: executing program 5 (id=3273): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [""]}, 0x14}}, 0x20000880) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000100)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x6, @loopback, 0xc000000}}, 0x24) r2 = socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1, 0xffffffffffffffff}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x5, 0x4, 0xb052, 0xffffffffffffffff, 0xb, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x16, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xa27}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_val={0x18, 0x1, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x80}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @alu={0x0, 0x1, 0x1, 0x8, 0x3, 0x1}, @generic={0x80, 0x6, 0x7, 0x3, 0x2}, @map_fd={0x18, 0x2, 0x1, 0x0, r4}]}, &(0x7f00000002c0)='GPL\x00', 0x3, 0x41, &(0x7f0000000300)=""/65, 0x40f00, 0x3a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0x0, 0x2ffd, 0x5}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000400)=[{0x4, 0x5, 0x5, 0x9}, {0x3, 0x5, 0xb, 0x5}, {0x1, 0x5, 0x2, 0x2}, {0x1, 0x3, 0xe, 0x9}, {0x0, 0x1, 0x1, 0x8}, {0x3, 0x3, 0xb, 0xa}, {0x1, 0x4, 0x5, 0x9}, {0x0, 0x2, 0xf, 0x1}], 0x10, 0x8}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r6, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xd4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8019}, 0x24004081) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000680)={'lo\x00', {0x2, 0x0, @private}}) listen(r2, 0xe) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000780)={'sit0\x00', &(0x7f00000006c0)={'tunl0\x00', 0x0, 0x10, 0x10, 0x7, 0x8, {{0x23, 0x4, 0x2, 0x8, 0x8c, 0x1, 0x0, 0x5, 0x4, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010100, {[@timestamp_prespec={0x44, 0x2c, 0x1c, 0x3, 0x3, [{@broadcast, 0xfffffffd}, {@loopback, 0x6}, {@multicast1, 0x8001}, {@local, 0xe557}, {@empty, 0xff}]}, @lsrr={0x83, 0x23, 0x36, [@loopback, @local, @dev={0xac, 0x14, 0x14, 0x2c}, @private=0xa010100, @multicast2, @broadcast, @multicast1, @local]}, @noop, @generic={0x7, 0x10, "853c52ec1aae55d6b081696a23ce"}, @lsrr={0x83, 0x17, 0x2d, [@loopback, @multicast1, @broadcast, @dev={0xac, 0x14, 0x14, 0x14}, @rand_addr=0x64010102]}]}}}}}) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r9, 0x84, 0xc, &(0x7f00000007c0)=0x2, 0x4) listen(r2, 0x4) setsockopt$inet_group_source_req(r9, 0x0, 0x2c, &(0x7f0000000800)={0x3, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e22, @remote}}}, 0x108) sendmsg$inet(r2, &(0x7f0000000c00)={&(0x7f0000000940)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000980)="eda5a394b91f420ba326dd8f5b680d6f1ea9ec09225faae1675ab74c5ad50f299f0a2cbe598cee706e67d13068d3e9327b1a0822d03a11d3fa8307329401d73329a354ebe3f99c88209c1f6b349584df733e1ca96643aad9bc858660dadb0350c1e040bc1a51345f0cbccb8d37e9aef05997d051ff1b1dc8", 0x78}], 0x1, &(0x7f0000000a40)=[@ip_tos_int={{0x14}}, @ip_retopts={{0xd0, 0x0, 0x7, {[@noop, @rr={0x7, 0x13, 0xb7, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0xd}]}, @ssrr={0x89, 0x13, 0xe7, [@multicast1, @private=0xa010100, @local, @multicast2]}, @rr={0x7, 0x13, 0xad, [@local, @private=0xa010102, @local, @local]}, @cipso={0x86, 0x10, 0x2, [{0x7, 0x3, 'k'}, {0x7, 0x7, "62cdbaa92d"}]}, @timestamp={0x44, 0x18, 0x17, 0x0, 0x2, [0x1170, 0x10001, 0x2, 0x1, 0x7]}, @timestamp_prespec={0x44, 0x34, 0x21, 0x3, 0x7, [{@empty, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@multicast1, 0x3}, {@dev={0xac, 0x14, 0x14, 0x26}, 0xd}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0xf4e8}, {@broadcast, 0x600}]}, @end, @timestamp_prespec={0x44, 0xc, 0x5a, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @timestamp_prespec={0x44, 0x1c, 0x25, 0x3, 0x4, [{@local}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x401}, {@private=0xa010101, 0xfffffffc}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @local, @private=0xa010100}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xf}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @loopback, @rand_addr=0x64010100}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x2d}, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x190}, 0x4000004) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r5) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000cc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000001ac0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001a80)={&(0x7f0000000d00)={0xd44, r10, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x3ff, 0x2e}}}}, [@NL80211_ATTR_FRAME={0x194, 0x33, @mgmt_frame=@auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @broadcast, @initial, {0x4, 0x7}, @value=@ver_80211n={0x0, 0x53, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}}, 0x1, 0x4, 0x20, @val={0x10, 0x1, 0xec}, [{0xdd, 0x83, "e825f02636c3453257102457c528bd9e139b6e19a9442af758f8091c0adf769a22fc03d45b34d07945c85cbfc36048743bad71bf29f1f83de91e47ec9193c83080289172e94974d8fdd84475283f76326514c6e0e6322dfc1f4362106a5d7b82ffb1d306474750da345dcf5d0d4c96c8da55ae7980ec537ea372916b9767f422a3c515"}, {0xdd, 0xe4, "f58c412fce6ea532841908160c5a8415b8bd19bbb88101f5b55d6212eb3333d2c7f9fc4df7c90700f50e9de836f54239badd29d5069484e623375d280c15b73ded8b57f77487c87a652589f1983deddaac61c14f55704aa4950b9361a252bed76179f37243ca28d4a2bb342ede30336a179ffb928389d4424ce7219af550050c88d357ff47887cd083f5e777846c1d47ef79f97a80028080a0bb63a2567e67321f09899fa77aadf106d1418d64f6207d201a2b13f99049cdfcc2fa453f2f62112d9cbb3f5d00e187fba9c1b11557332ddd3be3d47e3a351441616df78d8f7a7e273770eb"}]}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x3cd, 0x33, @mgmt_frame=@reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x7fc0}, @broadcast, @device_a, @from_mac, {0x2, 0x1}, @value=@ver_80211n={0x0, 0x6, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}}, 0x240, 0x62, @random=0x8f, @void, @void, [{0xdd, 0x8a, "05267d31267e4ec79a6a75576896601bb55f93d64541d3afd6b0ca4ea21b3bda17c548e33cca9ec3fb2ebbacb3ec826811004a89a00c2227bbd762bbd0e5b17d0248376b206b137d0cc789f241f36cae6c9f1d3c3084bf700a9f756176df1710b7ae0691ba3a7800465b84edbeb7f000f3d8a34d5f9030a8c45d8e07c4fd1dac4de0c97e2f1789d08fa3"}, {0xdd, 0xf9, "fdc0459dcbbb4156b165c6ffe0e3cfb2d84b1a7860354c072c4362f3b254fcdc1136d4a5767f2f79073606d7a9cae94720e51ea78226740619ab45ed0dc22497254492176884fea85d50d184d15c2727d450b8bb66a19c031d14ebb5d682b70496b377d66eaf3a8d7c882e8885dfbc2173c19c695df983072fbf3f93cafaf63d6ae2a08783c9efc39216b6bbbc0d3a6cc2c22a1141a1c3a4b4e60633f0b9e15bfca05192d5de039cbdcb93785890ce98e720542f0afc98806913221cc9754bf2c627ea38df720d72b4effaa04424b1fe57aaa99bf8f715b0b74c39d6302866f9b4ccf2bc196f56e72a841c9551efe58f1175c7616ccc16912a"}, {0xdd, 0x58, "8091bde6f53187c3eddc5c01b8ebcc1c77c4c169ba03ccce7122ba89de2e354af4c85b541ef59309f25ab0cc0aacc403ae16f7525a7869f3ae001fd7f4b5270da9eb584e3e41633fc1ad3a6d96637942b0070763c68856c0"}, {0xdd, 0x97, "5ba83fd7cc2e930e3c7e087d95f74a751a3e53282c16437a449411329f0ede9a65b4de97d775ca2b460b4aca7c1407536becd458c60aef6112de8a0d3b68e43aae004eb792b9526fa1db0950cdd50149b04ff38a23d62f6faea0a511e089004a216dcace7383a5fe47edffa3195541ce4a73661542be5866ada6fb2d11b511998bc07c8a64169b8d485f735f092fce3d56846722eaa07e"}, {0xdd, 0x93, "8fe3b805fcac2085ee7f4a51fea3d1117986c8acf66c23b35174ddad3c62a2977233d0fb59fdc71435f793a66906b4d6686f6cebad533e484f39d4bf563f3a6c2fad41108314ea440bf220879cd4af425a6c4297fc60af089d7a859bb0af566bea8f44083fdd51f766f21c69247004230c26217bf57a75c16e3eb8affe46e6889880ddcb4352a25da146db8113208b7b68b6a8"}, {0xdd, 0x14, "a29bbbb541a25e124c2c29f14ca3890d6c1732c2"}, {0xdd, 0x12, "86875670a176bf668c98fed2d389eee17a44"}, {0xdd, 0x6c, "b66e710466c43ba960a58d330561187c7f8fc38ec7a99c5353533fc7710989680012d849fe09b2fadf3db596d1904782b0daa5d42ba17737477250084f0b8984a1aaf273f13c8a9a13a382d9c7228722b99608986aeb1966d7db1f968af166a890c44477d636d66e3d52f92e"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x9}, @broadcast}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x75a, 0x33, @data_frame={@a_msdu=@type11={{0x0, 0x2, 0x7, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x8}, @device_b, @device_a, @random="7e59a3f6b933", {0xf, 0x7}, @broadcast, @void, @value=@ver_80211n={0x0, 0x0, 0x1, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}, @random="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"}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xd44}, 0x1, 0x0, 0x0, 0x800}, 0x0) r12 = socket$netlink(0x10, 0x3, 0xf) listen(r9, 0x80) sendmsg$IPSET_CMD_LIST(r12, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x20, 0x7, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40091}, 0x20000000) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) read(r13, &(0x7f0000001c00)=""/2, 0x2) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000001c40)={0x0, 0x2d1e}, &(0x7f0000001c80)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r9, 0x84, 0x6d, &(0x7f0000001cc0)={r14, 0x1000, "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"}, &(0x7f0000002d00)=0x1008) 36.932149912s ago: executing program 38 (id=3148): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007c80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000007cc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f0000007dc0)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f0000000580)={0x60, r3, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "0fe4a3c6a6f185f3f48f262c02bc2310"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x6}, @NL80211_ATTR_PMK={0x14, 0xfe, "d551c68dad84c9740a87e3cf1701f742"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r5, 0x0, 0xf}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 36.568585029s ago: executing program 5 (id=3276): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r3 = openat$cgroup_devices(r2, &(0x7f0000000280)='devices.deny\x00', 0x2, 0x0) socket$caif_stream(0x25, 0x1, 0x1) write$cgroup_devices(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB='c r'], 0x9) (async) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 21.366576025s ago: executing program 39 (id=3276): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff1400000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0000000085000000b5000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r3 = openat$cgroup_devices(r2, &(0x7f0000000280)='devices.deny\x00', 0x2, 0x0) socket$caif_stream(0x25, 0x1, 0x1) write$cgroup_devices(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB='c r'], 0x9) (async) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 11.984750888s ago: executing program 9 (id=3366): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a1c000000000a010200000000000000000100ffff08000240000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073017a320000000014000000060a0104000000000000000001"], 0x84}}, 0x0) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x29, 0x0, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00008088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x4004000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) (async) r3 = socket$caif_seqpacket(0x25, 0x5, 0x0) sendmsg$inet(r3, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x40) (async) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$rds(r4, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0xfffffe09}], 0x1}, 0x0) (async, rerun: 64) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, r2}, 0x94) (rerun: 64) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="280300002d00090027bd700000000000040000001303d8", @ANYRES8=r5, @ANYRESHEX=r4, @ANYRES64=r0, @ANYRES32=r0, @ANYRES16=r0], 0x328}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000880) 9.08713036s ago: executing program 9 (id=3374): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x2, 0x20000033) socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002000)={0x28, r3, 0x421, 0x4, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x80}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xb}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet(0x2, 0x2, 0x20000033) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002000)={0x28, r3, 0x421, 0x4, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x80}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xb}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) 8.617176684s ago: executing program 9 (id=3375): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r1, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000040)=0x10000, 0x4) unshare(0x6a040000) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000040)={0x2b, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x0, 'dh\x00', 0x3, 0x4, 0x64}, 0x2c) r3 = socket(0x8, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x618e, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=r4, @ANYBLOB="00bf4300000000001c0012000000010065727370616e0000e30002"], 0x3c}}, 0x0) 3.192610583s ago: executing program 4 (id=3389): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r2, 0x0) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, &(0x7f0000000440)={0x4, 0x0, 0xa, 0xb, 0x20000}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000900)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4c, 0x2, [@TCA_U32_SEL={0x34, 0x5, {0x0, 0x74, 0x2, 0x2, 0x406, 0xfff, 0x4, 0x4, [{0x0, 0x4, 0x8000, 0x7}, {0x2334000, 0x2, 0x8, 0x200}]}}, @TCA_U32_INDEV={0x14, 0x8, 'pim6reg1\x00'}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117500000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) ioctl$sock_proto_private(r5, 0x89ed, &(0x7f00000001c0)="bbf7bbb52166e4c135e56ab1b76fc092f3011af99d76f5f8e6bd4686d31d35964802c3e81c37b1f58950edfd5f73c471a1e2cd3d0324a6696b8cba") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.828051237s ago: executing program 1 (id=3390): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0x3, &(0x7f0000000840)=0x6, 0x4) sendto$inet(r1, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="560a00000000000079111800000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 2.475673289s ago: executing program 1 (id=3391): pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) r4 = syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r4, 0x200, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x101) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x40000}, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x6, 0x2, {0x3ff}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) socket(0x400000000010, 0x3, 0x0) pipe(&(0x7f0000000480)) (async) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) close(r1) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00'}) (async) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r4, 0x200, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x101) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x6, 0x2, {0x3ff}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) (async) socket(0x400000000010, 0x3, 0x0) (async) 1.864787346s ago: executing program 4 (id=3392): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002500)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="c000b2000a0002000000000000000000060005002e5f"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40800) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 1.732135623s ago: executing program 9 (id=3393): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000003480)=[{{&(0x7f0000000640)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=[@flowinfo={{0x14, 0x29, 0xb, 0x1}}, @flowinfo={{0x14}}], 0x30}}], 0x1, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x20) 1.601716348s ago: executing program 1 (id=3394): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='c 122', @ANYRESHEX], 0xa) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x35}, @ETHTOOL_A_CHANNELS_HEADER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40810}, 0x800) 1.48825703s ago: executing program 4 (id=3395): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000240)=[0x0], 0x0, 0x82, &(0x7f0000000280)=[{}, {}], 0x10, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xa6, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0xffffffffffffffde, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000320100f1"], 0x138) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0xe, &(0x7f0000000440)=0x100, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210106, @local, {[@ssrr={0x89, 0xf, 0xe9, [@multicast2, @remote, @multicast2]}, @generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20, 0x8000}}}}}}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x30, 0x2b, 0x107, 0xfffffffe, 0x0, {0x3, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @ipv4=@broadcast}]}, @nested={0x10, 0x2, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @binary="2a0aa32f9d5c778d"}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 1.388761797s ago: executing program 9 (id=3396): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="a80000002000040025bd7000fcdbdf250a2000050f00000208000100140002002001000000000000000000000000000114000100fe8000000000000000000000000000bb14000200000000000000000000000000000000000000000000bb14000200fe88000000000000000000000000000114000200fc0100000000000000000000000000001400020000000000000000000000ffffac1e0101"], 0xa8}}, 0x40001) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) unshare(0x6020400) r2 = gettid() syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/uts\x00') unshare(0x2c060000) close(0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x9}, @IFLA_BOND_ARP_IP_TARGET={0x4}]}}}]}, 0x40}}, 0x8004) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3e}}}}, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000140)=@assoc_value, &(0x7f00000001c0)=0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@func_proto={0x2, 0x0, 0x0, 0x13, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, 0x0, 0x2a}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newtfilter={0x60, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r1, {0xb, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x30, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x2c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xfffffff8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x81}]}]}]}}]}, 0x60}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x3) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r5, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, r6, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x100}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x24004881) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.298198332s ago: executing program 2 (id=3274): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000880)=0x9, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4623, 0xfffffffd, @local, 0x6}, 0x1c) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) ioctl$TUNGETDEVNETNS(r1, 0x5460, 0x20000000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmmsg$inet6(r0, &(0x7f00000055c0)=[{{&(0x7f0000001640)={0xa, 0x4e20, 0xfffffc01, @remote, 0xe}, 0x1c, &(0x7f00000000c0)}}], 0x1, 0x8000) sendmmsg$inet6(r0, &(0x7f0000002880)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000900)="976d7a07eb881aba56b60f810adac018553d53d9dfa60311058829866dd152e6b593119b15d99bdb7c301b7594910da06d9e96d5d0c100468663309005c40549778cbf0310b43be9856f8e9cdc84a09ec970dde8a45721cc090c502fcbd7dcacab0d88e1b8bcd2296793e7f43e4e9d07efb25a81f7cb17641f7e3c6cfe3d47cbf215863caca660ee51f0a3630629ef615dfdf1f9c9025919ccc7d9537b34843964e1b6491ff832da53012e22bb4fb7fbfec048753ebf", 0xb6}], 0x1}}], 0x1, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f00000000c0)={0x1d, r2}, 0x10) 1.140698918s ago: executing program 1 (id=3397): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0xf6, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f"]}]}, 0x114}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) 932.408234ms ago: executing program 4 (id=3398): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x30, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x15, 0x3, "0ebfd61996044fb4249989f65f4e7f3ee7"}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xa4, r2, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffe7}]}, @TIPC_NLA_MEDIA={0x78, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff7fff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40010}, 0x20044089) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 640.238293ms ago: executing program 2 (id=3399): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) r1 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000015000504e1ff4319918e00352d4e496b"], 0x2c}}, 0x60040050) r2 = accept4(r0, &(0x7f00000000c0), &(0x7f0000000140)=0x80, 0x40800) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0xa, 0x6, 0xd, 0x2, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1, 0x20, 0x2, 0x9}}) 592.679553ms ago: executing program 1 (id=3400): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) r3 = socket(0x2, 0x80805, 0x0) r4 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="e1bb659181ee0aba0e4d13d1c0ce105b7b137b0e29b316944819f5077a02b741f76cfeb51da4f3e152a38098d602719b548a0bb981efcfc00ea527f6b8b7c82a9e5345a08bc9db7c0168479ae3386ecf8c5921cb9bb3cafc30b3285f3fb1eb72998253ce5e1fdc6dd442fa352cdfed4f4f9f73ff926af60c2422c17884186dec40503115471a20184641615584d354117155c5ee0fbae0772fd819a201b7b609a376b87a0b8e82dc10194ea9fb9bf9b24099913a956ffb7115ed287af77c9f0ea21d4f83cab0548d86f68bd60eaee3ee8fb2d3185b8dc2cbc0cf526c144e6daaab2b3b58", 0xe4}, {&(0x7f00000000c0)="8f2ea5db2230b52372e18871e76a4920c03d51954709f8074dcfe6f71c2bda005b18fba582b5ebec53f02eafa8fc7cdec705dcd48a20dbbdc91f", 0x3a}, {&(0x7f00000002c0)="25f96104ede57c7a1e4ae047219038684041f92d7a2403ceb58e170e57651dd11c76e282093000833651bcb2e5c0935bdb760164ee9f6a6561340b0e9a4889cfa8155599937f8cfa54cee3f18a23869331dc5ed0ea942069ae5744656c4b6d976bd297f88a5fe0f8d59362cc6c305eda83af7fd4e7cc1d07", 0x78}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x74e457ac3ceaf804}, @assoc={0x18, 0x117, 0x4, 0xfffffe01}, @assoc={0x18, 0x117, 0x4, 0x7}], 0x60, 0x40004}], 0x1, 0x400c8c0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0xfffff039, @empty, 0x2}]}, &(0x7f0000000180)=0x10) getsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000040), 0x2) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x828}, 0x0) 451.72203ms ago: executing program 4 (id=3401): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xc}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3f, 0x70bd27, 0x1, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5c, 0x8001, 0x3, 0x5, 0xfffffff8}, @multicast1, @multicast1, 0xffffff00, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x6c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 233.054845ms ago: executing program 2 (id=3402): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1a, 0xe, &(0x7f00000003c0)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018010000202070250000000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000080)='./file0\x00'}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x50) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000076000104000000000002000000000000", @ANYRES32=0x0, @ANYBLOB="080001"], 0x20}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0xffff0000, 0xe, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) 180.820377ms ago: executing program 1 (id=3403): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x9, &(0x7f0000000040)=0xe53, 0x4) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000002900030400"/20, @ANYRES32=0x0, @ANYBLOB="f7e8010000000000180012800e0001007769726567756172640000000400028008000500", @ANYRES32=0x0, @ANYBLOB], 0x40}}, 0x0) 81.368155ms ago: executing program 9 (id=3404): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x14, &(0x7f0000000040), 0x50) listen(r0, 0x0) (async) listen(r0, 0x0) accept$inet6(r0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af36507001ac00400020208000b000300012422000c00eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af36507001ac00400020208000b000300012422000c00eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 0s ago: executing program 4 (id=3405): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x52, 0x3ab3666c4349b199, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendto(r4, 0x0, 0x0, 0x0, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0xfffd, 0x2}}, 0x80) kernel console output (not intermixed with test programs): 960][T14043] syz_tun: entered promiscuous mode [ 280.451036][T11129] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 280.460646][T11129] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 280.469331][T11129] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 280.478789][T11129] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 280.487827][T11129] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 280.737141][ T5852] Bluetooth: hci1: command 0x0406 tx timeout [ 280.791253][T14044] chnl_net:caif_netlink_parms(): no params data found [ 280.889256][T10184] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 281.232165][T14072] __nla_validate_parse: 7 callbacks suppressed [ 281.232189][T14072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2322'. [ 281.284302][T14073] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2322'. [ 281.312729][T14044] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.321411][T14044] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.331646][T14044] bridge_slave_0: entered allmulticast mode [ 281.339846][T14044] bridge_slave_0: entered promiscuous mode [ 281.389917][T14044] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.402201][T14044] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.411311][T14044] bridge_slave_1: entered allmulticast mode [ 281.424253][T14044] bridge_slave_1: entered promiscuous mode [ 281.551022][T14044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.571884][T14044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.645680][T14044] team0: Port device team_slave_0 added [ 281.656387][T14044] team0: Port device team_slave_1 added [ 281.663308][T14081] x_tables: duplicate underflow at hook 1 [ 281.886997][T14044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.894017][T14044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.939406][T14044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.965664][T14044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.975873][T14044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.002382][T14044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.026203][T14093] netlink: 'syz.3.2328': attribute type 3 has an invalid length. [ 282.067392][T14095] netlink: 'syz.4.2329': attribute type 5 has an invalid length. [ 282.112378][T14044] hsr_slave_0: entered promiscuous mode [ 282.120192][T14044] hsr_slave_1: entered promiscuous mode [ 282.128029][T14044] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.135641][T14044] Cannot create hsr debugfs directory [ 282.311902][T14105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2332'. [ 282.406664][T14109] netlink: zone id is out of range [ 282.418653][T14109] netlink: zone id is out of range [ 282.424088][T14109] netlink: zone id is out of range [ 282.433221][T14109] netlink: zone id is out of range [ 282.441619][T14109] netlink: zone id is out of range [ 282.450299][T14109] netlink: zone id is out of range [ 282.455657][T14109] netlink: zone id is out of range [ 282.463497][T14109] netlink: zone id is out of range [ 282.504660][T14044] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 282.516546][T14044] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 282.550254][T14044] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 282.566313][T14044] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 282.577923][ T5852] Bluetooth: hci5: command tx timeout [ 282.742924][T14044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.794474][T14044] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.804423][T14121] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2336'. [ 282.823034][T14126] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2336'. [ 282.850349][T14123] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.882205][T10184] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.889457][T10184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.913348][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.920559][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.970279][T14123] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.029885][T14123] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.096102][T14044] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 283.136766][T14123] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.216080][ T9] IPVS: starting estimator thread 0... [ 283.307397][T14134] IPVS: using max 27 ests per chain, 64800 per kthread [ 283.324946][T14123] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.360274][T14123] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.445199][T14123] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.479359][T14123] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.541676][T14044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.072257][T14168] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2349'. [ 284.110109][T14044] veth0_vlan: entered promiscuous mode [ 284.153410][T14044] veth1_vlan: entered promiscuous mode [ 284.242301][T14044] veth0_macvtap: entered promiscuous mode [ 284.272836][T14044] veth1_macvtap: entered promiscuous mode [ 284.316301][T14044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.346447][T14044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.358895][T14044] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.387072][T14044] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.395855][T14044] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.436944][T14044] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.633338][T10184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.649645][ T5852] Bluetooth: hci5: command tx timeout [ 284.666018][T10184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.689639][T11129] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 284.700076][T11129] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 284.710556][T11129] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 284.721166][T11129] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 284.731926][T11129] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 284.792460][T10184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.819322][T10184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.420599][T14206] netlink: 'syz.3.2356': attribute type 1 has an invalid length. [ 285.426551][T14209] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2357'. [ 285.438278][T14206] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2356'. [ 285.445952][T14208] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2355'. [ 285.455928][T14181] chnl_net:caif_netlink_parms(): no params data found [ 285.484162][T14208] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2355'. [ 285.534225][T14208] team_slave_0: entered promiscuous mode [ 285.540368][T14208] team_slave_1: entered promiscuous mode [ 285.585909][T14206] netlink: 'syz.3.2356': attribute type 4 has an invalid length. [ 285.745185][T14181] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.763145][T14181] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.778931][T14181] bridge_slave_0: entered allmulticast mode [ 285.787972][T14181] bridge_slave_0: entered promiscuous mode [ 285.798024][T14181] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.806158][T14181] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.814000][T14181] bridge_slave_1: entered allmulticast mode [ 285.822600][T14181] bridge_slave_1: entered promiscuous mode [ 285.963824][T14181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.029509][T14181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.178421][T14181] team0: Port device team_slave_0 added [ 286.243402][T14181] team0: Port device team_slave_1 added [ 286.263173][T14245] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2367'. [ 286.274637][T14245] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2367'. [ 286.359972][T14252] netlink: 'syz.5.2368': attribute type 12 has an invalid length. [ 286.369890][T14252] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2368'. [ 286.391780][T14181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.403813][T14181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.439911][T14181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.482313][T14181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.493538][T14181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.521645][T14181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.616068][T14255] syzkaller1: entered promiscuous mode [ 286.622030][T14255] syzkaller1: entered allmulticast mode [ 286.639866][T14181] hsr_slave_0: entered promiscuous mode [ 286.648712][T14181] hsr_slave_1: entered promiscuous mode [ 286.655074][T14181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 286.663124][T14181] Cannot create hsr debugfs directory [ 286.731782][ T5852] Bluetooth: hci5: command tx timeout [ 286.817417][ T5852] Bluetooth: hci6: command tx timeout [ 286.904500][T14181] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 286.914735][T14181] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 286.925004][T14181] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 286.938466][T14181] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 287.031643][T14181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.062406][T14181] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.074640][T10181] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.081806][T10181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.098118][ T3558] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.105245][ T3558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.240801][T14269] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2372'. [ 287.496090][T14181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.513778][T14283] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2374'. [ 287.547187][T14283] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2374'. [ 287.714402][T14295] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2376'. [ 287.744548][T14295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2376'. [ 288.003763][T14306] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2378'. [ 288.015414][T14305] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2377'. [ 288.513702][T14181] veth0_vlan: entered promiscuous mode [ 288.535131][T14328] netlink: 'syz.5.2381': attribute type 11 has an invalid length. [ 288.550047][T14181] veth1_vlan: entered promiscuous mode [ 288.653731][T14181] veth0_macvtap: entered promiscuous mode [ 288.748472][T14181] veth1_macvtap: entered promiscuous mode [ 288.799748][T14181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.807308][ T5852] Bluetooth: hci5: command tx timeout [ 288.836175][T14181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.859140][T14181] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.875812][T14181] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.890110][ T5852] Bluetooth: hci6: command tx timeout [ 288.895906][T14181] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.910295][T14181] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.964951][T14347] netlink: 'syz.4.2387': attribute type 10 has an invalid length. [ 289.009713][ T996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.028193][ T996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.070195][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.085540][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.931310][T14388] sctp: [Deprecated]: syz.4.2400 (pid 14388) Use of int in maxseg socket option. [ 289.931310][T14388] Use struct sctp_assoc_value instead [ 289.955485][T14388] x_tables: duplicate underflow at hook 3 [ 290.294032][T14403] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.303914][T14403] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.314454][T14403] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.324538][T14403] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.909013][T14415] netem: invalid attributes len -24 [ 290.920853][T14415] netem: change failed [ 290.977151][ T5852] Bluetooth: hci6: command tx timeout [ 291.350678][ T30] audit: type=1107 audit(1752619649.331:3): pid=14437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ùâ"&¬ƒ*{Þý"ÄšùQáEuM¡0‘Ot²¶Ù,F?&äŒå5«´ÊQãcœظ˜Döê3„„wšþpo`z¸Böý fóÖåð¨ó@ó*Ù-Ò>Mcâ³Pì¶Ø^#ÒÆkG›'=‚r [ 291.535718][T14451] dump_stack_lvl+0x189/0x250 [ 291.535751][T14451] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.535776][T14451] ? __pfx__printk+0x10/0x10 [ 291.535803][T14451] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 291.535831][T14451] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 291.535859][T14451] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 291.535893][T14451] warn_alloc+0x214/0x310 [ 291.535928][T14451] ? __pfx_warn_alloc+0x10/0x10 [ 291.535965][T14451] ? __get_vm_area_node+0x28f/0x300 [ 291.535991][T14451] ? packet_set_ring+0x6f4/0x2380 [ 291.536022][T14451] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 291.536080][T14451] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 291.536127][T14451] ? alloc_pages_mpol+0x3cd/0x4a0 [ 291.536157][T14451] ? packet_set_ring+0x6f4/0x2380 [ 291.536217][T14451] vzalloc_noprof+0xb2/0xf0 [ 291.536246][T14451] ? packet_set_ring+0x6f4/0x2380 [ 291.536278][T14451] packet_set_ring+0x6f4/0x2380 [ 291.536334][T14451] ? __pfx_packet_set_ring+0x10/0x10 [ 291.536400][T14451] ? _copy_from_user+0x94/0xb0 [ 291.536431][T14451] packet_setsockopt+0xc5a/0x12c0 [ 291.536465][T14451] ? __pfx_packet_setsockopt+0x10/0x10 [ 291.536492][T14451] ? futex_wait+0x285/0x360 [ 291.536515][T14451] ? __pfx_futex_wait+0x10/0x10 [ 291.536543][T14451] ? aa_sk_perm+0x81e/0x950 [ 291.536578][T14451] ? __pfx_aa_sk_perm+0x10/0x10 [ 291.536605][T14451] ? __lock_acquire+0xab9/0xd20 [ 291.536633][T14451] ? aa_sock_opt_perm+0x74/0x110 [ 291.536667][T14451] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 291.536699][T14451] ? __pfx_packet_setsockopt+0x10/0x10 [ 291.536729][T14451] do_sock_setsockopt+0x25a/0x3e0 [ 291.536759][T14451] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 291.536795][T14451] ? __fget_files+0x2a/0x420 [ 291.536834][T14451] __x64_sys_setsockopt+0x18b/0x220 [ 291.536867][T14451] do_syscall_64+0xfa/0x3b0 [ 291.536889][T14451] ? lockdep_hardirqs_on+0x9c/0x150 [ 291.536922][T14451] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.536943][T14451] ? clear_bhb_loop+0x60/0xb0 [ 291.536969][T14451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.536989][T14451] RIP: 0033:0x7f01f458e929 [ 291.537009][T14451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.537027][T14451] RSP: 002b:00007f01f54a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 291.537050][T14451] RAX: ffffffffffffffda RBX: 00007f01f47b6080 RCX: 00007f01f458e929 [ 291.537066][T14451] RDX: 000000000000000d RSI: 0000000000000107 RDI: 000000000000000a [ 291.537080][T14451] RBP: 00007f01f4610b39 R08: 000000000000001c R09: 0000000000000000 [ 291.537093][T14451] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 291.537107][T14451] R13: 0000000000000000 R14: 00007f01f47b6080 R15: 00007ffd8083c598 [ 291.537141][T14451] [ 291.854130][T14451] Mem-Info: [ 291.856051][T14455] __nla_validate_parse: 11 callbacks suppressed [ 291.856090][T14455] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2416'. [ 291.863064][T14451] active_anon:4258 inactive_anon:0 isolated_anon:0 [ 291.863064][T14451] active_file:1458 inactive_file:39908 isolated_file:0 [ 291.863064][T14451] unevictable:768 dirty:56 writeback:0 [ 291.863064][T14451] slab_reclaimable:11490 slab_unreclaimable:139393 [ 291.863064][T14451] mapped:40199 shmem:1415 pagetables:1020 [ 291.863064][T14451] sec_pagetables:0 bounce:0 [ 291.863064][T14451] kernel_misc_reclaimable:0 [ 291.863064][T14451] free:1263192 free_pcp:16032 free_cma:0 [ 291.868937][ C0] Unknown status report in ack skb [ 291.873503][T14451] Node 0 active_anon:17032kB inactive_anon:0kB active_file:5832kB inactive_file:159428kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:160796kB dirty:224kB writeback:0kB shmem:4124kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12880kB pagetables:3904kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 291.920738][T14458] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2416'. [ 291.923643][T14451] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 291.999591][T14451] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 292.029281][T14451] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 292.035132][T14451] Node 0 DMA32 free:1139296kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16984kB inactive_anon:0kB active_file:5832kB inactive_file:157856kB unevictable:1536kB writepending:220kB present:3129332kB managed:2558392kB mlocked:0kB bounce:0kB free_pcp:45528kB local_pcp:14656kB free_cma:0kB [ 292.068127][T14451] lowmem_reserve[]: 0 0 1 1 1 [ 292.072922][T14451] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 292.102610][T14451] lowmem_reserve[]: 0 0 0 0 0 [ 292.107548][T14451] Node 1 Normal free:3898100kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:19140kB local_pcp:10688kB free_cma:0kB [ 292.139053][T14451] lowmem_reserve[]: 0 0 0 0 0 [ 292.143878][T14451] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 292.157438][T14451] Node 0 DMA32: 2*4kB (UM) 1*8kB (U) 205*16kB (ME) 82*32kB (ME) 11*64kB (UM) 29*128kB (ME) 22*256kB (M) 12*512kB (ME) 7*1024kB (M) 2*2048kB (UM) 270*4096kB (UM) = 1139296kB [ 292.175832][T14451] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 292.188459][T14451] Node 1 Normal: 175*4kB (U) 47*8kB (UME) 34*16kB (UME) 95*32kB (UME) 25*64kB (UME) 7*128kB (UME) 5*256kB (UME) 3*512kB (ME) 3*1024kB (UME) 1*2048kB (E) 948*4096kB (M) = 3898100kB [ 292.206618][T14451] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 292.216359][T14451] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 292.236171][T14451] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 292.267657][T14451] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 292.283623][T14462] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2418'. [ 292.332569][T14451] 42778 total pagecache pages [ 292.353512][T14451] 0 pages in swap cache [ 292.363450][T14451] Free swap = 124996kB [ 292.377799][T14451] Total swap = 124996kB [ 292.382943][T14451] 2097051 pages RAM [ 292.389075][T14451] 0 pages HighMem/MovableOnly [ 292.393840][T14451] 425411 pages reserved [ 292.398261][T14451] 0 pages cma reserved [ 293.047013][ T5852] Bluetooth: hci6: command tx timeout [ 293.056242][T14506] delete_channel: no stack [ 293.249782][T14517] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2436'. [ 293.270748][T14517] gtp0: entered promiscuous mode [ 293.275899][T14517] gtp0: entered allmulticast mode [ 293.501429][T14529] netlink: 'syz.5.2439': attribute type 28 has an invalid length. [ 293.513060][T14531] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2440'. [ 293.520331][T14529] netlink: 'syz.5.2439': attribute type 3 has an invalid length. [ 293.542439][T14531] net_ratelimit: 18 callbacks suppressed [ 293.542457][T14531] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 293.546879][T14529] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2439'. [ 293.552465][T14531] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.679113][T14539] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:20002 [ 293.688523][T14539] Unsupported ieee802154 address type: 0 [ 294.161915][T14553] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2447'. [ 294.188410][T14556] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2448'. [ 294.354255][T14556] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2448'. [ 294.457621][T11129] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 294.467048][T11129] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 294.474901][T11129] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 294.490697][T11129] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 294.499458][T11129] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 294.925184][T14566] chnl_net:caif_netlink_parms(): no params data found [ 295.076148][T14587] netlink: 216 bytes leftover after parsing attributes in process `syz.5.2454'. [ 295.166715][T14566] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.193447][T14566] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.220341][T14566] bridge_slave_0: entered allmulticast mode [ 295.242292][T14566] bridge_slave_0: entered promiscuous mode [ 295.272092][T14566] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.283325][T14566] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.294287][T14566] bridge_slave_1: entered allmulticast mode [ 295.307791][T14566] bridge_slave_1: entered promiscuous mode [ 295.434115][T14566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.481197][T14566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.505745][T14597] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 295.521743][T14598] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.568384][T14566] team0: Port device team_slave_0 added [ 295.592258][T14566] team0: Port device team_slave_1 added [ 295.682487][T14566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.690153][T14566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.718105][T14566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.750895][T14566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.764199][T14566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.817048][T14566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.960067][T14604] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 295.986889][T14596] infiniband syz2: set down [ 295.998353][T14566] hsr_slave_0: entered promiscuous mode [ 296.004072][T14596] infiniband syz2: added bond_slave_0 [ 296.013912][T14566] hsr_slave_1: entered promiscuous mode [ 296.021336][T14596] syz2: rxe_create_cq: returned err = -12 [ 296.029440][T14566] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 296.038457][T14596] infiniband syz2: Couldn't create ib_mad CQ [ 296.046719][T14596] infiniband syz2: Couldn't open port 1 [ 296.052430][T14566] Cannot create hsr debugfs directory [ 296.103874][T14596] RDS/IB: syz2: added [ 296.128912][T14596] smc: adding ib device syz2 with port count 1 [ 296.135342][T14596] smc: ib device syz2 port 1 has pnetid [ 296.577529][ T5852] Bluetooth: hci7: command tx timeout [ 296.636043][T14566] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 296.673815][T14566] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 296.708904][T14566] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 296.754551][T14566] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 296.944230][T14638] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2471'. [ 296.964933][T14638] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2471'. [ 296.982383][T14640] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2472'. [ 296.994825][T14640] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2472'. [ 296.997015][T14638] netlink: 'syz.6.2471': attribute type 7 has an invalid length. [ 297.014763][T14640] netlink: 'syz.5.2472': attribute type 11 has an invalid length. [ 297.035744][T14566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.150138][T14566] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.174130][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.181375][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.263016][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.270411][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.578037][T14650] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2476'. [ 297.590613][T14653] vxcan1: tx address claim with dest, not broadcast [ 297.736614][T14659] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2476'. [ 297.882312][T14566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.541351][T14566] veth0_vlan: entered promiscuous mode [ 298.554499][T14566] veth1_vlan: entered promiscuous mode [ 298.625187][T14566] veth0_macvtap: entered promiscuous mode [ 298.637840][T14566] veth1_macvtap: entered promiscuous mode [ 298.647255][ T5852] Bluetooth: hci7: command tx timeout [ 298.678029][T14566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.702978][T14566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.738167][T14566] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.756619][T14566] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.770168][T14566] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.782268][T14566] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.919554][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.942342][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.993374][ T3558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.003046][T14687] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2486'. [ 299.012647][ T3558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.021174][T14687] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2486'. [ 299.516116][T14706] veth0: entered promiscuous mode [ 299.534561][T14706] veth0: left promiscuous mode [ 300.126566][T14721] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2496'. [ 300.143237][T14724] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2496'. [ 300.728189][ T5852] Bluetooth: hci7: command tx timeout [ 300.799044][T14754] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.283862][T14781] TCP: TCP_TX_DELAY enabled [ 301.344778][T14783] netlink: 'syz.6.2517': attribute type 5 has an invalid length. [ 301.715468][T14807] team0: Cannot enslave team device to itself [ 301.828720][T14815] netlink: 'syz.6.2528': attribute type 1 has an invalid length. [ 301.855731][T14819] netlink: 'syz.6.2528': attribute type 1 has an invalid length. [ 302.129650][T14835] __nla_validate_parse: 4 callbacks suppressed [ 302.129669][T14835] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2534'. [ 302.203675][T14841] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2535'. [ 302.304021][T14847] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2536'. [ 302.327929][T14847] xt_connbytes: Forcing CT accounting to be enabled [ 302.368102][T14847] syzkaller1: entered promiscuous mode [ 302.373651][T14847] syzkaller1: entered allmulticast mode [ 302.378779][T14849] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2538'. [ 302.402942][T14851] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 302.442108][T14852] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2539'. [ 302.472035][T14852] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2539'. [ 302.498289][T14852] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2539'. [ 302.527270][T14857] netlink: 'syz.5.2540': attribute type 24 has an invalid length. [ 302.551148][T14857] erspan1: entered allmulticast mode [ 302.600998][T14860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.669373][T14865] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 302.820739][ T5852] Bluetooth: hci7: command tx timeout [ 303.141370][T14878] netlink: 'syz.5.2547': attribute type 10 has an invalid length. [ 303.195101][T14878] syz_tun: entered promiscuous mode [ 303.226237][T14878] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 304.027394][T14899] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2553'. [ 304.075027][ C0] vcan0: j1939_session_tx_dat: 0xffff8880461de400: queue data error: -100 [ 304.281742][T11129] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 304.300495][T11129] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 304.311047][T11129] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 304.319412][T11129] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 304.328516][T11129] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 304.800599][T14921] netlink: 'syz.5.2561': attribute type 2 has an invalid length. [ 304.820054][T14921] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2561'. [ 304.940912][T14924] netlink: 'syz.5.2561': attribute type 29 has an invalid length. [ 304.996640][T14921] netlink: 'syz.5.2561': attribute type 29 has an invalid length. [ 305.017730][T14924] netlink: 500 bytes leftover after parsing attributes in process `syz.5.2561'. [ 305.154329][T14903] chnl_net:caif_netlink_parms(): no params data found [ 305.172708][T14928] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 305.180031][T14928] IPv6: NLM_F_CREATE should be set when creating new route [ 305.484848][T14943] netlink: 'syz.4.2567': attribute type 11 has an invalid length. [ 305.667299][T14951] netlink: 'syz.4.2570': attribute type 1 has an invalid length. [ 305.681882][T14903] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.691200][T14903] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.707980][T14903] bridge_slave_0: entered allmulticast mode [ 305.727171][T14903] bridge_slave_0: entered promiscuous mode [ 305.797629][T14951] 8021q: adding VLAN 0 to HW filter on device bond4 [ 305.816610][T14951] macvlan3: entered promiscuous mode [ 305.822187][T14951] macvlan3: entered allmulticast mode [ 305.829325][T14951] bond4: entered promiscuous mode [ 305.835802][T14951] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 305.845821][T14951] bond4: left promiscuous mode [ 305.893977][T14903] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.906318][T14903] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.936058][T14903] bridge_slave_1: entered allmulticast mode [ 305.967917][T14903] bridge_slave_1: entered promiscuous mode [ 306.219894][T14903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.294129][T14903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.418084][ T5852] Bluetooth: hci8: command tx timeout [ 306.469071][T14965] netlink: 'syz.4.2574': attribute type 4 has an invalid length. [ 306.490620][T14903] team0: Port device team_slave_0 added [ 306.501037][T14903] team0: Port device team_slave_1 added [ 306.577679][T14903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.584710][T14903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.637041][T14903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.661249][T14980] tipc: Enabling of bearer rejected, failed to enable media [ 306.702296][T14903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.724044][T14903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.779982][T14903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.950078][T14903] hsr_slave_0: entered promiscuous mode [ 306.956773][T14903] hsr_slave_1: entered promiscuous mode [ 306.966231][T14903] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.974136][T14903] Cannot create hsr debugfs directory [ 307.758692][T14903] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 307.803006][T14903] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 307.875397][T14903] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 307.900504][T14903] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 308.078346][T15014] __nla_validate_parse: 6 callbacks suppressed [ 308.078364][T15014] netlink: 23 bytes leftover after parsing attributes in process `syz.5.2585'. [ 308.353823][T14903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.402414][T14903] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.420942][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.428154][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.461761][ T7104] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.469132][ T7104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.487063][ T5852] Bluetooth: hci8: command tx timeout [ 308.584163][T15027] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2589'. [ 308.596732][T15027] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2589'. [ 308.803735][T15036] openvswitch: netlink: IP tunnel TTL not specified. [ 308.923665][T15040] veth0: entered promiscuous mode [ 309.030724][T14903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.041600][T15038] veth0: left promiscuous mode [ 309.528246][T15068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2600'. [ 309.555354][T15069] IPv4: Oversized IP packet from 127.202.26.0 [ 309.578276][T15067] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2600'. [ 309.753685][T14903] veth0_vlan: entered promiscuous mode [ 309.782566][T14903] veth1_vlan: entered promiscuous mode [ 309.834197][T14903] veth0_macvtap: entered promiscuous mode [ 309.846486][T14903] veth1_macvtap: entered promiscuous mode [ 309.890851][T14903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.910013][T14903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.921642][T14903] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.951945][T14903] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.961326][T14903] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.970243][T14903] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.113924][T15082] xt_CT: You must specify a L4 protocol and not use inversions on it [ 310.340947][T15092] netlink: 208 bytes leftover after parsing attributes in process `syz.4.2606'. [ 310.429129][T10181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.483608][T10181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.565480][T15101] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2609'. [ 310.575639][ T5852] Bluetooth: hci8: command tx timeout [ 310.576461][T10181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.626206][T10181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.642387][T15102] tipc: Started in network mode [ 310.657606][T15102] tipc: Node identity fe80000000000000000000000000002a, cluster identity 4711 [ 310.680164][T15102] tipc: Enabling of bearer rejected, failed to enable media [ 311.511429][T15143] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 311.553228][T15148] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2623'. [ 311.815804][T15165] bridge_slave_0: left allmulticast mode [ 311.837387][T15165] bridge_slave_0: left promiscuous mode [ 311.843335][T15165] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.917876][T10181] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 311.963614][T15165] bridge_slave_1: left allmulticast mode [ 311.979948][T15165] bridge_slave_1: left promiscuous mode [ 311.985826][T15165] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.054793][T15173] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2632'. [ 312.075811][T15165] bond0: (slave bond_slave_0): Releasing backup interface [ 312.109413][T15165] bond0: (slave bond_slave_1): Releasing backup interface [ 312.138800][T15165] team0: Port device team_slave_0 removed [ 312.152945][T15165] team0: Port device team_slave_1 removed [ 312.160944][T15165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.171085][T15165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.183959][T15165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.192029][T15165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.615769][T15190] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2636'. [ 312.651063][ T5852] Bluetooth: hci8: command tx timeout [ 313.281152][T15216] openvswitch: netlink: Key type 2832 is out of range max 32 [ 313.295654][T15220] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2645'. [ 313.488483][T15228] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.497611][T15228] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.506385][T15228] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.515731][T15228] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.896489][T15242] netlink: 'syz.8.2650': attribute type 8 has an invalid length. [ 313.969630][T15244] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2651'. [ 313.982536][T15245] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2651'. [ 314.041010][T15248] netlink: 80 bytes leftover after parsing attributes in process `syz.8.2652'. [ 314.237604][T15252] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 314.903962][T15272] gtp0: entered promiscuous mode [ 315.146705][T11129] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 315.157507][T11129] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 315.165772][T11129] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 315.174622][T11129] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 315.182833][T11129] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 315.288258][T15287] netlink: 'syz.6.2662': attribute type 1 has an invalid length. [ 315.297222][T15287] netlink: 'syz.6.2662': attribute type 10 has an invalid length. [ 315.305299][T15287] netlink: 'syz.6.2662': attribute type 4 has an invalid length. [ 315.313410][T15287] netlink: 136 bytes leftover after parsing attributes in process `syz.6.2662'. [ 315.516311][T15289] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 315.596410][T15295] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2665'. [ 315.752923][T15299] bond0: (slave syz_tun): Releasing backup interface [ 315.798813][T15299] bridge_slave_0: left allmulticast mode [ 315.804543][T15299] bridge_slave_0: left promiscuous mode [ 315.811714][T15299] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.834950][T15299] bridge_slave_1: left allmulticast mode [ 315.853478][T15299] bridge_slave_1: left promiscuous mode [ 315.871587][T15299] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.887569][T15299] bond0: (slave bond_slave_0): Releasing backup interface [ 315.908210][T15299] bond0: (slave bond_slave_1): Releasing backup interface [ 315.933428][T15299] team_slave_0: left promiscuous mode [ 315.968508][T15299] team0: Port device team_slave_0 removed [ 315.981292][T15299] team_slave_1: left promiscuous mode [ 315.997482][T15299] team0: Port device team_slave_1 removed [ 316.004724][T15299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.022337][T15299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.031481][T15299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.039100][T15299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.154338][T15304] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.618603][T15315] netlink: 'syz.8.2674': attribute type 10 has an invalid length. [ 316.674917][T15315] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 316.717182][T15282] chnl_net:caif_netlink_parms(): no params data found [ 316.834047][T11129] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 316.844087][T11129] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 316.857464][T11129] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 316.867131][T11129] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 316.879827][T11129] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 317.083104][T15336] netlink: 'syz.8.2679': attribute type 2 has an invalid length. [ 317.145241][T15282] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.154959][T15282] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.172085][T15282] bridge_slave_0: entered allmulticast mode [ 317.184511][T15282] bridge_slave_0: entered promiscuous mode [ 317.214176][T11129] Bluetooth: hci1: command tx timeout [ 317.216009][T15282] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.323389][T15282] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.357197][T15282] bridge_slave_1: entered allmulticast mode [ 317.367027][T15282] bridge_slave_1: entered promiscuous mode [ 317.416719][T15348] netlink: 'syz.5.2684': attribute type 1 has an invalid length. [ 317.443389][T15348] netlink: 'syz.5.2684': attribute type 2 has an invalid length. [ 317.579979][T15282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.592535][ T9] IPVS: starting estimator thread 0... [ 317.598648][T15282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.709245][T15357] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2686'. [ 317.718908][T15355] IPVS: using max 24 ests per chain, 57600 per kthread [ 317.777505][T15282] team0: Port device team_slave_0 added [ 317.819992][T15282] team0: Port device team_slave_1 added [ 318.013051][T15282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.034323][T15282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.077684][T15372] netlink: 596 bytes leftover after parsing attributes in process `syz.5.2690'. [ 318.110364][T15282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.126404][ T30] audit: type=1107 audit(1752619676.101:4): pid=15373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 318.159567][T15282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.275423][T15282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.311173][T15282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.479140][T15383] netlink: 'syz.6.2695': attribute type 10 has an invalid length. [ 318.499969][T15383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.533008][T15383] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 318.559613][T15383] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2695'. [ 318.736461][T15392] vlan2: entered allmulticast mode [ 318.753482][T15392] team0: entered allmulticast mode [ 318.763838][T15392] team0: Device vlan2 is already an upper device of the team interface [ 318.855977][T15282] hsr_slave_0: entered promiscuous mode [ 318.869700][T15282] hsr_slave_1: entered promiscuous mode [ 318.876281][T15282] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 318.888041][T15282] Cannot create hsr debugfs directory [ 318.924619][T15323] chnl_net:caif_netlink_parms(): no params data found [ 318.966971][T11129] Bluetooth: hci9: command tx timeout [ 319.244547][T15413] lo speed is unknown, defaulting to 1000 [ 319.294296][T11129] Bluetooth: hci1: command tx timeout [ 319.330849][T15413] lo speed is unknown, defaulting to 1000 [ 319.337312][T15323] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.344497][T15323] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.365574][T15323] bridge_slave_0: entered allmulticast mode [ 319.377925][T15323] bridge_slave_0: entered promiscuous mode [ 319.398134][T15323] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.405350][T15323] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.422706][T15323] bridge_slave_1: entered allmulticast mode [ 319.435515][T15323] bridge_slave_1: entered promiscuous mode [ 319.464296][T15413] lo speed is unknown, defaulting to 1000 [ 319.605004][T15323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.662112][T15323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.775788][T15323] team0: Port device team_slave_0 added [ 319.843947][T15323] team0: Port device team_slave_1 added [ 319.994221][T15323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.008933][T15323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.051544][T15323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.070219][T15439] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.2706'. [ 320.081800][T15323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.097704][T15323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.126081][T15413] infiniband syz0: set active [ 320.132205][T15413] infiniband syz0: added lo [ 320.137794][T15413] syz0: rxe_create_cq: returned err = -12 [ 320.143404][T15323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.143809][T15413] infiniband syz0: Couldn't create ib_mad CQ [ 320.160831][T15413] infiniband syz0: Couldn't open port 1 [ 320.181436][T15436] wg2: entered promiscuous mode [ 320.186470][T15436] wg2: entered allmulticast mode [ 320.194868][ T5935] lo speed is unknown, defaulting to 1000 [ 320.280492][T15413] RDS/IB: syz0: added [ 320.284594][T15413] smc: adding ib device syz0 with port count 1 [ 320.315337][T15413] smc: ib device syz0 port 1 has pnetid [ 320.381138][T15282] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.400582][T15282] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.426960][T15282] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 320.529290][ T5935] lo speed is unknown, defaulting to 1000 [ 320.544434][T15323] hsr_slave_0: entered promiscuous mode [ 320.552996][T15323] hsr_slave_1: entered promiscuous mode [ 320.566480][T15323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 320.584191][T15323] Cannot create hsr debugfs directory [ 320.694890][T15282] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.719653][T15282] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.743268][T15282] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 320.771766][T15413] lo speed is unknown, defaulting to 1000 [ 320.919417][T15282] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.941333][T15282] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.952466][T15282] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 321.047355][T11129] Bluetooth: hci9: command tx timeout [ 321.078930][T15282] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.123824][T15282] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.151252][T15282] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 321.300480][T15469] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2715'. [ 321.318080][T15469] xt_CT: You must specify a L4 protocol and not use inversions on it [ 321.373396][T11129] Bluetooth: hci1: command tx timeout [ 321.411072][T15471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.472210][T15413] lo speed is unknown, defaulting to 1000 [ 321.488645][T15471] netlink: 'syz.5.2716': attribute type 10 has an invalid length. [ 321.563331][T15471] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 321.705811][T15282] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 321.717734][T15282] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 321.739752][T15282] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 321.761545][T15282] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 321.838533][T15413] lo speed is unknown, defaulting to 1000 [ 321.876999][T15323] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 321.901321][T15323] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 321.939173][T15323] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 321.965243][T15323] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 322.200297][T15282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.288023][T15413] lo speed is unknown, defaulting to 1000 [ 322.375707][T15282] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.423474][ T3558] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.430696][ T3558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.483984][T15323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.502813][ T3558] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.510112][ T3558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.548895][T15492] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2719'. [ 322.649879][T15323] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.685605][ T3558] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.692909][ T3558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.812335][T10184] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.819632][T10184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.010102][T15323] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 323.058155][T15323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 323.127187][T11129] Bluetooth: hci9: command tx timeout [ 323.210787][T15494] lo speed is unknown, defaulting to 1000 [ 323.453663][T11129] Bluetooth: hci1: command tx timeout [ 323.548539][T15282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.833646][T15323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.049803][T15413] lo speed is unknown, defaulting to 1000 [ 324.529694][T15282] veth0_vlan: entered promiscuous mode [ 324.558816][T15282] veth1_vlan: entered promiscuous mode [ 324.666696][T15282] veth0_macvtap: entered promiscuous mode [ 324.700672][T15282] veth1_macvtap: entered promiscuous mode [ 324.756181][T15282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.801656][T15282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.851604][T15413] lo speed is unknown, defaulting to 1000 [ 324.876164][T15282] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.905392][T15282] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.945037][T15282] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.968897][T15282] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.025980][T15323] veth0_vlan: entered promiscuous mode [ 325.099985][T15323] veth1_vlan: entered promiscuous mode [ 325.198369][T15323] veth0_macvtap: entered promiscuous mode [ 325.208376][T11129] Bluetooth: hci9: command tx timeout [ 325.236118][T15323] veth1_macvtap: entered promiscuous mode [ 325.286263][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.317632][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.382210][T10184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.388222][T15323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.398364][T10184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.430878][T15413] lo speed is unknown, defaulting to 1000 [ 325.440911][T15323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.493125][T15323] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.523913][T15323] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.534366][T15323] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.544763][T15323] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.631352][ T30] audit: type=1804 audit(1752619683.621:5): pid=15568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2656" name="/newroot/0/cgroup.controllers" dev="tmpfs" ino=18 res=1 errno=0 [ 325.697527][ T30] audit: type=1800 audit(1752619683.631:6): pid=15568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2656" name="cgroup.controllers" dev="tmpfs" ino=18 res=0 errno=0 [ 325.833515][T10184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.867066][T10184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.925645][T15572] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 325.978445][T10178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.993024][T10178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.131623][T15413] lo speed is unknown, defaulting to 1000 [ 326.509067][T15589] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2737'. [ 326.534563][T15591] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 326.799331][T15413] lo speed is unknown, defaulting to 1000 [ 327.239573][T15607] 8021q: VLANs not supported on lo [ 327.496744][T15413] lo speed is unknown, defaulting to 1000 [ 327.525910][T15615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2747'. [ 327.961193][T15636] netlink: 45 bytes leftover after parsing attributes in process `syz.9.2754'. [ 328.048838][T15636] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2754'. [ 328.103644][T15639] xt_l2tp: v2 doesn't support IP mode [ 328.104148][T15636] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2754'. [ 328.140989][T15413] lo speed is unknown, defaulting to 1000 [ 328.181007][T15641] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2756'. [ 328.447023][T15652] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2759'. [ 329.241148][T15668] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 329.298793][T15668] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 329.997611][T15701] bond0: entered promiscuous mode [ 330.002734][T15701] bond_slave_0: entered promiscuous mode [ 330.017377][T15701] bond_slave_1: entered promiscuous mode [ 330.034767][T15701] batadv0: entered promiscuous mode [ 330.064910][T15701] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 330.086646][T15701] bond0: left promiscuous mode [ 330.104024][T15701] bond_slave_0: left promiscuous mode [ 330.120210][T15701] bond_slave_1: left promiscuous mode [ 330.131153][T15711] netlink: 'syz.8.2777': attribute type 4 has an invalid length. [ 330.133175][T15710] No such timeout policy "syz0" [ 330.159033][T15701] batadv0: left promiscuous mode [ 330.373703][T15717] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 330.503335][T15726] batadv0: Device is already in use. [ 330.543954][T15728] unknown channel width for channel at 909000KHz? [ 330.587027][T15728] unknown channel width for channel at 909000KHz? [ 330.755547][T15737] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 330.818370][T15737] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2789'. [ 330.870765][T15746] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2788'. [ 331.104475][T15756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2795'. [ 331.182915][T15758] syzkaller1: entered promiscuous mode [ 331.208447][T15758] syzkaller1: entered allmulticast mode [ 331.355402][T15761] xt_CT: No such helper "syz0" [ 331.928166][T11129] Bluetooth: hci9: command tx timeout [ 332.141495][T15795] __nla_validate_parse: 2 callbacks suppressed [ 332.141517][T15795] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2809'. [ 332.165624][T15795] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2809'. [ 332.222364][T15795] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 332.307083][T15799] openvswitch: netlink: Key type 272 is out of range max 32 [ 332.353775][T15803] netlink: 'syz.5.2808': attribute type 10 has an invalid length. [ 332.443014][T15803] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 332.481790][T15807] netlink: 'syz.6.2814': attribute type 7 has an invalid length. [ 332.756994][T15817] netlink: 'syz.6.2816': attribute type 20 has an invalid length. [ 333.177001][T15839] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2822'. [ 333.697446][T15862] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2828'. [ 333.800118][T15866] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2831'. [ 333.988378][T15878] Bluetooth: MGMT ver 1.23 [ 334.828826][T15893] wg1: entered promiscuous mode [ 334.854830][T15894] netlink: 'syz.9.2838': attribute type 1 has an invalid length. [ 334.863601][T15895] netlink: 'syz.9.2838': attribute type 1 has an invalid length. [ 334.945024][T15901] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2841'. [ 334.947084][T15898] pimreg: entered allmulticast mode [ 334.992569][T15900] pimreg: left allmulticast mode [ 335.074697][T15906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2843'. [ 335.084781][T15906] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2843'. [ 335.132659][T15908] IPVS: Unknown mcast interface: rose0 [ 335.414548][T15926] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2851'. [ 335.434870][T15925] xt_SECMARK: invalid mode: 0 [ 335.580635][T15935] x_tables: duplicate underflow at hook 1 [ 335.842166][T15957] veth0: entered promiscuous mode [ 335.898849][T15957] veth0: left promiscuous mode [ 336.163873][T15974] x_tables: duplicate underflow at hook 2 [ 336.192198][T15976] tipc: Enabled bearer , priority 0 [ 336.202944][T15976] syzkaller0: entered promiscuous mode [ 336.216998][T15976] syzkaller0: entered allmulticast mode [ 336.255869][T15975] tipc: Resetting bearer [ 336.291570][T15975] tipc: Disabling bearer [ 336.717067][T15974] lo speed is unknown, defaulting to 1000 [ 336.943590][T16000] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2874'. [ 337.146828][T16008] netdevsim netdevsim6: Firmware load for './file0/../file0' refused, path contains '..' component [ 337.323176][T16013] bridge_slave_0: entered promiscuous mode [ 337.573514][T16025] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2879'. [ 338.505335][T16050] syz.9.2887: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 338.544974][T16050] CPU: 1 UID: 0 PID: 16050 Comm: syz.9.2887 Not tainted 6.16.0-rc5-syzkaller-00191-g0e9418961f89 #0 PREEMPT(full) [ 338.545007][T16050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 338.545033][T16050] Call Trace: [ 338.545041][T16050] [ 338.545051][T16050] dump_stack_lvl+0x189/0x250 [ 338.545099][T16050] ? __pfx_dump_stack_lvl+0x10/0x10 [ 338.545126][T16050] ? __pfx__printk+0x10/0x10 [ 338.545155][T16050] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 338.545184][T16050] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 338.545213][T16050] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 338.545245][T16050] warn_alloc+0x214/0x310 [ 338.545300][T16050] ? __pfx_warn_alloc+0x10/0x10 [ 338.545341][T16050] ? __get_vm_area_node+0x28f/0x300 [ 338.545370][T16050] ? hash_ipportip_create+0x358/0xfe0 [ 338.545404][T16050] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 338.545433][T16050] ? do_syscall_64+0xfa/0x3b0 [ 338.545488][T16050] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 338.545524][T16050] ? rcu_is_watching+0x15/0xb0 [ 338.545553][T16050] ? hash_ipportip_create+0x358/0xfe0 [ 338.545582][T16050] ? hash_ipportip_create+0x358/0xfe0 [ 338.545610][T16050] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 338.545638][T16050] ? hash_ipportip_create+0x358/0xfe0 [ 338.545669][T16050] ? hash_ipportip_create+0x2fe/0xfe0 [ 338.545704][T16050] hash_ipportip_create+0x358/0xfe0 [ 338.545745][T16050] ? __nla_parse+0x40/0x60 [ 338.545768][T16050] ? __pfx_hash_ipportip_create+0x10/0x10 [ 338.545801][T16050] ip_set_create+0xa94/0x1940 [ 338.545822][T16050] ? ip_set_create+0x4a2/0x1940 [ 338.545856][T16050] ? __pfx_ip_set_create+0x10/0x10 [ 338.545920][T16050] nfnetlink_rcv_msg+0xb4d/0x1130 [ 338.545964][T16050] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 338.546021][T16050] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 338.546054][T16050] ? kasan_save_free_info+0x46/0x50 [ 338.546145][T16050] netlink_rcv_skb+0x205/0x470 [ 338.546180][T16050] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 338.546221][T16050] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 338.546262][T16050] ? bpf_lsm_capable+0x9/0x20 [ 338.546286][T16050] ? security_capable+0x7e/0x2e0 [ 338.546327][T16050] nfnetlink_rcv+0x26a/0x2520 [ 338.546366][T16050] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 338.546404][T16050] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 338.546433][T16050] ? __dev_queue_xmit+0x27e/0x3a70 [ 338.546465][T16050] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.546499][T16050] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 338.546533][T16050] ? __pfx___dev_queue_xmit+0x10/0x10 [ 338.546582][T16050] ? ref_tracker_free+0x63a/0x7d0 [ 338.546614][T16050] ? __copy_skb_header+0xa7/0x550 [ 338.546646][T16050] ? __pfx_ref_tracker_free+0x10/0x10 [ 338.546702][T16050] ? skb_clone+0x246/0x3a0 [ 338.546736][T16050] ? __netlink_deliver_tap+0x807/0x850 [ 338.546766][T16050] ? netlink_deliver_tap+0x2e/0x1b0 [ 338.546800][T16050] ? netlink_deliver_tap+0x2e/0x1b0 [ 338.546825][T16050] ? netlink_deliver_tap+0x2e/0x1b0 [ 338.546857][T16050] netlink_unicast+0x75c/0x8e0 [ 338.546894][T16050] netlink_sendmsg+0x805/0xb30 [ 338.546933][T16050] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.546972][T16050] ? aa_sock_msg_perm+0x94/0x160 [ 338.547007][T16050] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 338.547039][T16050] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.547067][T16050] __sock_sendmsg+0x219/0x270 [ 338.547092][T16050] ____sys_sendmsg+0x505/0x830 [ 338.547127][T16050] ? __pfx_____sys_sendmsg+0x10/0x10 [ 338.547167][T16050] ? import_iovec+0x74/0xa0 [ 338.547197][T16050] ___sys_sendmsg+0x21f/0x2a0 [ 338.547229][T16050] ? __pfx____sys_sendmsg+0x10/0x10 [ 338.547303][T16050] ? __fget_files+0x2a/0x420 [ 338.547330][T16050] ? __fget_files+0x3a0/0x420 [ 338.547381][T16050] __x64_sys_sendmsg+0x19b/0x260 [ 338.547413][T16050] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 338.547453][T16050] ? rcu_is_watching+0x15/0xb0 [ 338.547484][T16050] ? do_syscall_64+0xbe/0x3b0 [ 338.547510][T16050] do_syscall_64+0xfa/0x3b0 [ 338.547529][T16050] ? lockdep_hardirqs_on+0x9c/0x150 [ 338.547561][T16050] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.547582][T16050] ? clear_bhb_loop+0x60/0xb0 [ 338.547608][T16050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.547628][T16050] RIP: 0033:0x7f9c34d8e929 [ 338.547648][T16050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.547667][T16050] RSP: 002b:00007f9c35b5d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 338.547689][T16050] RAX: ffffffffffffffda RBX: 00007f9c34fb6160 RCX: 00007f9c34d8e929 [ 338.547704][T16050] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 338.547717][T16050] RBP: 00007f9c34e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 338.547730][T16050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 338.547743][T16050] R13: 0000000000000000 R14: 00007f9c34fb6160 R15: 00007fff7724f3d8 [ 338.547777][T16050] [ 339.037398][T16050] Mem-Info: [ 339.040685][T16050] active_anon:6787 inactive_anon:0 isolated_anon:0 [ 339.040685][T16050] active_file:1475 inactive_file:39934 isolated_file:0 [ 339.040685][T16050] unevictable:768 dirty:92 writeback:0 [ 339.040685][T16050] slab_reclaimable:12204 slab_unreclaimable:157463 [ 339.040685][T16050] mapped:55584 shmem:1466 pagetables:1190 [ 339.040685][T16050] sec_pagetables:0 bounce:0 [ 339.040685][T16050] kernel_misc_reclaimable:0 [ 339.040685][T16050] free:1207760 free_pcp:13760 free_cma:0 [ 339.089684][T16050] Node 0 active_anon:27228kB inactive_anon:0kB active_file:5900kB inactive_file:159532kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:222336kB dirty:368kB writeback:0kB shmem:4328kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:14668kB pagetables:4680kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 339.125199][T16050] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 339.182862][T16050] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 339.229230][T16050] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 339.235191][T16050] Node 0 DMA32 free:915620kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26980kB inactive_anon:0kB active_file:5900kB inactive_file:157960kB unevictable:1536kB writepending:364kB present:3129332kB managed:2558392kB mlocked:0kB bounce:0kB free_pcp:36920kB local_pcp:13828kB free_cma:0kB [ 339.275263][T16050] lowmem_reserve[]: 0 0 1 1 1 [ 339.280286][T16050] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 339.311225][T16050] lowmem_reserve[]: 0 0 0 0 0 [ 339.316412][T16050] Node 1 Normal free:3899208kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:17888kB local_pcp:10048kB free_cma:0kB [ 339.347851][T16050] lowmem_reserve[]: 0 0 0 0 0 [ 339.352719][T16050] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 339.372055][T16050] Node 0 DMA32: 573*4kB (UME) 196*8kB (UME) 131*16kB (UM) 119*32kB (UME) 38*64kB (UME) 17*128kB (ME) 20*256kB (UM) 12*512kB (UM) 8*1024kB (UM) 3*2048kB (ME) 214*4096kB (M) = 916516kB [ 339.397330][T16050] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 339.431244][T16050] Node 1 Normal: 172*4kB (U) 47*8kB (UME) 34*16kB (UME) 120*32kB (UME) 30*64kB (UME) 7*128kB (UME) 5*256kB (UME) 3*512kB (ME) 3*1024kB (UME) 1*2048kB (E) 948*4096kB (M) = 3899208kB [ 339.451703][T16050] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 339.464198][T16050] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 339.473621][T16050] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 339.487294][T16050] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 339.496638][T16050] 42822 total pagecache pages [ 339.502416][T16050] 0 pages in swap cache [ 339.506621][T16050] Free swap = 124996kB [ 339.510906][T16050] Total swap = 124996kB [ 339.515100][T16050] 2097051 pages RAM [ 339.518998][T16050] 0 pages HighMem/MovableOnly [ 339.523700][T16050] 425411 pages reserved [ 339.528981][T16050] 0 pages cma reserved [ 339.688723][T16065] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 339.867665][T16081] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2896'. [ 340.025019][T16090] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2900'. [ 340.034487][T16093] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2899'. [ 340.214295][T16102] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2904'. [ 340.357888][T16106] netlink: 'syz.9.2905': attribute type 1 has an invalid length. [ 340.497415][T16112] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2907'. [ 340.540449][T16112] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2907'. [ 340.677707][T16118] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-tlb(5) [ 341.030601][T16137] netlink: 18 bytes leftover after parsing attributes in process `syz.6.2916'. [ 341.117411][T16141] netlink: 'syz.5.2918': attribute type 4 has an invalid length. [ 341.171797][T16139] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2918'. [ 341.190975][T16143] netlink: 'syz.9.2919': attribute type 14 has an invalid length. [ 341.419862][T16152] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2921'. [ 341.458661][T16141] netlink: 'syz.5.2918': attribute type 5 has an invalid length. [ 341.475271][T16156] atomic_op ffff888054efa198 conn xmit_atomic 0000000000000000 [ 341.868018][T16168] 8021q: VLANs not supported on ip6_vti0 [ 341.997999][T16176] netlink: 'syz.6.2926': attribute type 1 has an invalid length. [ 342.234668][T16161] lo speed is unknown, defaulting to 1000 [ 342.944633][T10178] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 344.405515][T16221] __nla_validate_parse: 2 callbacks suppressed [ 344.405536][T16221] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2939'. [ 344.525167][T16221] geneve2: entered promiscuous mode [ 345.133506][T16233] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2943'. [ 345.484504][T16248] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2948'. [ 345.518075][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032c1ec00: rx timeout, send abort [ 346.026414][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032c1ec00: abort rx timeout. Force session deactivation [ 346.307674][T16274] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2957'. [ 346.368952][T16278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.491978][T16289] openvswitch: netlink: Key type 2064 is out of range max 32 [ 346.536414][T16274] IPVS: Scheduler module ip_vs_sip not found [ 346.671538][ T5852] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 346.688946][ T5852] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 346.710998][ T5852] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 346.737263][ T5852] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 346.745441][ T5852] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 346.802673][T16302] netlink: 'syz.4.2963': attribute type 1 has an invalid length. [ 346.835588][T16302] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2963'. [ 346.876309][T16302] netlink: 'syz.4.2963': attribute type 1 has an invalid length. [ 346.991167][T16306] xt_cgroup: invalid path, errno=-2 [ 347.240460][T16295] lo speed is unknown, defaulting to 1000 [ 347.399831][T16328] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 347.603030][T16342] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2976'. [ 348.571351][T16382] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2988'. [ 348.667414][T16382] netlink: 'syz.6.2988': attribute type 4 has an invalid length. [ 348.733937][T16295] chnl_net:caif_netlink_parms(): no params data found [ 348.812656][T11129] Bluetooth: hci10: command tx timeout [ 349.050813][T16397] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2991'. [ 349.066617][T16402] netlink: 'syz.4.2994': attribute type 10 has an invalid length. [ 349.075568][T16402] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2994'. [ 349.120309][T16402] team0: Port device geneve0 added [ 349.186407][T16295] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.220026][T16295] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.241821][T16295] bridge_slave_0: entered allmulticast mode [ 349.254130][T16295] bridge_slave_0: entered promiscuous mode [ 349.264254][T16407] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2995'. [ 349.282733][T16295] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.300775][T16295] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.316327][T16295] bridge_slave_1: entered allmulticast mode [ 349.339537][T16295] bridge_slave_1: entered promiscuous mode [ 349.472744][T16295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.511132][T16295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.592775][T16424] __nla_validate_parse: 2 callbacks suppressed [ 349.592794][T16424] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3001'. [ 349.675532][T16295] team0: Port device team_slave_0 added [ 349.774658][T16295] team0: Port device team_slave_1 added [ 349.888991][T16295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.908215][T16295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.974332][T16295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.996609][T16295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.015470][T16295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.097847][T16295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.160168][ T30] audit: type=1107 audit(1752619708.141:7): pid=16441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 350.200063][T16440] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3006'. [ 350.216012][ T30] audit: type=1107 audit(1752619708.141:8): pid=16441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 350.245154][ T30] audit: type=1107 audit(1752619708.141:9): pid=16441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 350.297725][ T30] audit: type=1107 audit(1752619708.141:10): pid=16441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 350.342333][ T30] audit: type=1107 audit(1752619708.141:11): pid=16441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 350.392169][T16453] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3009'. [ 350.428093][ T30] audit: type=1107 audit(1752619708.141:12): pid=16441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 350.444873][ T30] audit: type=1107 audit(1752619708.141:13): pid=16441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 350.473381][ T30] audit: type=1107 audit(1752619708.141:14): pid=16441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 350.515455][T16295] hsr_slave_0: entered promiscuous mode [ 350.548688][T16295] hsr_slave_1: entered promiscuous mode [ 350.550562][ T30] audit: type=1107 audit(1752619708.141:15): pid=16441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 350.555253][T16295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 350.598574][ T30] audit: type=1107 audit(1752619708.141:16): pid=16441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 350.602323][T16295] Cannot create hsr debugfs directory [ 350.896998][T11129] Bluetooth: hci10: command tx timeout [ 351.142735][T16478] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3018'. [ 351.299951][T16295] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.321502][T16295] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.352380][T16488] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3019'. [ 351.405701][T16480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3019'. [ 351.573635][T16295] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.608953][T16295] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.661448][T16497] netlink: 112 bytes leftover after parsing attributes in process `syz.6.3023'. [ 351.800052][T16295] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.821760][T16295] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.880802][T16506] netlink: 'syz.9.3025': attribute type 1 has an invalid length. [ 351.896438][T16506] netlink: 52 bytes leftover after parsing attributes in process `syz.9.3025'. [ 351.932021][T16295] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.942992][T16295] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.274886][T16295] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 352.290747][T16295] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 352.339924][T16295] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 352.352872][T16295] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 352.595024][T16543] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3034'. [ 352.646333][T16543] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3034'. [ 352.766485][T16295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.869790][T16295] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.908552][ T996] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.915743][ T996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.936485][ T996] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.943773][ T996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.973282][T11129] Bluetooth: hci10: command tx timeout [ 353.005903][T16552] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 353.021076][T16551] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 353.280121][T16566] x_tables: duplicate underflow at hook 1 [ 353.630108][T16582] netlink: 'syz.5.3042': attribute type 4 has an invalid length. [ 353.935162][ T9] lo speed is unknown, defaulting to 1000 [ 354.001953][T16295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.199629][T16295] veth0_vlan: entered promiscuous mode [ 354.241088][T16295] veth1_vlan: entered promiscuous mode [ 354.381244][T16295] veth0_macvtap: entered promiscuous mode [ 354.429838][T16295] veth1_macvtap: entered promiscuous mode [ 354.501217][T16295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.591836][T16295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.659155][T16295] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.716110][T16295] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.729662][T16295] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.738526][T16295] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.777628][T16627] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3054'. [ 354.908908][T16630] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3055'. [ 355.049535][T11129] Bluetooth: hci10: command tx timeout [ 355.160107][ T996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.197421][ T996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.318775][T10178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.348467][T10178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.389383][T16640] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3059'. [ 355.440057][T16645] bridge0: port 3(veth0_to_bridge) entered blocking state [ 355.469508][T16645] bridge0: port 3(veth0_to_bridge) entered disabled state [ 355.481001][T16645] veth0_to_bridge: entered allmulticast mode [ 355.499964][T16645] veth0_to_bridge: entered promiscuous mode [ 355.506720][T16645] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 355.534884][T16645] bridge0: port 3(veth0_to_bridge) entered blocking state [ 355.542608][T16645] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 355.714794][T16657] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3063'. [ 355.749462][T16657] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3063'. [ 355.845156][T16657] team_slave_0: entered promiscuous mode [ 355.850957][T16657] team_slave_1: entered promiscuous mode [ 355.904758][T16668] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3066'. [ 355.962217][T16671] x_tables: duplicate underflow at hook 2 [ 356.273335][T16687] netlink: 191164 bytes leftover after parsing attributes in process `syz.1.3070'. [ 356.309027][T16687] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3070'. [ 356.387038][T16692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3070'. [ 356.648763][T16710] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 356.732073][T16710] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 356.925849][T16723] netlink: 'syz.4.3084': attribute type 4 has an invalid length. [ 356.961534][T16723] netlink: 'syz.4.3084': attribute type 4 has an invalid length. [ 356.968835][T16726] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3086'. [ 357.150451][T16733] vlan3: entered promiscuous mode [ 357.170113][T16733] bridge0: entered promiscuous mode [ 357.187900][T16733] vlan3: entered allmulticast mode [ 357.193182][T16733] bridge0: entered allmulticast mode [ 357.679613][T16761] x_tables: duplicate underflow at hook 2 [ 358.371378][T16789] nftables ruleset with unbound chain [ 358.431821][T16790] veth0: entered promiscuous mode [ 358.449218][T16788] veth0: left promiscuous mode [ 358.519169][T16799] bond0: option mode: unable to set because the bond device has slaves [ 358.724182][ T3558] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 358.769006][T16811] delete_channel: no stack [ 358.773755][T16811] delete_channel: no stack [ 358.797950][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 358.829373][ T3558] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 359.574443][T16865] netlink: 'syz.6.3130': attribute type 10 has an invalid length. [ 359.768152][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 359.778565][T16865] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 359.786372][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 360.037424][T16883] netlink: 'syz.4.3136': attribute type 1 has an invalid length. [ 360.073564][T16885] __nla_validate_parse: 8 callbacks suppressed [ 360.073585][T16885] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3135'. [ 360.985947][T16944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3156'. [ 361.032115][T16944] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 361.117584][T16944] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3156'. [ 362.115146][T16998] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3169'. [ 362.291840][T17007] netlink: 'syz.1.3173': attribute type 10 has an invalid length. [ 362.292627][T17008] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.3172'. [ 362.353001][T17007] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 362.533755][T17018] netlink: 'syz.5.3176': attribute type 10 has an invalid length. [ 362.616106][T17020] netlink: 'syz.1.3177': attribute type 3 has an invalid length. [ 362.646426][T17020] netlink: 'syz.1.3177': attribute type 10 has an invalid length. [ 362.654768][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 362.665024][T17020] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.672893][T17020] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.686203][T17020] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.693530][T17020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.701216][T17020] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.708480][T17020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.725684][T17020] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 363.017741][T17035] netlink: 280 bytes leftover after parsing attributes in process `syz.4.3181'. [ 363.221185][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.753332][T17076] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3189'. [ 363.883510][ T7105] bridge_slave_1: left allmulticast mode [ 363.896918][ T7105] bridge_slave_1: left promiscuous mode [ 363.904219][ T7105] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.921227][T17079] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3190'. [ 363.971113][ T7105] bridge_slave_0: left allmulticast mode [ 363.972126][T17080] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3190'. [ 363.994953][ T7105] bridge_slave_0: left promiscuous mode [ 364.001421][ T7105] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.048894][ T7105] ip6gretap1: left allmulticast mode [ 364.054262][ T7105] ip6gretap1: left promiscuous mode [ 364.060540][ T7105] bridge6: port 1(ip6gretap1) entered disabled state [ 364.169019][ T43] hid-generic 0005:10CF:0009.0002: unknown main item tag 0x0 [ 364.187865][ T43] hid-generic 0005:10CF:0009.0002: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 364.510364][ T7105] bond2 (unregistering): (slave gretap0): Releasing active interface [ 364.604632][ T7105] dvmrp8 (unregistering): left allmulticast mode [ 364.669673][ T7105] bond3 (unregistering): (slave vlan3): Releasing active interface [ 365.421114][ T7105] bond1 (unregistering): Released all slaves [ 365.554265][ T7105] bond2 (unregistering): Released all slaves [ 365.672638][ T7105] bond0 (unregistering): Released all slaves [ 365.799181][ T7105] bond3 (unregistering): Released all slaves [ 365.930635][ T7105] bond4 (unregistering): Released all slaves [ 366.077238][ T7105] tipc: Disabling bearer [ 366.089692][ T7105] tipc: Left network mode [ 366.356246][T17113] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3200'. [ 366.565911][T17123] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 367.131986][T17148] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3210'. [ 367.171967][T17150] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3209'. [ 367.211109][T17153] netlink: 'syz.1.3208': attribute type 11 has an invalid length. [ 367.237734][T17153] netlink: 'syz.1.3208': attribute type 11 has an invalid length. [ 367.253938][T17153] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3208'. [ 367.299710][T17159] set match dimension is over the limit! [ 368.966000][T17149] tap0: tun_chr_ioctl cmd 1074025678 [ 368.977478][T17149] tap0: group set to 0 [ 368.988959][T17148] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 369.003361][T17148] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 369.292773][T17166] netlink: 'syz.5.3214': attribute type 1 has an invalid length. [ 369.318633][T17164] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3213'. [ 369.970271][ T7105] hsr_slave_0: left promiscuous mode [ 370.035979][ T7105] hsr_slave_1: left promiscuous mode [ 370.047709][ T7105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.055321][ T7105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.148158][ T7105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.155688][ T7105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.247179][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 370.294450][ T7105] veth1_macvtap: left promiscuous mode [ 370.305228][T17218] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 370.308797][ T7105] veth1_vlan: left promiscuous mode [ 370.330338][ T7105] veth0_vlan: left promiscuous mode [ 371.142191][ T7105] team0 (unregistering): Port device team_slave_1 removed [ 371.193808][ T7105] team0 (unregistering): Port device C removed [ 371.301927][ T996] smc: removing ib device syz2 [ 371.860518][T17231] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3233'. [ 372.490614][T17258] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3238'. [ 372.620656][T17263] IPv6: sit1: Disabled Multicast RS [ 372.648689][T17263] sit1: entered allmulticast mode [ 372.733063][T17270] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3242'. [ 372.784195][T17269] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3242'. [ 373.133053][T17282] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.140815][T17282] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.517270][T17300] netlink: 208 bytes leftover after parsing attributes in process `syz.4.3249'. [ 373.795901][T17310] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3252'. [ 373.976474][T10184] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 374.019434][T17317] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3256'. [ 374.058408][T17317] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 374.107858][T17317] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 374.209811][T17320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3257'. [ 374.294148][T17324] netlink: 'syz.9.3259': attribute type 1 has an invalid length. [ 374.322582][T17324] netlink: 'syz.9.3259': attribute type 2 has an invalid length. [ 374.818230][T17341] netlink: 692 bytes leftover after parsing attributes in process `syz.9.3263'. [ 375.292744][T17353] netlink: 'syz.1.3269': attribute type 6 has an invalid length. [ 375.354058][T17356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3270'. [ 375.400012][T17356] bridge_slave_1: left allmulticast mode [ 375.418598][T17356] bridge_slave_1: left promiscuous mode [ 375.444849][T17356] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.475234][T17356] bridge_slave_0: left allmulticast mode [ 375.489259][T17356] bridge_slave_0: left promiscuous mode [ 375.502138][T17356] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.102692][T17388] gtp0: entered promiscuous mode [ 376.112703][T17388] gtp0: entered allmulticast mode [ 376.310866][ T7105] IPVS: stop unused estimator thread 0... [ 376.487524][T17396] netlink: 'syz.4.3280': attribute type 1 has an invalid length. [ 376.622138][ T5852] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 376.639800][ T5852] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 376.649623][ T5852] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 376.668313][ T5853] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 376.676709][ T5853] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 376.726285][T17400] lo speed is unknown, defaulting to 1000 [ 377.289291][T17424] netlink: 'syz.9.3292': attribute type 1 has an invalid length. [ 377.427379][T17433] __nla_validate_parse: 5 callbacks suppressed [ 377.427399][T17433] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3293'. [ 377.431775][T17424] 8021q: adding VLAN 0 to HW filter on device bond1 [ 377.509557][T17429] gretap1: entered promiscuous mode [ 377.520276][T17429] bond1: (slave gretap1): making interface the new active one [ 377.537139][T17439] netlink: 'syz.4.3294': attribute type 2 has an invalid length. [ 377.537568][T17429] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 377.573583][T17437] macvlan3: entered promiscuous mode [ 377.579677][T17437] macvlan3: entered allmulticast mode [ 377.586068][T17437] bond1: entered promiscuous mode [ 377.632075][T17437] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 377.651864][T17437] bond1: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 377.671703][T17437] bond1: left promiscuous mode [ 377.756250][T17400] chnl_net:caif_netlink_parms(): no params data found [ 377.805586][T17447] tipc: Started in network mode [ 377.827457][T17447] tipc: Node identity 4, cluster identity 4711 [ 377.833703][T17447] tipc: Node number set to 4 [ 378.229143][T17400] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.247432][T17400] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.255086][T17400] bridge_slave_0: entered allmulticast mode [ 378.279478][T17400] bridge_slave_0: entered promiscuous mode [ 378.299410][T17400] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.325741][T17400] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.343461][T17400] bridge_slave_1: entered allmulticast mode [ 378.360292][T17400] bridge_slave_1: entered promiscuous mode [ 378.461010][T17468] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3299'. [ 378.484586][T17462] syzkaller0: entered promiscuous mode [ 378.493764][T17462] syzkaller0: entered allmulticast mode [ 378.494472][T17469] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3300'. [ 378.507961][T17470] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 378.556316][T17400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.566357][T17469] 0ªX¹¦D: renamed from gretap0 (while UP) [ 378.613913][T17469] 0ªX¹¦D: entered allmulticast mode [ 378.637721][T17469] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 378.727424][T11129] Bluetooth: hci11: command tx timeout [ 378.770817][T17475] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3302'. [ 378.897986][T17480] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3301'. [ 380.807624][T11129] Bluetooth: hci11: command tx timeout [ 380.836353][T17400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.880820][T17487] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3304'. [ 381.021594][T17490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3305'. [ 381.029819][T17400] team0: Port device team_slave_0 added [ 381.059467][T17400] team0: Port device team_slave_1 added [ 381.062874][T17490] netlink: 'syz.1.3305': attribute type 20 has an invalid length. [ 381.144823][T17490] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.154165][T17490] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.163359][T17490] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.172155][T17490] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.218805][T17490] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (65547) [ 381.236915][T17490] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 381.261772][T17400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.269716][T17400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.317997][T17400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.332391][T17400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.340886][T17400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.436405][T17400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.544527][T17517] Unsupported ieee802154 address type: 0 [ 381.607886][T17400] hsr_slave_0: entered promiscuous mode [ 381.623428][T17400] hsr_slave_1: entered promiscuous mode [ 381.640887][T17400] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 381.659102][T17400] Cannot create hsr debugfs directory [ 381.759768][T17527] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 381.765848][T17526] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 381.767832][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 381.784115][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 381.796569][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 381.808978][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 381.821407][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 381.833819][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 381.840332][T17526] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3316'. [ 381.846311][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 381.867237][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 382.388395][T17539] netlink: 'syz.4.3320': attribute type 1 has an invalid length. [ 382.444606][T17539] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3320'. [ 382.888523][T11129] Bluetooth: hci11: command tx timeout [ 382.921058][T17547] syzkaller0: refused to change device tx_queue_len [ 383.506988][ C1] net_ratelimit: 2430 callbacks suppressed [ 383.507010][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:9d:85:03:43:75, vlan:0) [ 383.525827][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 383.538782][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 383.551311][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 383.564960][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:9d:85:03:43:75, vlan:0) [ 383.578089][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 383.591089][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 383.603663][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 383.616201][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:9d:85:03:43:75, vlan:0) [ 383.629314][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 383.767543][T11129] Bluetooth: hci1: command 0x0401 tx timeout [ 384.532399][T17400] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.571928][T17400] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.666236][T17584] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3326'. [ 384.966963][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 384.995249][T11129] Bluetooth: hci11: command tx timeout [ 385.142783][T17400] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.236941][T17400] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.545323][T17597] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3333'. [ 385.602100][T17400] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.640460][T17602] netlink: 'syz.9.3333': attribute type 3 has an invalid length. [ 385.677357][T17400] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.857976][ T5853] Bluetooth: hci1: command 0x0401 tx timeout [ 386.570004][T17610] syzkaller0: entered promiscuous mode [ 386.576367][T17624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3339'. [ 386.596560][T17610] syzkaller0: entered allmulticast mode [ 386.619086][ C0] Unknown status report in ack skb [ 386.699614][T17625] netlink: 14 bytes leftover after parsing attributes in process `syz.9.3340'. [ 386.921117][T17627] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3341'. [ 386.957157][T17627] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3341'. [ 386.983401][T17627] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3341'. [ 387.014493][T17627] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3341'. [ 388.517657][ C1] net_ratelimit: 7449 callbacks suppressed [ 388.517677][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.535920][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.548253][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:9d:85:03:43:75, vlan:0) [ 388.561162][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 388.574032][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.586535][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.599097][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:9d:85:03:43:75, vlan:0) [ 388.612068][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 388.624649][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.637089][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.165117][T11129] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 392.208636][T11129] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 392.217514][T11129] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 392.236985][T11129] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 392.244831][T11129] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 393.526924][ C1] net_ratelimit: 8055 callbacks suppressed [ 393.526946][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.545134][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:9d:85:03:43:75, vlan:0) [ 393.557758][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 393.570657][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.582958][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.595204][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:9d:85:03:43:75, vlan:0) [ 393.607896][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 393.620692][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.633170][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.645664][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:9d:85:03:43:75, vlan:0) [ 394.339277][T11129] Bluetooth: hci12: command tx timeout [ 394.904205][T17625] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.941245][T17625] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.983160][T17625] bond0 (unregistering): Released all slaves [ 395.046032][T17631] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3342'. [ 395.351365][T17634] lo speed is unknown, defaulting to 1000 [ 395.464688][T17643] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3346'. [ 395.605239][T17400] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 395.728237][T17400] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 395.871785][T17400] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 395.992560][T17400] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 396.409240][T11129] Bluetooth: hci12: command tx timeout [ 396.469874][T17664] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3351'. [ 396.515917][T17664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3351'. [ 396.550616][T17664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3351'. [ 396.594492][T17664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3351'. [ 396.643790][T17664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3351'. [ 396.677609][T17664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3351'. [ 396.724162][T17664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3351'. [ 396.775704][T17664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3351'. [ 396.868623][T17649] lo speed is unknown, defaulting to 1000 [ 397.066330][T17400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.183579][T17400] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.327561][ T7105] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.334784][ T7105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.502313][ T7105] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.509502][ T7105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.498737][T11129] Bluetooth: hci12: command tx timeout [ 398.537352][ C1] net_ratelimit: 7609 callbacks suppressed [ 398.537383][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.556297][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.568732][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:9d:85:03:43:75, vlan:0) [ 398.581686][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 398.594502][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.606995][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.619453][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:9d:85:03:43:75, vlan:0) [ 398.632329][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 398.645162][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.657644][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 399.054059][T17634] chnl_net:caif_netlink_parms(): no params data found [ 399.305857][T17700] netlink: 'syz.9.3361': attribute type 32 has an invalid length. [ 400.250762][T17719] __nla_validate_parse: 6 callbacks suppressed [ 400.250781][T17719] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3365'. [ 400.582613][T11129] Bluetooth: hci12: command tx timeout [ 401.199795][T17634] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.241569][T17634] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.269831][T17634] bridge_slave_0: entered allmulticast mode [ 401.302216][T17634] bridge_slave_0: entered promiscuous mode [ 401.371390][T17634] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.397449][T17634] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.408573][T17634] bridge_slave_1: entered allmulticast mode [ 401.431000][T17634] bridge_slave_1: entered promiscuous mode [ 401.443628][T17726] netlink: 'syz.1.3367': attribute type 49 has an invalid length. [ 401.476439][T17400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.785511][T17634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.004244][T17634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.318187][T17634] team0: Port device team_slave_0 added [ 402.419630][T17634] team0: Port device team_slave_1 added [ 402.715335][T17634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.747230][T17634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.862563][T17634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.987749][T17634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.035269][T17634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.199350][T17634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.545452][T17400] veth0_vlan: entered promiscuous mode [ 403.547299][ C1] net_ratelimit: 7569 callbacks suppressed [ 403.547318][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 403.569749][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.573585][T17744] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3373'. [ 403.582235][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.603536][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:9d:85:03:43:75, vlan:0) [ 403.616617][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 403.629704][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.642215][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.654718][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:9d:85:03:43:75, vlan:0) [ 403.667745][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 403.680746][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.720493][T17634] hsr_slave_0: entered promiscuous mode [ 403.741523][T17634] hsr_slave_1: entered promiscuous mode [ 403.753202][T17634] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 403.774765][T17634] Cannot create hsr debugfs directory [ 403.814257][T17400] veth1_vlan: entered promiscuous mode [ 404.133785][T17760] IPVS: set_ctl: invalid protocol: 43 172.30.0.10:20000 [ 404.158206][T17760] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3375'. [ 404.489292][T17760] gretap0: entered promiscuous mode [ 404.498251][T17760] gretap0: entered allmulticast mode [ 404.651694][T17757] lo speed is unknown, defaulting to 1000 [ 404.706783][T17400] veth0_macvtap: entered promiscuous mode [ 404.794781][T17400] veth1_macvtap: entered promiscuous mode [ 404.804556][T17768] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3378'. [ 405.048332][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 405.233978][T17400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.248195][T17400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.266421][T17776] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3379'. [ 405.899770][T17400] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.917074][T17400] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.950556][T17400] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.987360][T17400] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.247624][ T5853] Bluetooth: hci5: command 0x0406 tx timeout [ 406.562497][T17634] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.586557][T17786] netlink: 'syz.4.3383': attribute type 1 has an invalid length. [ 406.614841][T17786] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3383'. [ 407.113409][T17634] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.557248][ C1] net_ratelimit: 7338 callbacks suppressed [ 408.557271][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 408.575892][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.588428][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.600982][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:9d:85:03:43:75, vlan:0) [ 408.613686][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 408.626601][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.638940][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.651474][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:9d:85:03:43:75, vlan:0) [ 408.664486][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 408.677563][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.054818][T17634] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.432068][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 409.432106][ T30] audit: type=1800 audit(1752619767.421:72): pid=17812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3388" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=481 res=0 errno=0 [ 409.615710][ T30] audit: type=1800 audit(1752619767.491:73): pid=17812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3388" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=481 res=0 errno=0 [ 410.014122][T17634] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.304846][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.370768][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.387629][T17825] netlink: 'syz.1.3391': attribute type 5 has an invalid length. [ 410.810828][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.865132][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.311094][T17634] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 411.368559][ T5853] Bluetooth: hci6: command 0x0406 tx timeout [ 411.412590][T17634] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 411.481208][T17841] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 411.589745][T17846] netlink: 'syz.1.3397': attribute type 1 has an invalid length. [ 411.648324][T17846] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3397'. [ 411.742085][T17634] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 411.828761][T17634] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 412.489808][ T31] INFO: task syz.2.2156:13498 blocked for more than 143 seconds. [ 412.504878][ T31] Not tainted 6.16.0-rc5-syzkaller-00191-g0e9418961f89 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 412.568520][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 412.688231][ T31] task:syz.2.2156 state:D stack:26184 pid:13498 tgid:13492 ppid:5856 task_flags:0x400040 flags:0x00004004 [ 412.734889][T17634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.790580][ T31] Call Trace: [ 412.793931][ T31] [ 412.864777][ T31] __schedule+0x16f5/0x4d00 [ 412.906359][ T31] ? __lock_acquire+0xab9/0xd20 [ 412.936643][T17634] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.958290][ T31] ? schedule+0x165/0x360 [ 412.962749][ T31] ? __pfx___schedule+0x10/0x10 [ 413.044449][ T31] ? schedule+0x91/0x360 [ 413.075207][ T31] schedule+0x165/0x360 [ 413.167931][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.175139][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.194167][ T31] schedule_preempt_disabled+0x13/0x30 [ 413.286968][ T31] __mutex_lock+0x724/0xe80 [ 413.291561][ T31] ? __mutex_lock+0x51b/0xe80 [ 413.379148][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.386368][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.420025][ T31] ? nfsd_nl_rpc_status_get_dumpit+0xd9/0x1280 [ 413.426303][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 413.487206][ T31] ? stack_trace_save+0x9c/0xe0 [ 413.492160][ T31] nfsd_nl_rpc_status_get_dumpit+0xd9/0x1280 [ 413.567246][ C1] net_ratelimit: 7269 callbacks suppressed [ 413.567267][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.585695][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:9d:85:03:43:75, vlan:0) [ 413.587256][ T31] ? kasan_save_track+0x4f/0x80 [ 413.598764][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 413.616089][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.630421][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.643068][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:9d:85:03:43:75, vlan:0) [ 413.656072][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 413.669066][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.681626][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.694142][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:9d:85:03:43:75, vlan:0) [ 413.697338][ T31] ? kasan_save_track+0x3e/0x80 [ 413.767552][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 413.796835][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 413.801786][ T31] ? __kmalloc_node_track_caller_noprof+0x271/0x4e0 [ 413.868180][ T31] ? kmalloc_reserve+0x136/0x290 [ 413.873215][ T31] ? __alloc_skb+0x142/0x2d0 [ 413.916808][ T31] ? netlink_dump+0x1b1/0xe60 [ 413.921714][ T31] ? genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 414.007531][ T31] ? genl_rcv_msg+0x5da/0x790 [ 414.036781][ T31] ? netlink_rcv_skb+0x205/0x470 [ 414.041814][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 414.093401][ T31] ? __sock_sendmsg+0x219/0x270 [ 414.113567][ T31] ? ____sys_sendmsg+0x505/0x830 [ 414.136786][ T31] ? ___sys_sendmsg+0x21f/0x2a0 [ 414.141737][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 414.187262][ T31] ? do_syscall_64+0xfa/0x3b0 [ 414.192046][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.237247][ T31] ? rcu_is_watching+0x15/0xb0 [ 414.242214][ T31] ? trace_kmalloc+0x1f/0xd0 [ 414.267109][ T31] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 414.273987][ T31] ? __build_skb_around+0x257/0x3e0 [ 414.345751][ T31] genl_dumpit+0x108/0x1b0 [ 414.367301][ T31] netlink_dump+0x6db/0xe60 [ 414.371935][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 414.445941][ T31] ? genl_start+0x499/0x6c0 [ 414.477288][ T31] __netlink_dump_start+0x5cb/0x7e0 [ 414.487885][ T31] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 414.493700][ T31] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 414.556380][ T31] ? genl_get_cmd+0x496/0x910 [ 414.573431][ T31] ? __pfx_genl_start+0x10/0x10 [ 414.593195][ T31] ? __pfx_genl_dumpit+0x10/0x10 [ 414.607563][ T31] ? __pfx_genl_done+0x10/0x10 [ 414.612531][ T31] genl_rcv_msg+0x5da/0x790 [ 414.626652][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 414.632087][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 414.647635][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 414.654237][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 414.680831][ T31] netlink_rcv_skb+0x205/0x470 [ 414.685684][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 414.696794][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 414.702170][ T31] ? down_read+0x1ad/0x2e0 [ 414.706630][ T31] genl_rcv+0x28/0x40 [ 414.722432][ T31] netlink_unicast+0x75c/0x8e0 [ 414.746929][ T31] netlink_sendmsg+0x805/0xb30 [ 414.751804][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.761666][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 414.775356][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 414.792492][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.805704][ T31] __sock_sendmsg+0x219/0x270 [ 414.826860][ T31] ____sys_sendmsg+0x505/0x830 [ 414.846488][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 414.854221][ T31] ? import_iovec+0x74/0xa0 [ 414.867479][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 414.872256][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 414.895960][ T31] ? __fget_files+0x2a/0x420 [ 414.918573][ T31] ? __fget_files+0x3a0/0x420 [ 414.923361][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 414.936908][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 414.942479][ T31] ? do_syscall_64+0xbe/0x3b0 [ 414.957386][ T31] do_syscall_64+0xfa/0x3b0 [ 414.964350][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 414.977144][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.983293][ T31] ? clear_bhb_loop+0x60/0xb0 [ 415.003900][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.016779][ C1] sched: DL replenish lagged too much [ 415.018526][ T31] RIP: 0033:0x7ffb4718e929 [ 415.042430][ T31] RSP: 002b:00007ffb47f9f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 415.064064][ T31] RAX: ffffffffffffffda RBX: 00007ffb473b6080 RCX: 00007ffb4718e929 [ 415.077507][ T31] RDX: 0000000000004000 RSI: 0000200000000180 RDI: 0000000000000003 [ 415.085542][ T31] RBP: 00007ffb47210b39 R08: 0000000000000000 R09: 0000000000000000 [ 415.105290][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 415.139298][ T31] R13: 0000000000000000 R14: 00007ffb473b6080 R15: 00007ffe9f6ffd98 [ 415.156802][ T31] [ 415.172992][ T31] [ 415.172992][ T31] Showing all locks held in the system: [ 415.292114][ T31] 2 locks held by kworker/0:1/10: [ 415.317212][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 415.369589][ T31] #1: ffffc900000f7bc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 415.476879][ T31] 1 lock held by khungtaskd/31: [ 415.507621][ T31] #0: ffffffff8e13f160 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 415.588512][ T31] 2 locks held by kworker/1:1/43: [ 415.593642][ T31] 2 locks held by getty/5614: [ 415.656865][ T31] #0: ffff8880356420a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 415.741896][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 415.817621][ T31] 4 locks held by kworker/1:5/5935: [ 415.822910][ T31] 2 locks held by syz.1.2089/13264: [ 415.896864][ T31] #0: ffffffff8f583b70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 415.905190][ T31] #1: ffffffff8e41d708 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 415.966796][ T31] 3 locks held by syz.2.2156/13498: [ 415.972074][ T31] #0: ffffffff8f583b70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 416.019174][ T31] #1: ffff8880313c36d0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 416.036959][ T31] #2: ffffffff8e41d708 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xd9/0x1280 [ 416.094926][ T31] 2 locks held by syz.0.2298/13982: [ 416.140349][ T31] #0: ffffffff8f583b70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 416.206793][ T31] #1: ffffffff8e41d708 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 416.270714][ T31] 2 locks held by syz.3.2379/14321: [ 416.275992][ T31] #0: ffffffff8f583b70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 416.339266][ T31] #1: ffffffff8e41d708 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 416.397139][ T31] 2 locks held by syz.7.2514/14775: [ 416.402414][ T31] #0: ffffffff8f583b70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 416.478573][ T31] #1: ffffffff8e41d708 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 416.542038][ T31] 1 lock held by syz-executor/15282: [ 416.576783][ T31] 5 locks held by syz-executor/15323: [ 416.582233][ T31] #0: ffff888044b78dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 416.623636][ T31] #1: ffff888044b780b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 416.636771][ T31] #2: ffffffff8f685a88 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 416.663608][ T31] #3: ffff888031641b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 416.681808][ T31] #4: ffffffff8e144c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 416.696775][ T31] 2 locks held by syz.8.2791/15743: [ 416.707699][ T31] #0: ffffffff8f583b70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 416.716398][ T31] #1: ffffffff8e41d708 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 416.744252][ T31] 3 locks held by syz-executor/16295: [ 416.762200][ T31] #0: ffff8880512e4dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 416.786601][ T31] #1: ffff8880512e40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 416.796664][ T31] #2: ffffffff8f685a88 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 416.817011][ T31] 2 locks held by syz.6.3148/16916: [ 416.822283][ T31] #0: ffffffff8f583b70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 416.845473][ T31] #1: ffffffff8e41d708 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 416.863046][ T31] 2 locks held by syz.5.3276/17383: [ 416.884263][ T31] #0: ffffffff8f583b70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 416.896773][ T31] #1: ffffffff8e41d708 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 416.924349][ T31] 2 locks held by syz-executor/17400: [ 416.935667][ T31] #0: ffff8880796a4dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 416.947670][ T31] #1: ffff8880796a40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 416.993999][ T31] 3 locks held by syz-executor/17634: [ 417.011141][ T31] #0: ffff888052134dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 417.027996][ T31] #1: ffff8880521340b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 417.053547][ T31] #2: ffffffff8f685a88 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 417.067394][ T31] [ 417.069785][ T31] ============================================= [ 417.069785][ T31] [ 417.116965][ T31] NMI backtrace for cpu 0 [ 417.116994][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00191-g0e9418961f89 #0 PREEMPT(full) [ 417.117020][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 417.117033][ T31] Call Trace: [ 417.117042][ T31] [ 417.117051][ T31] dump_stack_lvl+0x189/0x250 [ 417.117081][ T31] ? __wake_up_klogd+0xd9/0x110 [ 417.117116][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 417.117143][ T31] ? __pfx__printk+0x10/0x10 [ 417.117186][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 417.117221][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 417.117247][ T31] ? _printk+0xcf/0x120 [ 417.117282][ T31] ? __pfx__printk+0x10/0x10 [ 417.117314][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 417.117338][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 417.117383][ T31] watchdog+0xfee/0x1030 [ 417.117405][ T31] ? watchdog+0x1de/0x1030 [ 417.117433][ T31] kthread+0x70e/0x8a0 [ 417.117478][ T31] ? __pfx_watchdog+0x10/0x10 [ 417.117494][ T31] ? __pfx_kthread+0x10/0x10 [ 417.117523][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 417.117552][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 417.117581][ T31] ? __pfx_kthread+0x10/0x10 [ 417.117610][ T31] ret_from_fork+0x3fc/0x770 [ 417.117633][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 417.117660][ T31] ? __switch_to_asm+0x39/0x70 [ 417.117685][ T31] ? __switch_to_asm+0x33/0x70 [ 417.117709][ T31] ? __pfx_kthread+0x10/0x10 [ 417.117738][ T31] ret_from_fork_asm+0x1a/0x30 [ 417.117780][ T31] [ 417.117788][ T31] Sending NMI from CPU 0 to CPUs 1: [ 417.281930][ C1] NMI backtrace for cpu 1 [ 417.281946][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted 6.16.0-rc5-syzkaller-00191-g0e9418961f89 #0 PREEMPT(full) [ 417.281966][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 417.281977][ C1] RIP: 0010:deref_stack_reg+0x1a2/0x230 [ 417.282001][ C1] Code: ca 80 fa 01 75 46 49 8d 40 08 48 39 d8 0f 97 c1 4c 39 f0 0f 96 c0 20 c8 3c 01 75 30 4c 89 c7 49 89 f7 e8 11 08 00 00 49 89 c6 <48> 8b 5c 24 18 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df [ 417.282016][ C1] RSP: 0018:ffffc900001d68e0 EFLAGS: 00000202 [ 417.282030][ C1] RAX: ffffc900001d71b8 RBX: ffffc900001d0000 RCX: 0000000000000001 [ 417.282042][ C1] RDX: ffffc900001d6a48 RSI: dffffc0000000000 RDI: ffffc900001d7070 [ 417.282054][ C1] RBP: 1ffff9200003ad41 R08: ffffc900001d7070 R09: 0000000000000000 [ 417.282066][ C1] R10: ffffc900001d6a58 R11: fffff5200003ad4d R12: 1ffff9200003ad42 [ 417.282078][ C1] R13: 1ffff9200003ad43 R14: ffffc900001d71b8 R15: dffffc0000000000 [ 417.282091][ C1] FS: 0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 417.282104][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 417.282115][ C1] CR2: 00007ffe22641f70 CR3: 000000000df38000 CR4: 00000000003526f0 [ 417.282129][ C1] Call Trace: [ 417.282135][ C1] [ 417.282147][ C1] unwind_next_frame+0x17c4/0x2390 [ 417.282171][ C1] ? unwind_next_frame+0xa5/0x2390 [ 417.282189][ C1] ? br_handle_frame_finish+0x14b4/0x19b0 [ 417.282212][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 417.282235][ C1] arch_stack_walk+0x11c/0x150 [ 417.282259][ C1] ? br_nf_hook_thresh+0x3c6/0x4a0 [ 417.282280][ C1] stack_trace_save+0x9c/0xe0 [ 417.282301][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 417.282329][ C1] kasan_save_track+0x3e/0x80 [ 417.282346][ C1] ? kasan_save_track+0x3e/0x80 [ 417.282362][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 417.282378][ C1] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 417.282397][ C1] ? skb_clone+0x212/0x3a0 [ 417.282419][ C1] ? br_flood+0x414/0x6a0 [ 417.282432][ C1] ? br_handle_frame_finish+0x14b4/0x19b0 [ 417.282479][ C1] __kasan_slab_alloc+0x6c/0x80 [ 417.282528][ C1] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 417.282555][ C1] ? skb_clone+0x212/0x3a0 [ 417.282581][ C1] skb_clone+0x212/0x3a0 [ 417.282605][ C1] br_flood+0x414/0x6a0 [ 417.282628][ C1] br_handle_frame_finish+0x14b4/0x19b0 [ 417.282657][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 417.282684][ C1] ? ip6t_do_table+0x1db/0x1560 [ 417.282710][ C1] ? nf_hook_slow+0x176/0x220 [ 417.282732][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 417.282752][ C1] br_nf_hook_thresh+0x3c6/0x4a0 [ 417.282778][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 417.282799][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 417.282819][ C1] ? nf_nat_ipv6_in+0x1fc/0x2b0 [ 417.282842][ C1] br_nf_pre_routing_finish_ipv6+0x948/0xd00 [ 417.282864][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 417.282889][ C1] ? br_nf_pre_routing_ipv6+0x42f/0x6b0 [ 417.282911][ C1] br_nf_pre_routing_ipv6+0x37e/0x6b0 [ 417.282935][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 417.282958][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 417.282980][ C1] ? br_nf_pre_routing+0x720/0x1470 [ 417.283004][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 417.283022][ C1] br_handle_frame+0x97f/0x14c0 [ 417.283058][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 417.283076][ C1] ? rcu_lockdep_current_cpu_online+0x37/0x120 [ 417.283100][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 417.283118][ C1] ? __pfx_rcu_read_lock_bh_held+0x10/0x10 [ 417.283142][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 417.283161][ C1] __netif_receive_skb_core+0x10de/0x4180 [ 417.283184][ C1] ? ip6_mc_input+0x9c3/0xbe0 [ 417.283215][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 417.283230][ C1] ? ip6_rcv_finish+0x29a/0x2d0 [ 417.283254][ C1] ? NF_HOOK+0x30c/0x3a0 [ 417.283275][ C1] ? skb_orphan+0xaf/0xd0 [ 417.283305][ C1] ? process_backlog+0x2d5/0x14f0 [ 417.283323][ C1] ? process_backlog+0x2d5/0x14f0 [ 417.283342][ C1] __netif_receive_skb+0x72/0x380 [ 417.283358][ C1] ? process_backlog+0x2d5/0x14f0 [ 417.283377][ C1] process_backlog+0x60e/0x14f0 [ 417.283393][ C1] ? __lock_acquire+0xab9/0xd20 [ 417.283417][ C1] ? __pfx_process_backlog+0x10/0x10 [ 417.283457][ C1] __napi_poll+0xc4/0x480 [ 417.283472][ C1] ? net_rx_action+0x46d/0xe30 [ 417.283492][ C1] net_rx_action+0x707/0xe30 [ 417.283509][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 417.283545][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 417.283589][ C1] handle_softirqs+0x286/0x870 [ 417.283611][ C1] ? run_ksoftirqd+0x9b/0x100 [ 417.283655][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 417.283674][ C1] ? preempt_schedule_common+0x83/0xd0 [ 417.283703][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 417.283725][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 417.283743][ C1] run_ksoftirqd+0x9b/0x100 [ 417.283766][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 417.283788][ C1] ? __pfx_ksoftirqd_should_run+0x10/0x10 [ 417.283813][ C1] ? smpboot_thread_fn+0x5f4/0xa60 [ 417.283834][ C1] smpboot_thread_fn+0x53f/0xa60 [ 417.283855][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 417.283881][ C1] kthread+0x70e/0x8a0 [ 417.283908][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 417.283928][ C1] ? __pfx_kthread+0x10/0x10 [ 417.283954][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 417.283979][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 417.284006][ C1] ? __pfx_kthread+0x10/0x10 [ 417.284031][ C1] ret_from_fork+0x3fc/0x770 [ 417.284051][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 417.284074][ C1] ? __switch_to_asm+0x39/0x70 [ 417.284097][ C1] ? __switch_to_asm+0x33/0x70 [ 417.284120][ C1] ? __pfx_kthread+0x10/0x10 [ 417.284146][ C1] ret_from_fork_asm+0x1a/0x30 [ 417.284179][ C1] [ 417.904855][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 417.911793][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00191-g0e9418961f89 #0 PREEMPT(full) [ 417.923644][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 417.933748][ T31] Call Trace: [ 417.937068][ T31] [ 417.940031][ T31] dump_stack_lvl+0x99/0x250 [ 417.944677][ T31] ? __asan_memcpy+0x40/0x70 [ 417.949316][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 417.954560][ T31] ? __pfx__printk+0x10/0x10 [ 417.959208][ T31] panic+0x2db/0x790 [ 417.963164][ T31] ? __pfx_panic+0x10/0x10 [ 417.967629][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 417.973478][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 417.978879][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 417.985076][ T31] watchdog+0x102d/0x1030 [ 417.989447][ T31] ? watchdog+0x1de/0x1030 [ 417.993903][ T31] kthread+0x70e/0x8a0 [ 417.998020][ T31] ? __pfx_watchdog+0x10/0x10 [ 418.002717][ T31] ? __pfx_kthread+0x10/0x10 [ 418.007351][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 418.012619][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 418.017857][ T31] ? __pfx_kthread+0x10/0x10 [ 418.022491][ T31] ret_from_fork+0x3fc/0x770 [ 418.027212][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 418.032373][ T31] ? __switch_to_asm+0x39/0x70 [ 418.037183][ T31] ? __switch_to_asm+0x33/0x70 [ 418.041988][ T31] ? __pfx_kthread+0x10/0x10 [ 418.046621][ T31] ret_from_fork_asm+0x1a/0x30 [ 418.051451][ T31] [ 418.054885][ T31] Kernel Offset: disabled [ 418.059220][ T31] Rebooting in 86400 seconds..