last executing test programs: 3m31.547101684s ago: executing program 32 (id=1644): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x25dfdbff, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffe}, {0x7d}}, [@tmpl={0x144, 0x5, [{{@in=@local, 0x4d6, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44}, {{@in6=@remote, 0x0, 0x3c}, 0x2, @in6=@dev}, {{@in6=@mcast2, 0x0, 0x6c}, 0x0, @in=@multicast1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x6c}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {{@in=@remote, 0x0, 0x33}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x10}, 0x0, 0x5}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3m30.673945413s ago: executing program 33 (id=1647): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) (async, rerun: 64) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000000c0)={0x40, 0x3, 0x2}, 0x10) (async, rerun: 64) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) (async) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r6 = socket$inet(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async, rerun: 64) r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) (async) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000400)={{{@in=@dev={0xac, 0x14, 0x14, 0xd}, @in6=@private0, 0x4e23, 0x1, 0x4e21, 0x0, 0x2, 0x80, 0x30, 0x73, r10}, {0x7, 0x1, 0x8, 0x1, 0x0, 0xe, 0x80000001, 0x6}, {0x1c6, 0x3, 0x20000000000000, 0x4}, 0x400, 0x6e6bb0, 0x0, 0x0, 0x2, 0x3}, {{@in6=@mcast1, 0x4d3, 0x2b}, 0x2, @in=@local, 0x3504, 0x1, 0x3, 0x6, 0x7, 0x8}}, 0xe8) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @local}}}, &(0x7f0000000280)=0x84) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x108}, 0x1, 0x0, 0x0, 0x40008040}, 0x404c0) 2m19.419546799s ago: executing program 34 (id=2211): connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x3, &(0x7f0000000400)=[{0x7, 0x6, 0x3, 0x1}, {0xfffc, 0x8f, 0x6, 0x8}, {0x2, 0x9, 0x2, 0x1}]}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='rxrpc_tx_ack\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) r1 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'hsr0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000191c0)=ANY=[@ANYBLOB="010000000b000000050010000200000000000000", @ANYBLOB, @ANYRES32=r3, @ANYRES32, @ANYBLOB="0000000002"], 0x48) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033c88e160d2745a91b08363bcc34006d0009788455ec9ad10b24"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r4) r6 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f0000000840)=ANY=[], 0xd8) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x40) sendmmsg(r6, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @dev={0xfe, 0x80, '\x00', 0x16}, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040) sendmsg$NFC_CMD_LLC_GET_PARAMS(r5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$NLBL_MGMT_C_PROTOCOLS(r5, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x40800}, 0x8891) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa082, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 2m17.896803863s ago: executing program 35 (id=2227): bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) shutdown(r0, 0x1) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'sit0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x9, 0x10, {{0x5, 0x4, 0x1, 0x12, 0x14, 0x67, 0x0, 0x9, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x3b}}}}}) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x8000000004) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010829bd7000567960a42f2fef00", @ANYRES32=0x0, @ANYBLOB="0001000004200400080004000005000008001b0000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x884) 2m13.375549732s ago: executing program 36 (id=2280): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'dummy0\x00', &(0x7f0000000200)=@ethtool_perm_addr={0x4b, 0x2b, "4372070000000000476fb2be4c3f9725f0f2bf568d62c050880594c23d36147b586c9a7affa71b5e223700"}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r3 = socket$inet(0x2, 0x1, 0x100) getsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000340)=""/83, &(0x7f00000000c0)=0x53) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b88fcff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) 2m12.52663329s ago: executing program 8 (id=2365): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000080000000000000000000080850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r1}, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bdaa, 0xffffffff, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {0xc, 0xffe0}, {}, {0xf, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x5, 0x0, 0x63}}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40010}, 0x20040054) 2m12.287801387s ago: executing program 8 (id=2369): r0 = socket(0x2, 0x80805, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x27, 0x800, 0x5, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x4) write(r1, &(0x7f0000000000)="05000000010006", 0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0x83, 0x8, 0x2, 0x6, 0x0}, &(0x7f00000000c0)=0x10) sendmmsg$inet_sctp(r0, &(0x7f0000000280)=[{&(0x7f0000000080)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000340)="00e9b72f", 0x4}], 0x1, &(0x7f0000000100)=[@sndinfo={0x20, 0x84, 0x2, {0x1, 0xa, 0xff, 0xf, r3}}, @init={0x18, 0x84, 0x0, {0x0, 0x5, 0x0, 0x7}}], 0x38, 0x800}], 0x1, 0x4008080) 2m12.191992116s ago: executing program 8 (id=2370): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xf}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x40, 0x0}, 0x0, 0x3}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}}) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$rds(0x15, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000440)={0x0, 0x0, 0x3, 0xfffffffffffffff9, 0x9, 0x0, 0x8000000000, 0x800000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r7 = accept4(r6, 0x0, 0x0, 0x80000) setsockopt(r7, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) recvmmsg(r7, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000640)}, 0x5076}], 0x1, 0x20, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f00000005c0)={'sit0\x00', 0x0, 0x40, 0x7800, 0xa, 0x7, {{0x17, 0x4, 0x1, 0x1, 0x5c, 0x64, 0x0, 0x1, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@timestamp_prespec={0x44, 0x2c, 0x41, 0x3, 0x7, [{@private=0xa010102, 0x3}, {@empty, 0x7fff}, {@loopback, 0xa3c}, {@rand_addr=0x64010101, 0x800}, {@empty, 0x20004}]}, @ssrr={0x89, 0x7, 0x9, [@multicast1]}, @ssrr={0x89, 0xffffffffffffff1f, 0x3d}, @rr={0x7, 0xb, 0x78, [@loopback, @local]}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @multicast}, 0x14, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'team0\x00'}) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000180)=0x5, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x390, 0x1d0, 0x5802, 0x294, 0x0, 0x294, 0x310, 0x378, 0x378, 0x310, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff, 0xff000000], 'veth0_to_hsr\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x2, 0x80}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe5f6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}, {{@ipv6={@loopback, @remote, [], [0x0, 0x0, 0x0, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x81}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x1, 0x0, 'netbios-ns\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB='fi'], 0x0) ioctl$sock_SIOCBRDELBR(r5, 0x89a1, &(0x7f0000000100)='wg0\x00') 1m57.167224336s ago: executing program 37 (id=2370): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xf}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x40, 0x0}, 0x0, 0x3}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}}) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$rds(0x15, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000440)={0x0, 0x0, 0x3, 0xfffffffffffffff9, 0x9, 0x0, 0x8000000000, 0x800000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r7 = accept4(r6, 0x0, 0x0, 0x80000) setsockopt(r7, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) recvmmsg(r7, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000640)}, 0x5076}], 0x1, 0x20, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f00000005c0)={'sit0\x00', 0x0, 0x40, 0x7800, 0xa, 0x7, {{0x17, 0x4, 0x1, 0x1, 0x5c, 0x64, 0x0, 0x1, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@timestamp_prespec={0x44, 0x2c, 0x41, 0x3, 0x7, [{@private=0xa010102, 0x3}, {@empty, 0x7fff}, {@loopback, 0xa3c}, {@rand_addr=0x64010101, 0x800}, {@empty, 0x20004}]}, @ssrr={0x89, 0x7, 0x9, [@multicast1]}, @ssrr={0x89, 0xffffffffffffff1f, 0x3d}, @rr={0x7, 0xb, 0x78, [@loopback, @local]}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @multicast}, 0x14, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'team0\x00'}) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000180)=0x5, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x390, 0x1d0, 0x5802, 0x294, 0x0, 0x294, 0x310, 0x378, 0x378, 0x310, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff, 0xff000000], 'veth0_to_hsr\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x2, 0x80}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe5f6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}, {{@ipv6={@loopback, @remote, [], [0x0, 0x0, 0x0, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x81}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x1, 0x0, 'netbios-ns\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB='fi'], 0x0) ioctl$sock_SIOCBRDELBR(r5, 0x89a1, &(0x7f0000000100)='wg0\x00') 1m54.900413065s ago: executing program 38 (id=2386): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) unshare(0x6a040000) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x6180, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000ac0)=ANY=[@ANYBLOB="09c9849d490fffffffff000000000000000900403a00fe8000000000000000000000000000bbff020000000000000000000000000001030090780000000060b3a21a00000000fe8000e2000000000000000000000000fc000000000000000000000000000000840000000000000083098ece0f967fda"], 0x0) unshare(0x10000400) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000240)={0x2002, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x458b41, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) (async) sendmmsg(r2, &(0x7f0000000dc0)=[{{&(0x7f0000000280)=@caif, 0x80, &(0x7f0000000040)=[{&(0x7f0000000300)="d88e1a583b9ef0314fd23b9299feb607a5e9b89dd67d52c90f6e8ad8d463a61b29a5a5f45bd7e6fb3418c27b136b1e26ca4bd9b2978bc1e7bb343aff89228418d7341091c0ff3da11d4f77e72ead278624d8767b21804d36cb1e581dbcc10da54445be881251c6e922d0a1018b6ba64d", 0x70}], 0x1, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x258}}, {{&(0x7f00000003c0)=@generic={0x2c, "0b312849457055c6c39b525cd476e45bceaf231c4c4946e44ee02086fcf19930890fcc343301d0f345aceeead4bf313360f3a1b712a978eac7654e6c3934e18b6811af19ac64056f23e1a37d26194230c0b83cfd7e4a270496e207fe9b0f46b1504e056d0b0112b56b232aa1a5c84f99d40a918e20ff54f850edcd008da5"}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000600)="d9489ceb40d18efc49b88972b1ad8f4cd4c851dc5aeb09bcf1e3231592f007f1edc90df2e3a3d15ca13073b6da1b518151c700391f67619c7d0caca4b8025e7ea2753e6e25ea91504e35ce976eb882cf184cb36e81eb1b1c73f9289e5d5451a2cc6b44bcc7d0f429e74e2309562b094cd11e9ee5497ac970b56e4bb411f996e609ff6996398e8e38d2210e8a0a82e4a8a46ac6be8c91e2f36f189683899f136eab2e9e102f061e8221126897e7ec342fbcae2185a9b733ae79623f5dee1bd68750729b08d285880caadd94a085", 0xcd}, {&(0x7f00000000c0)="3f12016ee080e18daddf5d", 0xb}, {&(0x7f0000000700)="88c37e6f9222385f938d4b48927f3e2c61c1586836f22953bbea02be445f8a148c02a12e86fbc913b044c18171d27599f22e1609729028bb99ac4e9b03a9f72709346e215ee254d7ee166bbdb8d4e036f4d859a0032170ba9a306092e42e648208e4539ad6cb6b1e9ebcf948202a6d4c", 0x70}, {&(0x7f0000000140)="4d10da65e0", 0x5}, {&(0x7f0000000780)="76b288e2d144dcf059de343dada2d3c764c317cb65029eec538ef1a83ff5bf87e3cface0ae82ec65ec9532504a12509fecb575847543d08787f303554e492a08b388212322fd5addc022a26b", 0x4c}, {&(0x7f0000000200)="b9675bc1308777", 0x7}], 0x6, &(0x7f0000000880)=[{0x70, 0xff, 0xd3, "0bbb42e010e01ae06e17d7a95b61bec49215f0a90b0c47936f7a6d0d62f2acb7636f51b068c7327bd23d6123c4b80c0493a410c8b5777019801a893ce1c2084df896f45a392a38d641a5bfc2ef78bf7db543144ba671c22e611c"}, {0xf8, 0x11, 0x8000, "b3095e17d267dd3369b06407b2b949637936deecb27b0369242e3b61e45ab2b88c94e43bd529e27e036f13960553eece1b58eb9e499e472b5d66194caea13951abf3dd7cfad5e86436721e18a54236391f476a94b6ea795608d357ef68fa4671957a9c96effa9aaac83130d3b36626b499b2e78f5d4b916e77e3f4e646c5f518ede79e975fd74bf7d9a6f116a7902fa38e8639a001e106b815822a438e203ec30be0c05aa75d1599f35ea6dcd9e1c65a5ae3512385235d6c5a55ab9b155940449ad5cc429b7c986d74905f07da176ef459146f4155f8a64e5820733fd3aed8e57e"}, {0x90, 0x104, 0x7, "b44516dfe2e16b84bb08fe1fde93960406b6b05379f64a3b0bfa1296e8386093881fdbe9ef6194970bf630a632a3f274e37645db81c30cc42a3544fa419586ef94ca1a4ddc0b477ee7f91a886c928f72b5c58c4eb7e2cb9dac20ba70bdc4509430552131610c45a02c17fd7fe08c3fa78c3a03248a100e5ed5516ebf"}, {0xc0, 0x84, 0xffffffff, "fc29d429fe2cd016836d8a3191d3376ee0d87d76febae949fa3357a05af92029eb0e12602dc91e83e26f86c56c51305a0104c4f9d11e172117971c12e702019f483e770af648754b0bc96f1316a46d33f0103b98e2e29e253223085d9693e400d5f5249ebc8f71eb3cc8fcbad911861c29a9b1b9d7d5cf444ec2cee9c57df1e7d5ae6fba2a22b9f8be9455f6fac350835b64635fdea226abf5afc2bc9b0d66c5a8195c0442a09bd0e538"}, {0x100, 0x110, 0x2, "b337379784ac2cbd4c9b43274d671606028e8d1ce4ef044586b24ded3daae99247ea48d387006bfd11e643e81ba283b8aa440d5d6fab6402e56a6b5c7394f430e991f047594684679dc1effb105155d7e388c85e900c4224a74b106c80250b522c6d40671bd75c594deabed5b77f20a8d464d435f89b6ca84b4ed69d24c0f67696a0e7372924a6bfe5b4bcc510ec7e1a01a475078a11de8ea8619e988f42d821d3287848ff72ef24acc88cfd903ca1a90fc6d7846cf818214b7d317c60ad401c7763808892cdf7a048604b271d0baf6ace590013d36f0091f5a53e4b8f33c408ad89c996d29f5ab051"}, {0x100, 0x103, 0xe0a3, "075670daa86125b2c979d3ffa3aafca67bfc30db7627f1d50841d4aa776b3385123cda36e5543f3cdfb53f0a4262facfe627f23708f53bcac726deef4e8a3754e5f35c214fe22e386cf00bd8957c4a95546479017653a33a27d4db05d4bd9f22052aaa851a30544b966c6a775d29ab591e30efc9f7669bae78e5bcdff62ca726133b19876bf672f0dd6c25f9058b19cdcdb591ee02b42240d602d64774712c4930d0f31292177eabd7a7fe512697f62d95bad80c9bc1636bd64ea33efbb689a480f7e3366cd50eb29f64f910d1b8c398731a6ca71c8a720d6ee695e762f7189264f279ba4d2ce2048188e67a17aaef"}, {0x58, 0x138, 0x9, "b37155be1104834416a3b2595980e5caac859a3a71af9e86c36e58ebbf3c6ba6b7808d824d041fd9aaacde1018f9393a1d4a8f2dc20c94c4f966026f38c9d6b7f1c9"}], 0x510}}], 0x2, 0x2000c884) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0xfc}]}) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xba, 0x1, 0x8}]}) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001180)=ANY=[@ANYRESHEX=r0, @ANYRES16=r2, @ANYRESOCT=0x0], 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x800) (async) setsockopt$inet_int(r2, 0x0, 0xd, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 1m43.428458022s ago: executing program 39 (id=2465): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) unshare(0x6a040000) (async) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000680000006800000002000000000000000000000d0a000000000000000200000604"], &(0x7f0000000f40)=""/4089, 0x82, 0xff9, 0x5}, 0x20) accept4(r0, 0x0, 0x0, 0x80800) (async) shutdown(r0, 0x0) (async) r1 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x6180, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1}, 0x48) (async) r2 = socket(0x8, 0x0, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="0d4201f3951384", 0x7}], 0x1}}], 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) (async, rerun: 64) ioctl$sock_netrom_SIOCADDRT(r2, 0x6180, 0x0) (rerun: 64) 1m32.990017406s ago: executing program 40 (id=2556): unshare(0x6a040000) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x804) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) unshare(0x600) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206010800000000000000000000000014000780080011400000000005001500000000000500010006000000050005000a00000005000400000000000900020073797a300000000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) (async) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x4) (async) sendmmsg$inet(r3, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="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", 0x999}], 0x1}}], 0x1, 0x40) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) (async) sendto$inet(r3, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) (async) write(0xffffffffffffffff, 0x0, 0x0) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000006c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x2, 0x4, 0x1, {0xa, 0x4e20, 0x2ca0, @private2, 0x80000000}}}, 0x32) 1m25.999740099s ago: executing program 41 (id=2594): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) socket$isdn_base(0x22, 0x3, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000010c0)={0xff, 0x0, 0x5, 0x1, 0x4, 0x0, [{0x8, 0x2, 0xd, '\x00', 0x8}, {0x8, 0x7, 0x5, '\x00', 0x400}, {0x5, 0x0, 0x3ff, '\x00', 0x508}, {0x5, 0x8, 0x5227526d, '\x00', 0xd}]}) socket$unix(0x1, 0x1, 0x0) r4 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x62040200) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r5}, 0x50) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000300)={'gre0\x00', 0x0}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r6}, 0x38) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000a40)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r8 = accept4$alg(r7, 0x0, 0x0, 0x80800) sendmmsg(r8, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000001c0)="c7", 0x1}, {&(0x7f0000000280)='\\', 0x1}], 0x2}}], 0x1, 0x0) r9 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r9, &(0x7f00000013c0)=[{0x0}, {&(0x7f00000000c0)=""/4092, 0xffc}], 0x2, 0x5, 0x45) shutdown(0xffffffffffffffff, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x3db66e6159adff3, 0x10100, 0x0) unshare(0x42020000) 1m20.891421594s ago: executing program 4 (id=2763): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$key(0xf, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01050000000000000000010000000900010073797a30000000000900030073797a300000000058000000060a010400000000000000000100000008000b4000000000300004802c0001800b000100736f636b657400001c0002800800014000000003080002400000000b0800f3ffffffff220900010073797a300000"], 0xcc}}, 0x0) unshare(0x6a040000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="62a02a3a3409777272"], 0xa) connect$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000022c0)="f1", 0x1}], 0x1}, 0x20008045) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r7, 0x4000000, 0x2000, 0xdc0, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000100)={'veth0_vlan\x00', {0x2, 0x4e20, @broadcast}}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r8, &(0x7f00000001c0)={0x1f, @any, 0xfc}, 0xa) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x85}, 0x40014) connect$bt_rfcomm(r8, &(0x7f00000000c0)={0x1f, @any, 0x9}, 0xa) shutdown(r3, 0x1) 1m6.776591999s ago: executing program 42 (id=2758): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0xfffe0000}, 0x1c) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/223, 0xdf}, {0x0}], 0x2}, 0x80000001}], 0x1, 0x836b, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r4 = socket$packet(0x11, 0x3, 0x300) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x4c}}, 0x40000) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r5, r5, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r8, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) 1m5.294370289s ago: executing program 43 (id=2763): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$key(0xf, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01050000000000000000010000000900010073797a30000000000900030073797a300000000058000000060a010400000000000000000100000008000b4000000000300004802c0001800b000100736f636b657400001c0002800800014000000003080002400000000b0800f3ffffffff220900010073797a300000"], 0xcc}}, 0x0) unshare(0x6a040000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="62a02a3a3409777272"], 0xa) connect$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000022c0)="f1", 0x1}], 0x1}, 0x20008045) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r7, 0x4000000, 0x2000, 0xdc0, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000100)={'veth0_vlan\x00', {0x2, 0x4e20, @broadcast}}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r8, &(0x7f00000001c0)={0x1f, @any, 0xfc}, 0xa) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x85}, 0x40014) connect$bt_rfcomm(r8, &(0x7f00000000c0)={0x1f, @any, 0x9}, 0xa) shutdown(r3, 0x1) 1m2.045172163s ago: executing program 44 (id=2771): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a300000000014000000020a0300000000000000000002000003140000001100010000000000000000000000000a187b639904240561e0b40fc7cf272a8c0d2c243cb41c4c5756d5a706f03839db5356ed1f7c498ef773120872b92cda58384e329ca65b12cf45072d05fb4b984251c3c7"], 0x68}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00006d2a56c27b0000000000000000000000000000000000006fa480b5f2d1ff1d70d2c6f08719b8b70b471869da15", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0200"/28], 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000feff030000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000bebd405a8c3adf4c5ca295c8e90000000000000000000000ac0f2b64de00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x10, 0xf, &(0x7f0000000600)=ANY=[@ANYRESDEC=r0, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b70300000000000035090100000000009500000000000000bf9800000000000056080000000000008500000007000000b700000000000000950000000000000032224fe8f63a7969f662cebb579e40799c59065d7b4376eb930400000000000000caec85b6d4d9b2246ac241f8f29438966a38aad1d4a4038d68841ea3bbfdea87ae7168f29a9e87159b31aae07f1c8bad2513b45e018163649bf36200"/182], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xf2e8a000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x7fff, @ipv4={'\x00', '\xff\xff', @loopback}, 0x85}}, 0x0, 0x0, 0x80003fb, 0x0, 0x32, 0x4}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="cc", 0x1}, {&(0x7f00000000c0)="8eabd4c0c48034d70c6006aaf0e953151d41e3aa438ad0f818f3ca6e230aa5b077a897a5165d32bd5407444338d4e74dc23e09008a2002a672aaa2b99549da614d74314e1666d923815da827281bee2de6eda534b2496123977149b4e7a4868d036ec6dc798458742e9c158e0c7d81a62785b97a0cc5", 0x76}], 0x2}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}], 0x1}}], 0x2, 0x4048894) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r4, &(0x7f0000000940), 0x10) clock_gettime(0xfffffffffffffff1, &(0x7f0000000040)) close(0x3) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x9, 0x0, 0x2, 0x9, 0x9, 0x0, 0xa77a, {0x0, @in6={{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff5}}, 0x74, 0x7, 0x3, 0x8, 0x7}}, &(0x7f0000000280)=0xb0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x6, @mcast2}, 0x1c) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0), 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 1m0.883992313s ago: executing program 0 (id=2828): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000001000010458cb08750000002300"/27, @ANYRES32=0x0, @ANYRES64=r2], 0x60}, 0x1, 0x0, 0x0, 0xcbf2b2b85a7292bb}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x2, 0xfffffffd, 0x6}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x1, 0x4}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m0.883815051s ago: executing program 8 (id=2811): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, 0x0, 0x4040000) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x3c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x3c}}, 0x0) (fail_nth: 5) 1m0.287584476s ago: executing program 8 (id=2829): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000004a40)={0x28, 0x2b, 0xb, 0x0, 0x0, {0x7}, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x30004}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x10, 0x0, 0x0, @str='\x88H'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4881}, 0x2000c010) clock_gettime(0x0, &(0x7f0000000200)) socket$kcm(0x29, 0x2, 0x0) ppoll(&(0x7f00000001c0)=[{r0, 0x200}], 0x1, 0x0, 0x0, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5000007, 0x110, r0, 0xc7e17000) write$rfkill(r0, &(0x7f0000000340)={0x5, 0x4, 0x2, 0xfc}, 0x8) r2 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r3, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r3, &(0x7f0000000100)=""/113, 0x71) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffcf) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x10, 0xfffffffe}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f00000002c0)=@get={0x1, &(0x7f0000000480)=""/228, 0x2}) r5 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@loopback, @in6=@remote, 0x400, 0x56, 0x2, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0xdffffffffffffffb, 0x2000000, 0xfffffffffffffffe}, {0x7, 0x0, 0x104, 0x800000000000000}, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2b}, 0xa, @in=@multicast2, 0x3506, 0x4, 0x0, 0x0, 0x8, 0x0, 0x1ff}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@mpls_delroute={0x30, 0x19, 0x400, 0x70bd2c, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0x11, "498eb9b37af76d8db5fdf87c372d"}}]}, 0x30}}, 0x0) write$cgroup_subtree(r4, &(0x7f00000005c0)=ANY=[@ANYRES64=r1, @ANYRES32=r1, @ANYRES32=r6], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) write$ppp(r3, &(0x7f0000000200)="bc72", 0x2) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000100)) 59.96738263s ago: executing program 0 (id=2830): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, 0x0, 0x4040000) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0xe000, &(0x7f0000000380)={&(0x7f0000000280)={0x3c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x3c}}, 0x0) 59.866283355s ago: executing program 0 (id=2831): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$SIOCGETNODEID(r1, 0x89e1, &(0x7f0000001500)={0x4}) pwritev(r0, &(0x7f0000001480)=[{&(0x7f0000000100)="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", 0x1000}, {&(0x7f0000001100)="f3e541ec59be960a5e374d5664c3ca6e859d2846d5d07e937a967e64479b01465a7b8fbc467f95a4aa38ec1ec543ea7622690f4dd9330767d26ab67d3591b79f4cf6f34c9979887e6937e661a00ab4dde28d0977b0ef6fcbc89d1cdc95e713d83e66215e9d77951c4665fe88ddac502efc3f2c006794c8e7b44f23db2b38ce07e055357874ed6eaa42df235718170fa41567187c0954d437c560d44d9c2d23e6db4bca668b7995c5085ad78769c499234ffebe7028e2c62c7df3a2d75a111eda40a775941ac15b7f7af79d2f1a1e4153a5cb592f79a365f78e", 0xd9}, {&(0x7f0000001200)="ede3a61f8df6cb1673f84844de9efd35a5b018d7dbd7852cde19eff80290cc4f8f30c2969110ba23c606395e21bd2dfe62342c6e4829127e3e308c2abd51033959fba23e4b64adda4c3a66d15f66d474c6be97c650b3beb63440f2f556b46d5e605d9bbc6ae98a82bc0b1298c43b0e40249f97bd16c5", 0x76}, {&(0x7f0000001280)="d1b22c01f58ccb740d42560797847f7f1f39402f53a7d35e0c4a69de2ad21470e8930b9f9a75860d558c4ab75c5a1a3252af8224310dbdf2b803b14d696fa2d22849ef6357b0709f67a9f1eca8e2851dc00ffaf3df86cd071d40d7cfc08a33d17205b4f6b9650002c8c04a1ad9fa3fa7132dc3dc23891635d3355c88986651ce36215c32f1ebdf82b0ff6b554168dbbc2bc962e52b", 0x95}, {&(0x7f0000001340)="4eb0bb0f0ffc2097aa21eeffa1563512f9554814a05323f1f1b345cd03ed3d028293108498ea1c1c12c1eae5b5607d04e574730f58bed5bd8114f508454aa4e59544b5fe05b110df243d9ee7c8b5b431f3a25ef54ba936ca383a8cc2266c1f68f88ab8c3d2439e8e6d1d67053cf62d71ba798ba358b204552bdc10644f4cf18e3e7cc8f42fde5a4ffeb2b4d6aeb8ef6e5f53a4e56ee61893058c3d448bb93bc9f7cbafb4c7a9344e39b981ecdbaf424faa5750a741b5081c5aa7b22749b9517a54448b7ff51f92748c8bd79710bb1bb51bf57e3df01e27aa678f4b1af44243ad52f7bd8947d962d36ffbe212fffeb44e03db15", 0xf3}, {&(0x7f0000000080)}, {&(0x7f0000001440)="e1633b564903f6915515d26ebd712f91628ec2b97936af17348c07da76879a2c6f2a48d729c0f9ab1da446d2117b06b71e303970da474e215dd3b7fa", 0x3c}], 0x7, 0x1, 0xba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="700000001000010029bd7000f4dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000008000200140003007465616d3000000000000000000000000a0001"], 0x70}}, 0x8000) 59.733069782s ago: executing program 0 (id=2832): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x2d75000) recvmmsg(0xffffffffffffffff, &(0x7f0000001b80)=[{{&(0x7f0000000400)=@ax25={{0x3, @rose}, [@remote, @bcast, @null, @default, @default, @remote, @null, @rose]}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000380)=""/23, 0x17}], 0x1, &(0x7f00000004c0)=""/152, 0x98}}, {{&(0x7f00000005c0)=@tipc=@name, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f00000007c0)=""/17, 0x11}, {&(0x7f0000000a40)=""/251, 0xfb}, {&(0x7f0000000800)=""/5, 0x5}, {&(0x7f0000000b40)=""/202, 0xca}, {&(0x7f0000000c40)=""/160, 0xa0}, {&(0x7f0000000d00)=""/191, 0xbf}], 0x7, &(0x7f0000000dc0)=""/87, 0x57}, 0x9}, {{&(0x7f0000000e40)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001d80)=""/210, 0xd2}, {&(0x7f0000000fc0)=""/65, 0x41}, {&(0x7f0000001040)=""/61, 0x3d}, {&(0x7f0000001080)=""/136, 0x88}, {&(0x7f0000001140)=""/98, 0x62}, {&(0x7f00000011c0)=""/210, 0xd2}, {&(0x7f00000012c0)=""/25, 0x19}], 0x7, &(0x7f0000001480)=""/195, 0xc3}, 0x9}, {{&(0x7f0000001580)=@alg, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001600)=""/143, 0x8f}], 0x1}, 0xfffffffa}, {{&(0x7f0000001700)=@qipcrtr, 0x80, &(0x7f0000001a40)=[{&(0x7f0000001780)=""/207, 0xcf}, {&(0x7f0000002d40)=""/4096, 0x1000}, {&(0x7f0000001880)=""/45, 0x2d}, {&(0x7f00000018c0)=""/96, 0x60}, {&(0x7f0000001940)=""/223, 0xdf}], 0x5}, 0x10000}], 0x5, 0x0, &(0x7f0000001ac0)={0x77359400}) 59.652235627s ago: executing program 0 (id=2833): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0xc101}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x28000054) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/217, 0xe5}, {&(0x7f0000000840)=""/127, 0x7f}, {&(0x7f0000000600)=""/134, 0x9f}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000006c0)=""/21, 0x15}], 0x5}, 0x4}], 0x2, 0x60, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) 57.621721488s ago: executing program 0 (id=2834): r0 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="03030000000000001000f68c711ed218e49e24eb08bb8709e93e8fbebcb63c0400000000000000ce6c731833a7fd23cb"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000c00)={'vcan0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="0b03feff4f12021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000d00)={'tunl0\x00', &(0x7f0000000c40)={'syztnl2\x00', 0x0, 0x7889, 0x7800, 0xe, 0xffffff29, {{0x26, 0x4, 0x3, 0x0, 0x98, 0x64, 0x0, 0x4, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @ssrr={0x89, 0xb, 0xe4, [@loopback, @rand_addr=0x64010100]}, @lsrr={0x83, 0x7, 0x19, [@dev={0xac, 0x14, 0x14, 0x1c}]}, @ssrr={0x89, 0x13, 0x78, [@multicast1, @local, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x35}]}, @lsrr={0x83, 0x2b, 0x24, [@rand_addr=0x64010100, @private=0xa010102, @local, @empty, @local, @private=0xa010100, @broadcast, @multicast1, @empty, @multicast2]}, @lsrr={0x83, 0xb, 0xe8, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102]}, @timestamp_prespec={0x44, 0xc, 0xa, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x41}, 0xfff}]}, @rr={0x7, 0x1b, 0x54, [@remote, @multicast2, @loopback, @local, @broadcast, @rand_addr=0x64010101]}]}}}}}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000880)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x0, 0x2, {0x0, 0x0, 0x0, r9, 0x0, 0xc28}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa}]}}}]}, 0x40}}, 0x800) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000001540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001500)={&(0x7f0000000d40)={0x7a8, 0x0, 0x602, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x140, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xd}}, {0x8}}}]}}, {{0x8}, {0x1b4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5c2223cf}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x150}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0x160, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x578}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}, {{0x8, 0x1, r9}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x7a8}, 0x1, 0x0, 0x0, 0x2000c000}, 0x80) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000000)=""/8, 0xfffffffffffffd0b, 0x400123eb, 0x0, 0x1154103478d401ea) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x94, 0x24, 0xe0b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x12, r11, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xd, 0x1], 0x1, [0x5, 0x4, 0x2, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x80000000}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc851}, 0x0) r13 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r13, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 57.449594275s ago: executing program 8 (id=2835): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x0, 0x1a}, 0x28) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000680)=ANY=[@ANYRES8, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x100000, 0x0, 0x0, 0x40f00, 0x56, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4, 0x0, 0x3e}, 0x18) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x8, 0xab00, 0x0, 0x7, {{0x5, 0x4, 0x0, 0x13, 0x14, 0x20, 0x0, 0x2b, 0x2f, 0x0, @empty=0x2f, @broadcast}}}}) 49.183005668s ago: executing program 45 (id=2821): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @loopback}, 0x0, 0x0, 0x3, 0x1}}, 0x2e) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x40, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}}) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$rds(0x15, 0x5, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000440)={0x0, 0x0, 0x3, 0xfffffffffffffff9, 0x9, 0x0, 0x8000000000, 0x800000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x80000) setsockopt(r7, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x40, 0x7800, 0x7, 0x7, {{0x19, 0x4, 0x1, 0x1, 0x64, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, {[@lsrr={0x83, 0x23, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2]}, @ssrr={0x89, 0xb, 0x9, [@multicast1, @local]}, @ssrr={0x89, 0x13, 0x3e, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x42}, @loopback]}, @rr={0x7, 0xb, 0x78, [@multicast1, @local]}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @multicast}, 0x14, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'team0\x00'}) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 44.529639152s ago: executing program 7 (id=2910): bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x2000000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x14, r5, 0x1, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x20400) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x2000000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32=r3], 0x1c}}, 0x0) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e10450108000000000000000000000000000000d796d57fcbab14f2f4a64b301d792758d66e8aed8d6ee6a4dc635b46698c203a488ab6dad41056b1b3379faadbfd5fd92f52310a0cab10d7181453881cc4d410824c699c1fbc417322e35095e64428b4ee717cff06e9ea5738b15c4f970300364e33f1eccd50d0d21b3340e7b9c6473008a89873d86f731d80f4cc176489cfe923b60107e3249010d0", @ANYRES32=r7, @ANYBLOB, @ANYRES32=r3, @ANYRES32=r9, @ANYBLOB="0400000002000000050000000600"/24, @ANYRES32=r1, @ANYBLOB], 0x50) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv4_getrule={0x1c, 0x22, 0x400, 0x70bd2a, 0x25dfdbff, {0x2, 0x80, 0x14, 0x1, 0x2}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x88) 43.426250908s ago: executing program 7 (id=2916): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x33) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000dc0)={{r3, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f00000000c0)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x1c, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000cc0006"], 0x138}}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg(r7, &(0x7f0000009640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1073eedab59a32", 0x7}, {&(0x7f0000000240)="02a2f97a177137003d9b418698b97c81bf1bde7a9b76365fd7b1bbae5f5e09cb9b4432ed011564c718321c92affddb69470547b1baefcdb5445c31a7d34e0b20bddd0e2357b50d72", 0x48}, {&(0x7f00000038c0)="f9db6d4e6ca7d40c978d37d3ea23d92438e15c1b6ce255bbee36e2dd57ae11821c1af092de99be476596eb92bc722e1b34a6ef9d82e4d70fcf379419bfdb759f54b461633cc8099c9cf1a921921f65a149e1bc3789ee998403a87f2f59f5b66b2627741662f5c1ebc1c63385e103734c8639f135f74b6660a0006033de0760b4a70fb6dfb36ad9374cf7f623cbd748fc8b593c521a8e7c790287ce4968ec6fb36c2cac4d2fbd2a408595579e23489649d76df75d416d79057fd7faf3d6a6b8b7f6387c6e0c421d663e3e1585307ad01149f5829b3499748a4c2202db18148844f1cdf7544b7b8c7eae685bd678cdf88eb6443b24035ab0fd678e8a2c79983fb568f57979f7a31293067caf5be041fd38cab2088e5400110024c9b9e5c985ac7472b7991ad56d78bedea9285ad4f9f7b04c3888c33f15ced41146d833770ae6ca503aff03170d8c2cf31ae0578afd708860936241cd7ae3bdb46ec3041b4ac9a2fb158d35bb9f743a8857dfbabc6df23e37a685743760a43da3a2d48be814d0070550f21b71435f7fc2e2c8d4872f1a2ba607cd257f5bce59c453070dc3fe710ffd41c815bbd9a760e70056b9767f17b0084f8c532b504b95550ca445b7c2ccb14250bc66af4dd9cd86bb91d40cd54da79240a457905c892151cbc8cddcdf39ca1b5117043cf0d35127ff44529c6dc6892749d44baa10e4dd7b78b647a65e5c099a8ba6bf790a6b24eb4144255f154b8cb80beff39069da12d0a1be35f39abd7ff8e591822aca3670d8d5846844288e780f", 0x231}], 0x3}}], 0x1, 0x8810) recvmsg$unix(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)=@gettfilter={0x3c, 0x2e, 0x20, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0x7}, {0x7, 0xfff9}, {0xffe0, 0xffe0}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x101}, {0x8, 0xb, 0x81}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f00000006c0)={'gretap0\x00', &(0x7f0000000640)={'syztnl2\x00', 0x0, 0x40, 0x40, 0x8, 0x1, {{0xb, 0x4, 0x1, 0x9, 0x2c, 0x64, 0x0, 0x4, 0x0, 0x0, @broadcast, @multicast2, {[@rr={0x7, 0x17, 0x32, [@empty, @multicast1, @empty, @dev={0xac, 0x14, 0x14, 0x12}, @local]}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x33, 0x800, 0x100, 0x80000000, 0x1b8, 0x1, 0x9, '\x00', r8, r4, 0x5, 0x1, 0x3}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r11, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}, 0x80000001}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)=""/183, 0xb7}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000000000)=""/52, 0x34}, {&(0x7f0000002900)=""/4111, 0x100f}, {&(0x7f0000000340)=""/75, 0x4b}, {&(0x7f0000000500)=""/224, 0xe0}, {&(0x7f00000000c0)=""/237, 0xed}], 0x7}, 0x80000000}], 0x4, 0x4022, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) 43.173793704s ago: executing program 7 (id=2919): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff}, 0x10}, 0x94) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, 0x0, 0x4040000) sendmsg$IEEE802154_DISASSOCIATE_REQ(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8101108}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x3c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x3c}}, 0x0) 43.143165624s ago: executing program 7 (id=2920): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000000)={0x0, 0xf3, "e204ece5daf77431a95b5c6e45204d41b35c19425873a4c8ae549654b36b07cfbc3f677ac85ad9e9ec519d4023e6a7ed9ff434285a32ce4916e0539ba2421fe8d1472c431a852a18868643f24cdf7191d7c931f34e87c3cbc8a067e92b9db07f9b2d339217502e4e0f10ddc15f35f5017b5cc9d85b99f6d8db46c4b868fa4ae617bd48cb648f6a6d3b068bef697e354e4b1fc1434901e9938105d034f7213c029bc1785c546a52ac05c3b5a0b209331509a3511d30dcf1c6f6b55cf22dffd742451bb7bd7e138946b6b29eeb97a72244e347e738e0f55be4ceb88070b136df2688ccaaa928bee4339121834588cddf03ca769d"}, &(0x7f0000000100)=0xfb) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000140)={r2, @in={{0x2, 0x4e20, @multicast2}}, [0x3, 0x1, 0x552a, 0x1, 0x313, 0x1e00, 0x7f, 0x2bf, 0xb2de, 0x4000000000, 0x3000000, 0x5, 0xfffffffffffffff2, 0x0, 0x401]}, &(0x7f0000000240)=0x100) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000280)=""/1, &(0x7f00000002c0)=0x1) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000300)=0x77a, 0x4) r4 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001080)={{{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000001180)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000011c0)={0x0, 0x0, 0x0}, &(0x7f0000001200)=0xc) r8 = getpid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001240)={0x0, 0x0, 0x0}, &(0x7f0000001280)=0xc) r10 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001c00)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001c40)={0x0, 0x0, 0x0}, &(0x7f0000001c80)=0xc) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001cc0)={0x0}, &(0x7f0000001d00)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000001d40)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast1}}, &(0x7f0000001e40)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001e80)={0x0, 0x0, 0x0}, &(0x7f0000001ec0)=0xc) r16 = accept4$inet(r3, &(0x7f0000001f00)={0x2, 0x0, @initdev}, &(0x7f0000001f40)=0x10, 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)="42d6daba9cdcd3ae3a108488795b313ba6ab9ef80fb839afac516bb778619f1f9889cdc120f6944c97e1e7dfec39d363354275a323d7", 0x36}, {&(0x7f0000000380)="1a7fcbc202bb63a48dc484b75bd678293fcda166a750dce6568ce582f712b57958059c7f9a7697f909d7f06e9bbd195a0fae0ae0cd7b131bd29b780b8bff11069fa35b43c429e042311ea833a7f72f6b2bcdbbe032c2ec2d9efa9017a4feb080f7bc5eec629d1159915b3dd3b4eb71d802bcb6ea7c6b52d23fa016d8999089fa99d11afa1cf79fbcdda62a6287a9b9102fb659945486e3b6bb6bdcc1ea1c43f0d67574aaa382c422e0d4ee83c559288b211393", 0xb3}, {&(0x7f0000000440)="c43bf7eebd5323b75450631dcc592c4b3905daa177ab6d312f317b33afa6f22e33552ba721e6dff759d853960bcb6ca810ad388367290206c17277190c1e628d3dcf1725faf5b30ee47be5f0f7bcad99095937bdd26dfc323e5b8cf6c58f7b6ab5ad8ba581cc82bf66e3977ad32d5510ce1234a1aba6c640139e0dda0b6cb49197d4fba49968cbef276c071472bf807f844730db3fca29bcdb02cd9658b836f228b885763960f1260ab9b2e18059cbc9", 0xb0}], 0x3, 0x0, 0x0, 0x50}}, {{&(0x7f0000000540)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000940)=[{&(0x7f00000005c0)="16b4868fab566fc1110d", 0xa}, {&(0x7f0000000600)="ae3cbff2fbb9a14016ac617922a749a8076932e9711189525f77a64dd7ca19c6ef9c807ab7995116b15d68e53d9967a0362d62bc272962caab9df086ebaba6b1d4bc13f524823337804f5b4cb535e1f7bd2e00ad63335b9c25f2a1cb476f4147313fa20668dee95f26b11500097796b46e4d03cee9ef2a8815f6a1db1f0f0b850bdcad03a8695e645b2adf4c5281b2ad8c8745415ea030f976681ff42f", 0x9d}, {&(0x7f00000006c0)="79b02db163e075ec6509c4536d0cd32a21a1bdc590fc17870953e601ab93e4b5c7bcd3ff166f8e6ff58298585a739997b67c092d9536694f4a86534727aaa8afc09b5704388a04fe4d1102450f55f40cddc76f89c3a69637ba051674abb443200bcc4e16a2b397964bf9ca04d637b0edcfcde4f299f3e80d6be46841abe594764701f9498e70c10a4a1bd693af75db72584ad9532fa20a2a186e135362a9eb3ae0d6443b56b8b25d637cb7eba2e24b628f7ae7767ccd3b", 0xb7}, {&(0x7f0000000780)="a8efa03b1997b3290bc2987f774c739a674b6ec9346427052d25ccc20674803a454a3cba3bd1ac5c0b56f1a1447aeb33c2fb076b4810", 0x36}, {&(0x7f00000007c0)="5870da9990df8ed9863e81b507d933a92c2155f9094d0d73eb61d76e3ef0fd1857b46aa2e8647f16e3b5fa49a341469cb3789ee1926df94ba2ae449c3ded858f40fb49adeafbec4828d4c52946225cfdd6b054", 0x53}, {&(0x7f0000000840)="c559809d3879bbe46247feca799da20c271c6efaa1edc9088261d854b2ce023ece77d6f52a398a50e60b193f5e8f9a63e151833bc8606872460744e4bffda2bf4c64c20d7450a3e8c84371991364cd6f0f90b5f0c24accf17371c1d00d4d6136ac4b4d8367e21d10eaedf8c1e66309cc248ec5bb4d80fa9e4e6ce32f1e0e51f0c8afcb96e9e42001e5127cd321d2d7c419e73e1688902400a780e4bf1dd9b8d2e92083e3a35a71ff0e19327f536bf017dcb9aea7ae1c1dcd73a278daa31119df3adb8fbb20787236d9e10d5f7df21ffbeed8ba5ba21fa07d920381369ec9c99a797f1f5b4bafb7", 0xe7}], 0x6, 0x0, 0x0, 0x8001}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f00000009c0)}, {&(0x7f0000000a00)="37aa59ad0914db389aa98673b5ce679e5c76e04e13b507ba89df2eeff26b1214abdf406603acd07a897bcecb0f6ac647f1d56c3ad75625cf226adae0014724e52288cecd851cfb3aacf7d46016e47c749c7b4e0f482812948c6cb524113f40cc7cfc9e12b1de7155a00be5cf289461fc3567674507664d21f702c687edea5e008fac587cae029729", 0x88}, {&(0x7f0000000ac0)="3b4fc7824106d6182b7a36590a5ab12a602b22fb2fa0ec942b1cf29aad97b4f2fae86edafbaf87ca48f226e63c822ccfdd3a48434970eb32b0cf6dcfc85c90f311ab98b4e91e4616e77850882a7bcad5b72c9b419b798dd6c965ba623947838f0646a5abb8d0443d134a03e0", 0x6c}, {&(0x7f0000000b40)="961d5b14fb9b0627e81d122a4b0addd6fbcb2a546df3f81243ea8c97ee61761c5e8e4ce97894bfb270e99b2128f21b614e6cdff08469c9158128ca82c2b43083c4710d560679c090b6ffa7d0a2c87e670617cd86d665e16c35b8c97164240e72201b8273e25224f0189bf70d829331c4e5710874863e96f699411ed9fae05041f9aed8aaf53a51e8366a84d6de2417223b51d8d4f67840ee3bf3e08f541a642d5dd4ae95cfc725c6d4baeac79b1b17cf01ce49f3666dc8b351629b2c83509e59febeec5ce09bccbdd42b7f9f7233bfe90feded25353b0b564e3b", 0xda}, {&(0x7f0000000c40)="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", 0xfb}, {&(0x7f0000000d40)="ccc069358571fdd74c26c5e863d3fd3e141d6091f0e460b5323a0b6e3168ce9e304b5b04ebc6d918b4414eab03c77ba0292d395641cafd23e1ead5174136101ccb6fa590773d6f505fb49d194e0a624604b6408aa59c9db14d87142be4839cad51f1ee47f14fc16c06c14512ca060b4948c34167ddc5c793952ac44bdc7a294ea307bebca6998d915eee70b30580cad8d4c1", 0x92}, {&(0x7f0000000e00)="045c039e5b07205425a6d7ba05201c2c2433c0627ed1f139efda4d78f0e36cc0cc94c9618451479fff271fb0a3840720901a5f1f18b378c6bec9de637124689509d0c36f639b8436c785327400d874325410e79b7d2e5d5b0ecd2965918cec6e3efc8694c857d903a8e4db3beed265563202d14888aa", 0x76}], 0x7, &(0x7f0000000f00)=[@rights={{0x14, 0x1, 0x1, [r4]}}], 0x18, 0x4000800}}, {{&(0x7f0000000f40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001040)=[{&(0x7f0000000fc0)="2a06ba0fcd7f210a02fc6563a7247acb935500b759037db692ec6cb5af8efe2e8fa0642b95869bbff46889875641993aea9b924c97b6e5a051804c5addada5b254f6e708d21bc530e17278958aebea13117b91ccb5b925a2b269d25f5c7107af1ef1ae", 0x63}], 0x1, &(0x7f00000012c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r6, r7}}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r8, 0xffffffffffffffff, r9}}}, @rights={{0x20, 0x1, 0x1, [r1, r0, r1, r1]}}], 0x70, 0x4000000}}, {{&(0x7f0000001340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001540)=[{&(0x7f00000013c0)="471b170fc6e62e35a095d32fbf4af1735f4ba0c42f986920475f2f58717fc98eae6f478ce7c5756fe56690579440bb1c637ebdfff13dd3a85ece50f161d4311e19c7998e628b71c8ffa6712948d64fbc7c5206b21980ea94c8ff8270f834b4009d3c78bb4b8323c866c89c74a22b2bcffb477fd2c253d2ba4feb8a2809aa9d1ad000bd14697033a8ed18beb8244055dc78b4ad9f8e3de3e979ee2acc1797265c61", 0xa1}, {&(0x7f0000001480)="5ca657d5a923ba6ffd5918ab7340eb820eb00d26e05e405f397f1307726af01bd1fa3c15a1121d2789c31b66b4424c3181b3003350386672e0505999c82e515b3b603b96f94d1b4007546362f647d993d99ec7fc454c4e2ffd90f9928ec9a07ac9cc802376d4d7bbd5ddc4b836107d9b610e862e5cbf4676b3c76a818dbf6bb977a75f27e925c3a17dd915d35e72dfaa286cfb3cf417db90300873102d4a193b2e4e98e2758834e17e4e43", 0xab}], 0x2, 0x0, 0x0, 0x1}}, {{&(0x7f0000001580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001b40)=[{&(0x7f0000001600)="17ba891b7b6f734884a58b4b6f0a3d23ffa77a7cf35bcaf7311af062f1cc79329495bd0de524d68c33b0572a9e7fdf1e6c6d990c953d3883b7955594d1b82a56212a509f287d29faa7378a87f786b16b510fe15dff6553aae7f5abf80b", 0x5d}, {&(0x7f0000001680)="60305a80bd0ce5118d75fb0f4585b54bb26cb4aa2cfe073a9a3ead3269fb72d4341c", 0x22}, {&(0x7f00000016c0)="aa6d21fe42074fc0ecde6506a7194cb20be9b4152af200f0405dbd7ce278ebb3968651b541f77ce75588ecd86349f7da1c34f976ca736f3dcde6bf193571f1c8e1da29b3020774fb8917ef8dd7d46e69a9348edb73590e96445d1eff0a71d01ef4505e9e637c4e2943f48261ea1f41407aa5e56af08a8c31af234814712eaf7f0aa1aaed218dce5f12c927c73701e94bd4e0f3121254fb93fcf103986e8ce10c4bef0bb24e7d6e1ff1bdb606", 0xac}, {&(0x7f0000001780)="5dd686abbd52c91fc32ce16a8f346d3f7dbf860fd27412a79a84d2ab41b6f34f2299755dafa7d5c700b3d1348e1975a9f973087ed5b7f0f378ddb824f51a7f450be6158fafa845fccc59ef267f5a5acd69e422488f77b662e0098ab0b71d95c1bd79c204485aa407656c4985bddb503d06220843cdc19e33eb724e0ecaa2c2d72b12d00565bcb4616c032683", 0x8c}, {&(0x7f0000001840)="5b1501a5f7", 0x5}, {&(0x7f0000001880)="b6bc6f4f99c04d85a9573ac12a824dca35c656c4782b24d02289aab089f23e6aa0e72a1dfbe5fc50be1e4df2e15831f146efa30dc1028560f419fc4f82aa23269a0acc1031cf42ceeef6f6be69146eaf4c39198a7187ee2127aded51ba08e571c6da3d255dfed563a4bd9d7bf87ec27bc7875b1f0b4fe8b17cc03f55d5ee", 0x7e}, {&(0x7f0000001900)="7b25111df8a8e14820ddbb343d5433604229e1e966cad16ebe95e2fa033bf344d23ed6d1dc08966904c46a3999c519e2c0f2104dbab327656ae272494006d3e37bab775b941867ef0ba168dadde50b881a0b60abda08bdbe3fe674693cd3e29b8d16d79b949f394fa2", 0x69}, {&(0x7f0000001980)="3878baa92abd95ae3e252380e311235d7b61ccf9e7224ed9f0de97325a1c3c4035c20fe8b12e4383b693df3254c45cc06c8a9c8a22a4bcca1f4471832d735fc6b4e43e5ae145e799dd5de70354a59fa7234fadd99c7890e5244c7c3b104df6c54d1d926368f08c2a66403396d0d020726b1ce3aad6510918485b5c8bd0e27c2d2e62f3070b385c246870a681990dfb1a5bfb11a40b7cdd81f66e29f2f66524c0c578ba9e199f6d258e27586052c287a856ca2292730c50a82168b41d429f89f40c57368641c4416f3f68eaa2b5f4d01d87163338d47da91689ae3f843bf18e309b0a2696105d1607900158e4af91b13a", 0xf0}, {&(0x7f0000001a80)="a50cedb6a162ce57df58b5442311129ae24e5f4b65b50a4932c3abd9a2a7296c3287e3e18ac9be6a2f66f9a1d206c15d9853d649ce334aac00167c64ccb7eb25f0f23cdefba14b559cab17c9a51a119202f66c2a79a66f8177a536b62c8852182acd3053b23ca035131624aa0464d7b11adcc3fcbad22aa8923cb6440ba2ccd34ed3b7894c77ebea8ad191fa", 0x8c}], 0x9, &(0x7f0000001f80)=[@rights={{0x1c, 0x1, 0x1, [r0, r10, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r12}}}, @rights={{0x30, 0x1, 0x1, [r1, r0, r1, 0xffffffffffffffff, r1, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r13, r14, r15}}}, @rights={{0x28, 0x1, 0x1, [r1, r1, r1, r16, r0, r1]}}], 0xb8, 0x80d0}}], 0x6, 0x801) r17 = epoll_create(0x1) epoll_wait(r17, &(0x7f00000021c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0xfffffffd) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000002240)={{{@in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0x29}, 0x4e22, 0x3, 0x4e22, 0x2, 0xa, 0x80, 0x90, 0x2c, r5, r11}, {0x4, 0x1, 0x80000000, 0x7, 0x4, 0x6, 0x2, 0x3}, {0x0, 0x81, 0xff0, 0x1}, 0xe, 0x6e6bb2, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast1, 0x4d2, 0x2b}, 0xa, @in6=@loopback, 0x3503, 0x1, 0x3, 0x2, 0x226, 0x7ff, 0x6}}, 0xe8) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000002340)=0x4b6, 0x4) setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000002380)={r2, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r16, 0x84, 0x64, &(0x7f00000023c0)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0xdb7f, @local, 0x3}, @in6={0xa, 0x4e24, 0x6, @local}, @in6={0xa, 0x4e20, 0x8, @private0={0xfc, 0x0, '\x00', 0xc}, 0x7fff}, @in={0x2, 0x4e20, @rand_addr=0x64010101}], 0x74) socketpair(0x2a, 0x1, 0x9, &(0x7f0000002440)={0xffffffffffffffff}) r19 = syz_genetlink_get_family_id$mptcp(&(0x7f00000024c0), r1) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r18, &(0x7f00000025c0)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002580)={&(0x7f0000002500)={0x4c, r19, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x4c}}, 0x404c000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002800)={r3, 0x0, 0x0, 0x63, &(0x7f0000002600), &(0x7f0000002640)=""/99, 0xc, 0x0, 0xff, 0x40, &(0x7f00000026c0)="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", &(0x7f00000027c0)="d5d1d3092ed7fc9f89a4bd0be35dd06654173666d1f422886470ecbad04fd76c4a7120a78ebb76c8aacb8549355f2c00dcfc125373d703ba7e8278396ed13621", 0x1, 0x0, 0x52}, 0x50) ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f00000028c0)) 42.467343951s ago: executing program 46 (id=2834): r0 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="03030000000000001000f68c711ed218e49e24eb08bb8709e93e8fbebcb63c0400000000000000ce6c731833a7fd23cb"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000c00)={'vcan0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="0b03feff4f12021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000d00)={'tunl0\x00', &(0x7f0000000c40)={'syztnl2\x00', 0x0, 0x7889, 0x7800, 0xe, 0xffffff29, {{0x26, 0x4, 0x3, 0x0, 0x98, 0x64, 0x0, 0x4, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @ssrr={0x89, 0xb, 0xe4, [@loopback, @rand_addr=0x64010100]}, @lsrr={0x83, 0x7, 0x19, [@dev={0xac, 0x14, 0x14, 0x1c}]}, @ssrr={0x89, 0x13, 0x78, [@multicast1, @local, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x35}]}, @lsrr={0x83, 0x2b, 0x24, [@rand_addr=0x64010100, @private=0xa010102, @local, @empty, @local, @private=0xa010100, @broadcast, @multicast1, @empty, @multicast2]}, @lsrr={0x83, 0xb, 0xe8, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102]}, @timestamp_prespec={0x44, 0xc, 0xa, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x41}, 0xfff}]}, @rr={0x7, 0x1b, 0x54, [@remote, @multicast2, @loopback, @local, @broadcast, @rand_addr=0x64010101]}]}}}}}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000880)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x0, 0x2, {0x0, 0x0, 0x0, r9, 0x0, 0xc28}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa}]}}}]}, 0x40}}, 0x800) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000001540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001500)={&(0x7f0000000d40)={0x7a8, 0x0, 0x602, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x140, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xd}}, {0x8}}}]}}, {{0x8}, {0x1b4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5c2223cf}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x150}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0x160, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x578}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}, {{0x8, 0x1, r9}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x7a8}, 0x1, 0x0, 0x0, 0x2000c000}, 0x80) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000000)=""/8, 0xfffffffffffffd0b, 0x400123eb, 0x0, 0x1154103478d401ea) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x94, 0x24, 0xe0b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x12, r11, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xd, 0x1], 0x1, [0x5, 0x4, 0x2, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x80000000}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc851}, 0x0) r13 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r13, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 42.290765124s ago: executing program 47 (id=2835): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x0, 0x1a}, 0x28) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000680)=ANY=[@ANYRES8, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x100000, 0x0, 0x0, 0x40f00, 0x56, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4, 0x0, 0x3e}, 0x18) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x8, 0xab00, 0x0, 0x7, {{0x5, 0x4, 0x0, 0x13, 0x14, 0x20, 0x0, 0x2b, 0x2f, 0x0, @empty=0x2f, @broadcast}}}}) 42.182286107s ago: executing program 7 (id=2930): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000033000103281cc96a45dbdf2506"], 0x14}, 0x1, 0x8000000000000, 0x0, 0x10008090}, 0x8004) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000fbffffff9500000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) sendto$packet(r2, &(0x7f00000001c0)="1005000000ff8200040647", 0xb, 0x0, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x1, 0x6, @broadcast}, 0x14) unshare(0x22020400) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000008000000e27f000001"], 0x48) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10010004}, 0xc, &(0x7f0000000400)={&(0x7f00000007c0)={0xa4, r6, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7eec}]}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="05"], 0x1c}}, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x40000) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff070007003a3a090914"], 0x44}, 0x1, 0x1000000}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r9, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYBLOB='.\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac"], 0x20) 41.986938908s ago: executing program 7 (id=2932): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x39e) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$kcm(0xa, 0x4, 0x87) sendmsg$kcm(r2, &(0x7f0000000580)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x7, @mcast2}, 0x80, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000280)="7cb6482a", 0x4}], 0x2}, 0x40810) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20040810) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 40.166424674s ago: executing program 9 (id=2941): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x4, 0x5, 0x9}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000f00)={'team_slave_1\x00', &(0x7f0000000480)=@ethtool_perm_addr={0x4b, 0x46, "43720700ca0917b3352050360ad4bc4c3f9525f0d2b6796ff2aba584417202d40b4fcdf2227f128a8dd150"}}) socket$pppl2tp(0x18, 0x1, 0x1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000000540)=[{{&(0x7f00000002c0)={0x2, 0x4e21, @local}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="24000000000000000000000007000000441414d3ac1414aa80000001640101000000001140000000"], 0x28}}], 0x2, 0x200c4) r4 = socket$inet6(0xa, 0x80002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB='M'], 0x8) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) sendto$inet6(r4, &(0x7f00000001c0)="daef7623e9ddbc0ec2a10b4f3f38e69bc0", 0x11, 0x801, &(0x7f0000000240)={0xa, 0x4e23, 0x62, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r4, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0) socket$rds(0x15, 0x5, 0x0) unshare(0x20000400) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000040)) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x32}, 0x8) 39.748332085s ago: executing program 9 (id=2943): r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$sock_int(r0, 0x1, 0x1, 0x0, &(0x7f0000000280)) 39.746389482s ago: executing program 9 (id=2944): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000240)=@framed={{0x18, 0x6}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000080), &(0x7f00000000c0)=r5}, 0x20) r6 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x44, 0x2c, 0xf31, 0x70bd28, 0x2000, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FD={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008844}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="183000000701000000"], &(0x7f0000000180)='syzkaller\x00', 0x1, 0x9a, &(0x7f00000001c0)=""/154}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffcf61}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r8, 0x0, 0x6}, 0x18) r9 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r9, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x7c9ce320e12d300) 39.557225056s ago: executing program 9 (id=2946): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x920) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x200, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc001}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@gettaction={0x118, 0x32, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x78, 0x1, [{0x14, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf7c2}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2650dd6d}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x9}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xffffffff}, @action_gd=@TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10}}, {0x14, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x824e}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x10) socket$netlink(0x10, 0x3, 0x9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r9, 0x0, 0xf3a, 0x0) close(r8) write(r6, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0xffffffffffffffff, 0x3e, 0x0, 0x2}, 0xfffffffffffffc8e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r10, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x0, @null, @bpq0, 0x0, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 39.513636381s ago: executing program 5 (id=2947): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x6, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0) write$tcp_congestion(r2, &(0x7f00000001c0)='cubic\x00', 0x6) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x4c84c000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 39.45034582s ago: executing program 5 (id=2948): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9f, 0x0, 0x0, 0x0, 0xe4}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4060040}, 0x2c040000) getpeername$unix(r1, &(0x7f0000000080)=@abs, &(0x7f0000000140)=0x6e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 39.238315338s ago: executing program 5 (id=2949): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f00000004c0)=0x79, 0x14) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg', 0x3) socket$inet6_mptcp(0xa, 0x1, 0x106) recvfrom(0xffffffffffffffff, &(0x7f0000000240)=""/93, 0x5a, 0x530, 0x0, 0xfffffffffffffe49) connect$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r1, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @bcast}, 0x1c) connect$rose(r1, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x0, [@default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @default]}, 0x40) 38.983491818s ago: executing program 9 (id=2950): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) splice(r0, 0x0, r1, &(0x7f00000002c0), 0x6, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x401, @dev={0xfe, 0x80, '\x00', 0x14}}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)="59cd2b9a68010077f68207c1d7a0311230153dca22ecba", 0x17}, 0x1, 0x0, 0x0, 0x4000}, 0x24048016) recvmsg(r2, &(0x7f0000000280)={&(0x7f0000000140)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000240)=""/50, 0x32}, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c00000000010104000000000000000002000000240001"], 0x6c}}, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="d2a2113658050badf139bb3b196fe066db9036266e32539a81a2a4f57541879b22eabb19623507dd7b972580aad3be3edaab744b5fca8a2984a1caf24b976a52442260c8676b3e314209125241", 0x4d}], 0x1}, 0x4000010) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000340)={0x2, 'team0\x00', {0x101}, 0x7}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r7) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7000ffdbdf25080000000c00018008000100", @ANYRES32=r10, @ANYBLOB="180002800c000180"], 0x38}, 0x1, 0x0, 0x0, 0x802}, 0x0) listen(r2, 0x8) recvfrom(r4, &(0x7f0000000080)=""/38, 0x26, 0x40000021, &(0x7f00000000c0)=@in={0x2, 0x4e23, @empty}, 0x80) sendmsg$netlink(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000022000106"], 0x1c}], 0x1}, 0x0) setsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, &(0x7f0000000040)=0x6, 0x4) close(r2) 38.385665141s ago: executing program 5 (id=2951): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x20000000) r2 = socket(0x400000010, 0x3, 0x0) write(r2, &(0x7f0000000200)="fc0000001400073eac093a00090007000aab0800080000000400e293210001c000000000060000000100000009000000fa2c1eff8656aaa79bffffffff0000002d00024000036c6c256f1a272fdf0d11512fd633d4400007f60eb8fa2e6b00000016fd368934d07302ade01720d7d5bbc91a3e2e80772c05f70c9ddef2fe082038f4f8b29d3ef3d92883170efdffffff3ae4f50504000000000040d815b2ccd243f295edbabc7c3f1a5f4e023dd16b176e83df150c3b8829a1ad0a4f41f0d48f6f0000080548deac270e37429f3694dec896592d69d381873cf1582740000000000000001ace36f071d0c22700"/252, 0xfc) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46", 0xd2}], 0x1}, 0x0) epoll_create1(0x0) (async) r3 = socket(0x11, 0x3, 0x2) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r3, &(0x7f00000001c0)={0x11, 0x0, r5, 0x1, 0x2, 0x6, @broadcast}, 0x14) (async) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) (async) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000690005"], 0x28}}, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r7, 0x18000000000002a0, 0x36, 0x0, &(0x7f00000001c0)="b9ff03076003008cb89e08f586dd8f5ddd2c634ee8243db253a204a198f9e036be6057e1b4bb83a638776f501571928f154ba9c43c46", 0x0, 0x4033, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r8) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x38, r9, 0x1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV4ADDR={0x5, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x5, 0x5, @multicast1}]}, 0x38}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f00000000c0)=0x8) 38.230362637s ago: executing program 5 (id=2952): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x100000008, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@broadcast, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) (async) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 38.20800338s ago: executing program 5 (id=2953): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80), &(0x7f0000000dc0)=[{0x80005, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r5, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=ANY=[@ANYBLOB="280000001e00010000000000000000008120"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="bb4b97c9cfff1febd36ed7996021226b3f286dad00b2f3cab72d51c3d506e83e21dee7ee9e468626bb6b4cdaa44887839680fdb57c3409be97a305f65da960b191856609d27d4fc9898f8e939d94f6ec4079103c2dd76f7305b789903cfaa9656686270652373c6c4a3ae3a5da418c5d82f8982e8200a31e1a8ed66c81936171999a953279dad57b1d265c03f8b2151d", @ANYRES16=r7, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r9, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="848cdb44080211000001080211000000080d000000000000000000000000000064000100010882848b960c121824"], 0x2e) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000a40)=@data_frame={@a_msdu=@type11={{0x0, 0x2, 0x8, 0x1, 0x1, 0x1}, {0xbe}, @device_b, @device_b, @initial, {0x3, 0xa6}, @broadcast, @value={0x4, 0x0, 0x1, 0x1, 0xa4}}, @random="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"}, 0x1a7) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) 38.087489775s ago: executing program 9 (id=2954): socket$unix(0x1, 0x1, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x4000) r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x8002a000}) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) unshare(0x62040200) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) getsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000005c0), &(0x7f0000000600)=0x4) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000000180), 0x3db66e6159adff3, 0x10100, 0x0) 26.92375025s ago: executing program 48 (id=2932): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x39e) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$kcm(0xa, 0x4, 0x87) sendmsg$kcm(r2, &(0x7f0000000580)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x7, @mcast2}, 0x80, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000280)="7cb6482a", 0x4}], 0x2}, 0x40810) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20040810) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 23.020139254s ago: executing program 49 (id=2954): socket$unix(0x1, 0x1, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x4000) r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x8002a000}) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) unshare(0x62040200) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) getsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000005c0), &(0x7f0000000600)=0x4) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000000180), 0x3db66e6159adff3, 0x10100, 0x0) 22.947237195s ago: executing program 50 (id=2953): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80), &(0x7f0000000dc0)=[{0x80005, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r5, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=ANY=[@ANYBLOB="280000001e00010000000000000000008120"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="bb4b97c9cfff1febd36ed7996021226b3f286dad00b2f3cab72d51c3d506e83e21dee7ee9e468626bb6b4cdaa44887839680fdb57c3409be97a305f65da960b191856609d27d4fc9898f8e939d94f6ec4079103c2dd76f7305b789903cfaa9656686270652373c6c4a3ae3a5da418c5d82f8982e8200a31e1a8ed66c81936171999a953279dad57b1d265c03f8b2151d", @ANYRES16=r7, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r9, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="848cdb44080211000001080211000000080d000000000000000000000000000064000100010882848b960c121824"], 0x2e) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000a40)=@data_frame={@a_msdu=@type11={{0x0, 0x2, 0x8, 0x1, 0x1, 0x1}, {0xbe}, @device_b, @device_b, @initial, {0x3, 0xa6}, @broadcast, @value={0x4, 0x0, 0x1, 0x1, 0xa4}}, @random="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"}, 0x1a7) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) 21.309286082s ago: executing program 4 (id=3000): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@local}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000080)=0xe8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 20.766058806s ago: executing program 4 (id=3028): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x3, 0x4) syz_emit_ethernet(0xbe, &(0x7f00000006c0)=ANY=[@ANYBLOB="27627843aaaa0180c20000000800450000d1000000000011907864010101ac14142100004e20009c907801000000007fc5548e9bcbe247620fefedc40000007b4b143b7461fd770bbc2683bdf9506ffe7b1c012bd14efb0449fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40ae09427424dbcfd56f1373669ca9b2f19935e6996c7096ffe4f3a4745a8f762b9649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = accept$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000400)={{0x89, @broadcast, 0x4e22, 0x2, 'nq\x00', 0x1, 0x5, 0x7a}, {@multicast1, 0x4e24, 0x4, 0x7fff, 0x6, 0x5}}, 0x44) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'batadv0\x00', &(0x7f0000000100)=@ethtool_drvinfo={0x3, "8a5e322d8e489c231db446dfce5034a3625a1060961a5c8e8ebee289dc9b81c6", "f22ad97c8d000000000000007a03b2400b00", "24d1030000000001b36853e70000b4b9f979a100", "16960bf75c8ad1e4d903c98b4613a024b2f65c2cdd5efe4157a125325c262ce4", "6a272fe447160298c7b816cd3dec35bdef00", "2600000043125300", 0x2, 0x2, 0xfffffffd, 0x7ff, 0x6}}) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303001300000000000000000000100000010001000000"], 0x1c}}, 0x0) socket(0x15, 0x1, 0xfffffffb) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4010) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB], 0xfc}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r8, 0x6612) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32=r7, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 20.323116501s ago: executing program 4 (id=3029): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="80000000000201040000000000000000020000052400028014000180080001000000000008000200ac1e00010c00028005000100000000002400038014000180080001000000000008000200ac1414000c0002800500010000000000240001800c000280050001008800000014000180080001"], 0x80}}, 0x0) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000000c0)="b9ff0300600d698cff9e14f086dd", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (rerun: 64) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x4f) (async) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb5058b292eac8ba88a36aa1d7ee244885b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x5c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459ba", 0x54}], 0x2, 0x0, 0x0, 0x20000000}], 0x1, 0x4040800) (async) socket$caif_stream(0x25, 0x1, 0x2) (async) r4 = socket(0x10, 0x3, 0x0) (async) close(0x3) (async, rerun: 64) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (rerun: 64) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) (async, rerun: 64) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (rerun: 64) listen(r6, 0x80) (async) accept$netrom(r6, 0x0, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x78, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\a\x00\x00'}]}, 0x18}], 0x1}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) close(0x3) (async, rerun: 32) recvmsg$qrtr(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/8, 0x8}, {&(0x7f0000000840)=""/195, 0xc3}], 0x2, 0x0, 0x0, 0x10000}, 0x38, 0x10020) (rerun: 32) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$SO_TIMESTAMP(r8, 0x1, 0x3f, &(0x7f0000000100), &(0x7f0000000380)=0x4) unshare(0x480) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0x9, 0x17, 0xa, 0x40, 0x42, 0x1, 0x5}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={&(0x7f0000000040), 0x0, 0x0, 0x0, 0x2000, r9}, 0x38) (async) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff00000000711041000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81}, 0x50) 20.194429282s ago: executing program 4 (id=3031): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) (async) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r4, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x37, 0x0, 0x8, 0x0, 0x0}}, 0x10) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x1, 0x4}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='rss_stat\x00', r7}, 0x18) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8) sendto$inet6(r5, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) (async) sendto$inet6(r5, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r8, 0x29, 0x17, &(0x7f0000000040), 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, 0x0, 0x0, 0x2400ed80, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c) writev(r8, &(0x7f0000001180)=[{&(0x7f0000001240)="06367d6d", 0x4}], 0x1) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) 19.968705677s ago: executing program 4 (id=3035): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB="4c0000002000010000000000fcdbdf250a805f00000000031a000300080017004e234e2714000200fc0200000000000000000000000086dcb1e000011400010020010000000000000000000000000001369656da07c8879f1d05b5b27f5afdcd6c0ae6de680f5295749d2bae685679b7b9eb71cbe15dbeefc57a2ce5b56d395f10e52780696462c99ed2c1085c7c53a2eb2e4bcb523d64236f0d88037e9d"], 0x4c}}, 0x40000) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="000000560f4b22bccdc4e5ebee2b741e0b2bf300000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc0200"/84], 0x5c}}, 0x0) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000004c0)=[r4, r4, 0xffffffffffffffff, r4], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r7, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x2e) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x1e) 18.13962608s ago: executing program 1 (id=3046): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000026000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x1}]}}]}, 0x44}}, 0x44080) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000007111c300000000008510000002000000850000000000000095000000000000009500b0059d350000f8eb70c3d9330b16491e095815635bf7490c180e3be703966bd8fdc277008531ccb9d9ae8dc9e78d9dc5311486fd1d2bfab99b08b4d46852f103d4ed539d04b034d645e2ea69674b1749efdc6a03ab8d5c3d2a2ed722271db8f4b166d4a579abbfc27974"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380100001800800010000000000040003"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, r5, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xa8}, @ETHTOOL_A_LINKINFO_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x3}, @ETHTOOL_A_LINKINFO_PORT={0x5}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 17.938084542s ago: executing program 1 (id=3047): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r1, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002700010000000000000000000c000080080023"], 0x1c}], 0x1}, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x1, &(0x7f0000000180)=[{0x6, 0x2, 0x20, 0x11c2}]}, 0x10) close(0x3) 17.876301008s ago: executing program 1 (id=3048): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r4, @ANYBLOB="24005a8020000184"], 0x40}}, 0x0) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x80, @local}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000640)="455b1c", 0x3}], 0x1}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000380)={0x44, r6, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x4, 0x19}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}}, 0x40048a4) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}, 0x40010040) getsockopt$sock_int(r0, 0x1, 0x1, 0x0, &(0x7f0000000280)) r8 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xf0}, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r10, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0) ioctl$SIOCAX25DELFWD(r8, 0x89eb, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default}) 17.676309925s ago: executing program 1 (id=3049): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1000000004000000040000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000100000000000000000000000000fa2791b46a6f18329824edbe62273a602250a83192b15349607dced3cf8c1feafb2d43bc4c00c7b6908eb1f8ba2560eb17ee82e3f55595983d89a5f024f625e6294c0a6c2e8f28d7709fc5cf0ee3dd505a737ff62eea2f565a780cb29d48b50bb9669e3e4b4285371b055272ef1d32ec6ea94f3b482e39f69288223d57ce824d6205bf09f9ceb8f27d45c32426cb63c5d83c6a071d80f0d6a6b711dbbc48995da82f0c001bace74b6dd2a5fb0b974bcf2f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c0503"], 0x30}, 0x40880) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) (async) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/cgroup\x00') ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x1, 0x4, 0x8, {{0x22, 0x4, 0x0, 0x9, 0x88, 0x68, 0x0, 0xb, 0x4, 0x0, @rand_addr=0x64010102, @remote, {[@noop, @rr={0x7, 0x1f, 0x22, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr=0x64010102, @empty]}, @noop, @timestamp_addr={0x44, 0x24, 0x18, 0x1, 0xc, [{@local, 0x4}, {@local, 0x1c00}, {@empty}, {@loopback, 0xca}]}, @rr={0x7, 0xf, 0xce, [@multicast2, @private=0xa010101, @local]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x1c, 0x6a, 0x3, 0x0, [{@multicast1, 0x8b}, {@rand_addr=0x64010100, 0x400}, {@multicast2, 0x1000}]}]}}}}}) (async) r5 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) (async) writev(r6, &(0x7f0000000640)=[{&(0x7f00000011c0)="000000c3", 0x4}, {0x0, 0xfffffec3}, {&(0x7f0000000140)="df282030f97816377056", 0xa}], 0x3) (async) sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f0000000340)={&(0x7f0000000080), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r2, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_FAMILY={0x5, 0xd, 0x2}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000810}, 0x40085) 17.414244626s ago: executing program 1 (id=3050): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=@base={0xa, 0x4, 0x4, 0x5}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000e51349e480c47dfcb361fc4adc676c65d091a90e0ebdf5e43af9c543b6a9817bb39e143177c823791e3145d6049ac10fad4a99ef5eb581262af0495709d9188e2eba4490991eef2a268adcde8f555747ab8a7b91868f9fcf63ba9023cfe531fe8cfbb7603fd0344049af4fc7d0f5092e6b08000125c185bdc7608739f1b4f894", @ANYRES64=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 17.366246658s ago: executing program 1 (id=3051): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x101) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r2], 0x38}}, 0x0) r5 = socket(0xa, 0x3, 0x3a) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x6a040000) socket(0x8, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xe, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000006911bc0000000000851000000200fbff840800008b00000095000000000000009500a5050000f2ff689b43160164f7d8c18db44ce3cf122c2d74e3c1b081c16865a27cd49574c26244542623f02a5e19f2aba86f807a3b25c228c3cae180920fc8dba13064e95243659a6a2355e361a2d17b47c4f7044cc168d2a93340ecbce95e9a932d2d25198c032df2700688ffbbf0d97ccecea92abf074d8dd93242"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r2, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r6}, 0x8) r8 = socket$key(0xf, 0x3, 0x2) recvmmsg(r8, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) r9 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYRESOCT=r1, @ANYRES32=0x0, @ANYRESOCT=r3, @ANYRESHEX=0x0], 0x50) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYRES64=r9, @ANYRES64=r11, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES16=r1, @ANYRESOCT=r7, @ANYRES64=r5, @ANYRESHEX=r4, @ANYBLOB="a410ec2f4076f9f4dc54f3bbcb5d4c8f9b9b0d2b26d910fe509d32bf6e3f200b879c2fd89013a6480389b50513dce8edc4c4b77405618bbba14f9802064216a01fc1c0e1a270a7e89810b0970ac6cb29fe81339e26c21b58ae7e870deaf750c58aec5d8c17fe263dc5346f19160087e25c5a4d2b81f184f6c6bd4e49cb5dec738fd4b333776a1d40356eab6ac04c0d6251423950eabd425150aba8bc1262eefff0476c387012816a4413d594c55fcc62ef5a2010d7cb234b"], 0xe8}}, 0x24000001) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x3000000, 0x200000006c832, 0xffffffffffffffff, 0x6be66000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0x4d, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x40f00}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) 13.290548101s ago: executing program 3 (id=3071): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x2d75000) recvmmsg(0xffffffffffffffff, &(0x7f0000001b80)=[{{&(0x7f0000000400)=@ax25={{0x3, @rose}, [@remote, @bcast, @null, @default, @default, @remote, @null, @rose]}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000380)=""/23, 0x17}], 0x1, &(0x7f00000004c0)=""/152, 0x98}}, {{&(0x7f00000005c0)=@tipc=@name, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f00000007c0)=""/17, 0x11}, {&(0x7f0000000a40)=""/251, 0xfb}, {&(0x7f0000000800)=""/5, 0x5}, {&(0x7f0000000b40)=""/202, 0xca}, {&(0x7f0000000c40)=""/160, 0xa0}, {&(0x7f0000000d00)=""/191, 0xbf}], 0x7, &(0x7f0000000dc0)=""/87, 0x57}, 0x9}, {{&(0x7f0000000e40)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001d80)=""/210, 0xd2}, {&(0x7f0000000fc0)=""/65, 0x41}, {&(0x7f0000001080)=""/136, 0x88}, {&(0x7f0000001140)=""/98, 0x62}, {&(0x7f00000011c0)=""/210, 0xd2}, {&(0x7f00000012c0)=""/25, 0x19}, {&(0x7f0000001300)=""/216, 0xd8}], 0x7, &(0x7f0000001480)=""/195, 0xc3}, 0x9}, {{&(0x7f0000001580)=@alg, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001600)=""/143, 0x8f}], 0x1}, 0xfffffffa}, {{&(0x7f0000001700)=@qipcrtr, 0x80, &(0x7f0000001a40)=[{&(0x7f0000001780)=""/207, 0xcf}, {&(0x7f0000002d40)=""/4096, 0x1000}, {&(0x7f0000001880)=""/45, 0x2d}, {&(0x7f00000018c0)=""/96, 0x60}, {&(0x7f0000001940)=""/223, 0xdf}], 0x5}, 0x10000}], 0x5, 0x0, &(0x7f0000001ac0)={0x77359400}) 13.170021659s ago: executing program 3 (id=3072): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910180000000000630a64ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='&\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00z'], 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e000000000000000300000003"], 0x50) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x1, 0x7fe2, 0x1, 0x12}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, &(0x7f00000000c0), &(0x7f0000000200)}, 0x20) listen(r1, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0d0000007f000000040000000809000000000000", @ANYRES32=r0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0xae}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x100, 0x70bd2a, 0x800, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, @random="963468b1"}]}, 0x24}, 0x1, 0x0, 0x0, 0x29f8f46aa678ba10}, 0x80c4) 13.103223437s ago: executing program 3 (id=3073): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$phonet(r1, &(0x7f0000000080)=""/237, 0xed, 0x40002000, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f00000001c0)={'vlan1\x00', {0x2, 0x4e23, @local}}) recvfrom$phonet(r0, &(0x7f0000000200)=""/30, 0x1e, 0x120, 0x0, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8983, &(0x7f0000000240)={0x7, 'veth1_virt_wifi\x00', {0xa}, 0x1c}) setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x78, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x64, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010102}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x40000}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_SET_OP_GET_BYNAME(r3, 0x1, 0x53, &(0x7f00000004c0)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000500)=0x28) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000580)=@add_del={0x2, &(0x7f0000000540)='veth0_vlan\x00'}) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000600), r0) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r4, 0x304, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x800) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000700)=0xd) r5 = socket$netlink(0x10, 0x3, 0x12) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000780), r3) sendmsg$IPVS_CMD_NEW_DEST(r5, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0x88, r6, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x69}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x11}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0x9}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x8800) r7 = accept4$inet6(r0, &(0x7f0000000900)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000940)=0x1c, 0x80000) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000980)={'vxcan0\x00', 0x0}) socket$packet(0x11, 0x2, 0x300) r9 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000fc0)={&(0x7f00000009c0)=@can={0x1d, r8}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000a40)="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", 0xfa}, {&(0x7f0000000b40)="a7d87a916e1cd7e616416bdb073f5a3feffa4b24ce8b2e0c304c877c9b6c78ae342a2ef115217df2b9930849252c5755342f653010838b231d7e7e282f0962fff184d50b6aae437dbb88068eca287c369cf899edfc0824987b0229b881588f", 0x5f}, {&(0x7f0000000bc0)="feeacdfe4bd2edb790847971779c3589c3a0d0adef62ce9e4fd4d49ba9cd74e4b9a2c0dfc2a3f72d455680d16051ea016781b21115916dc60d8346ed921158bb845d2521fe64a5fb9b5fff80b7cae01550d1543a2a3e08de16cc58f3a4d8a67d3408c38563b026275a4b9d75ac4b0271e9adb22e4afed75d8b8ee599461ae1de6f4a6a61efba59caf4b3b01480e937221775594086977f8b744245a305e36b3231cd116628174d99bd715a84c657d9c69502d22e101834a4482c14003cd9ca3b00", 0xc1}, {&(0x7f0000000cc0)="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", 0xfe}, {&(0x7f0000000dc0)="23c8f2441a26c6aeae0eb7f7395a730a53490e4a3309da5e2981ecbe4a78352a4431852ef91bd93484332f3edb054900b7f07bf4c12b9d19655d1c", 0x3b}, {&(0x7f0000000e00)}, {&(0x7f0000000e40)="9f82081d3abadb5a339ebb927f4139dcfff0b8cc534263e49bcb55431d00e1e2dbe50b80b7d48686af8dfbec9fcc8c712cadd8e6efaf887ee1d79d14c287eabc2be36926d686420d16557446ff8d7fa8b7a53504dc37c9430cf6d57676d10f09c8532cce9ebd9596c0bd866d11dcaa7cec9373c45d0752fb2b9d67b8467d672dbcb28c1403ae962086d1cdfb057fd376ea4e7b7dd7730adf5771c5286a9e852f6aaf28fdc7852e12a5495bae1a010779bd0d6c139dbd7368405e0f7c5fa5b5ea", 0xc0}], 0x7, &(0x7f0000000f80)=[{0x40, 0x10d, 0xb6, "b36de18f8c7d01619b4a2e631e3dc2fb488ac3954b9861188bffcdaad0a6c7739c21bca0b765fc4f412e"}], 0x40}, 0x20004090) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000001000)={'ipvlan0\x00', 0x800}) r10 = socket$kcm(0x29, 0xa, 0x0) ioctl(r9, 0x80000000, &(0x7f0000001040)="346ce500e941dfc9c241bf95a4d9488673ab3fe8e5e88cffb98ca966a73af259649e19ecca23dea900ef3dbd619dd9c7d5658bd92ba379bf4de964548dd4b1ab24472045071860952074cd52a7d0c936e332344ef36ed2244107bf01ca") ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r10, 0xf504, 0x0) ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f00000010c0)) 12.989474929s ago: executing program 3 (id=3075): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000000)={0x1, 0x0, 0x60, 0x5f0, @vifc_lcl_addr=@remote, @multicast2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000002000000000000000000000085000000870000001801000020207025000000006c819b56ccc37fce00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) 12.853662427s ago: executing program 3 (id=3077): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0xffff54ad, 0x0, 0xfd8, 0x1}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x2000c010) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000640)=@ethtool_perm_addr={0x4b, 0x3, "4b721b"}}) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18faff00000000000000000000000000181100006b563dec1ba23a979cc61706774e367c98c617470d1ed020c4ab0ca710b42e4238915db57769ec35ffde5a68b05455d46f8c1fece82b7e1e9a4b8cbcd7bec4a99128ed99be526161ab0db694fd8a2cd5d50baf9c1a0c84391a8169504592232ebabffc51b36d43494a3bc3735611863db08e5bc570c9390d", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='sched_switch\x00', r4}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000004c0)={r6, 0x3, 0x6, @broadcast}, 0x10) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200000006000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000008000"/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r7, &(0x7f0000000380), 0x0}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000102879e31d34c5b10800000000000000f94e2de45fae4944cca81becf4eafbcba0f95a03f70dbb86bd73877050606d171addd42425820904be808a6287bf8f808c8ccd115f731e1fd0ad4cef2632a7dd242c80088b64d07355436b4e875d25492c7ccc4baf221f79bfbfc4c08704bf12044b2167ee2c1f41f1f7a57df7d0ccf374175319ef0ce260287dcbfe44e6c67c825ec1df99c8e3c7611f137f4d78d876fe1b6ee87999cb736a7530db565e39", @ANYRES32=r8, @ANYRESDEC=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@mpls_getroute={0x24, 0x1a, 0x9e8a232eead7ae69, 0x70bd26, 0x0, {0x1c, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x4}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 12.791108279s ago: executing program 3 (id=3079): syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'sit0\x00', 0x0}) recvfrom$rxrpc(r0, 0x0, 0x0, 0x80000041, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x8}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000015000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000000e00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFNL_MSG_CTHELPER_GET(r0, 0x0, 0x2004d002) ioctl$FICLONE(r5, 0x40049409, r4) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.909238788s ago: executing program 51 (id=3035): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB="4c0000002000010000000000fcdbdf250a805f00000000031a000300080017004e234e2714000200fc0200000000000000000000000086dcb1e000011400010020010000000000000000000000000001369656da07c8879f1d05b5b27f5afdcd6c0ae6de680f5295749d2bae685679b7b9eb71cbe15dbeefc57a2ce5b56d395f10e52780696462c99ed2c1085c7c53a2eb2e4bcb523d64236f0d88037e9d"], 0x4c}}, 0x40000) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="000000560f4b22bccdc4e5ebee2b741e0b2bf300000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc0200"/84], 0x5c}}, 0x0) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000004c0)=[r4, r4, 0xffffffffffffffff, r4], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r7, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x2e) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x1e) 3.051302221s ago: executing program 2 (id=3138): socket$inet6_mptcp(0xa, 0x1, 0x106) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x530, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @bcast}, 0x1c) connect$rose(r0, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x600, [@default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @default]}, 0x40) 2.946209737s ago: executing program 2 (id=3139): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb600000000000000008d0000007500000095"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d40)={{r2}, &(0x7f00000009c0), &(0x7f0000000a00)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r9, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r9, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x2, @remote}, 0x10) r10 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r10, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) readv(r7, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) write$cgroup_subtree(r8, &(0x7f0000000700)=ANY=[], 0xfe33) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, r6, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="0000000f000000f599d30568223892072aab06e19540804dae5a1cc45d189a88ec538834576d1d34289784319a4b6a47ffe1c0cbc6c671188280d34364555c4756b74fa8cc4d549e916673b618e4649ade1f4719f0c5f542c694a576ae27f8848f0919bc09d16de1b799eb4c00265be3ea35127cb1900940e2a194a2a8517af4a2f8b0cf9969fb44ba2d79fe80fae2525bbc070718669d5ade62b6f755b4bbbc40e1ecc61ab4bd"], 0x14}}, 0x4801c) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0xffffffffffffffff, 0x2b3, 0x8}, 0xc) syz_80211_inject_frame(&(0x7f0000000600)=@broadcast, &(0x7f00000018c0)=@data_frame={@a_msdu=@type11={{0x0, 0x2, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1}, {}, @broadcast, @device_a, @random="ec0dc7965ea8", {0x1, 0x7}, @device_b}, @random="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"}, 0x579) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001e40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x500, 0x0, 0x0, {}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x64}}, 0x20050800) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={&(0x7f0000000240)="835bce8d4a1d6c5b0d5828dfac140a5bacde545583f5b93332536a4d93c23e494d7d4a18a5705bf155b55a7c1764db52ff67df7e3d520badd42ea0e756d615c0f1a91279f7fef68528273eb05fa8bd61ab670c0b2d4ca339ac1af5690fed955cc88092e44be26f074c95fdbaaa896f9efe0f84ff22b565aad0eaeae24bb6aab5488feb2cedcc91eb730ddd1168576f86a9e20faff4bb51", &(0x7f0000000300)=""/169, &(0x7f00000003c0)="626113e10e7393", &(0x7f00000008c0)="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", 0x0, r12, 0x4}, 0x38) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl0\x00', r11, 0x4, 0xff, 0x2, 0x856a, 0x5a, @local, @mcast1, 0x700, 0x7800, 0x9, 0x6}}) 2.18582563s ago: executing program 52 (id=3051): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x101) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r2], 0x38}}, 0x0) r5 = socket(0xa, 0x3, 0x3a) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x6a040000) socket(0x8, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xe, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000006911bc0000000000851000000200fbff840800008b00000095000000000000009500a5050000f2ff689b43160164f7d8c18db44ce3cf122c2d74e3c1b081c16865a27cd49574c26244542623f02a5e19f2aba86f807a3b25c228c3cae180920fc8dba13064e95243659a6a2355e361a2d17b47c4f7044cc168d2a93340ecbce95e9a932d2d25198c032df2700688ffbbf0d97ccecea92abf074d8dd93242"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r2, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r6}, 0x8) r8 = socket$key(0xf, 0x3, 0x2) recvmmsg(r8, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) r9 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYRESOCT=r1, @ANYRES32=0x0, @ANYRESOCT=r3, @ANYRESHEX=0x0], 0x50) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYRES64=r9, @ANYRES64=r11, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES16=r1, @ANYRESOCT=r7, @ANYRES64=r5, @ANYRESHEX=r4, @ANYBLOB="a410ec2f4076f9f4dc54f3bbcb5d4c8f9b9b0d2b26d910fe509d32bf6e3f200b879c2fd89013a6480389b50513dce8edc4c4b77405618bbba14f9802064216a01fc1c0e1a270a7e89810b0970ac6cb29fe81339e26c21b58ae7e870deaf750c58aec5d8c17fe263dc5346f19160087e25c5a4d2b81f184f6c6bd4e49cb5dec738fd4b333776a1d40356eab6ac04c0d6251423950eabd425150aba8bc1262eefff0476c387012816a4413d594c55fcc62ef5a2010d7cb234b"], 0xe8}}, 0x24000001) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x3000000, 0x200000006c832, 0xffffffffffffffff, 0x6be66000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0x4d, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x40f00}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) 2.166246796s ago: executing program 2 (id=3144): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000140)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x4044010}, 0x0) recvmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x1}, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f00000004c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) syz_emit_ethernet(0x80, &(0x7f00000005c0)={@multicast, @random="28feee412b8f", @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "ddff00", 0x2d, 0x2f, 0x0, @private2, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0x0, [0x7ff, 0x1]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x6]}}}}}}}, 0x0) (async) syz_emit_ethernet(0x80, &(0x7f00000005c0)={@multicast, @random="28feee412b8f", @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "ddff00", 0x2d, 0x2f, 0x0, @private2, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0x0, [0x7ff, 0x1]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x6]}}}}}}}, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f00000016c0)={0x0, @in6={{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x8}}, 0x6, 0x3, 0x2a6e, 0x7, 0x401}, &(0x7f00000005c0)=0x98) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) (async) sendmsg$inet(r6, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r5, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)="fcddc759027c", 0x6}], 0x1}, 0x41) (async) sendmsg$inet(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)="fcddc759027c", 0x6}], 0x1}, 0x41) recvmsg(r5, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2002) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x884) 2.027608544s ago: executing program 2 (id=3145): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x1c, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x0, 0x1, 0x721f154162cbde29, 0x1, 0xffffffffffffffff, 0x10}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x96c8}}, @map_val={0x18, 0xb, 0x2, 0x0, 0x1}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc0000000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x3}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000080)='syzkaller\x00', 0x6, 0xca, &(0x7f0000000240)=""/202, 0x41000, 0x68, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x0, 0x7, 0x8, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000000)='workqueue_execute_end\x00', r0}, 0x18) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x530, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000000)={0x783a0ef, [0x9d82, 0x800]}, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe00}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r4, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @bcast}, 0x1c) connect$rose(r4, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x0, [@default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @default]}, 0x40) 1.824360162s ago: executing program 2 (id=3146): socket$kcm(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r0, &(0x7f0000019440)=[{&(0x7f0000000340)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed090f0000600000f3a1bc5603ca00000f7f89e3ff296aa1f6475322f000200000004a2471083ec6991778581acb6c0101ff00", 0x48}], 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xc8, 0x0, 0xc000000) close(r4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000001080)=[@in6={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x23}, 0x3}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x4e24, 0x5, @empty, 0x4}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000180)={r6, @in={{0x2, 0x4e23, @empty}}, 0xd, 0x7fff}, &(0x7f0000001040)=0x90) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x600, 0x0) write$tun(r8, &(0x7f0000000600)={@val={0x0, 0x88e7}, @val={0x1, 0x1, 0x5, 0x101, 0x2, 0x6}, @ipv6=@dccp_packet={0x5, 0x6, "54d200", 0x8d, 0x21, 0xfe, @mcast1, @mcast2, {[], {{0x4e24, 0x4e22, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x1, "ff9c25", 0x0, "78c61c"}, "39f3fcfd42015291cdd19010a4e8bcc5161f5708c4b0d75b1eb7d8b2596c7a1b7407fd958e5afeab9efce2c40e3313ff8e5f007ae649bb891d9271ecdf53b63e37cd82b139f71f105f8ac4cfd359d3eadd15126866d8951824c9dae5a12da137d6389753a7e73ee784c478eaeb302f205210fe7eb1f2391ecd10d8d806"}}}}, 0xc3) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x48, 0x10, 0x403, 0x0, 0x25dfdc00, {0x0, 0x0, 0x74, 0x0, 0x800}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xe}, @IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000801}, 0x24008804) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES32=r1], 0x40}}, 0x0) 1.646875444s ago: executing program 2 (id=3148): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback, 0xfffffff7}, 0x1c) sendmmsg$inet6(r3, &(0x7f00000020c0)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x800) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r5, 0x0, 0x2, &(0x7f0000000000)={0x783a0ef, [0x9d82, 0x800]}, 0x10) syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000600), 0x4) syz_emit_ethernet(0x46, &(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYBLOB="658dc9ad7f36bf4bd2a004ff049c3c1433c5e2f76f552042dcd2f401644cc17ee77040dba39bdbbec1cfe5b77b76292c3be896ab77ad53cbf1ee8c3f6b070ef99ea026c7b54cdd31d47798b02160b59c72e7b74c04f880f58e8635c6b801f66c56f434b7bb58dc4c5e6f2139919bccc0291ee1f882e22ad54525607021fe5f1fef49cb4266bd61", @ANYRESOCT=0x0, @ANYRESHEX=r2, @ANYRES8=r0, @ANYRESHEX=r3, @ANYRES16=r2, @ANYBLOB="e35f92ffc6c9b55368967cf4324971278fe9ad9c893fdbb77405352cad07793b61dec2637a3e5ac128272049b80cf0", @ANYRES64=r1], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1b, 0x2, &(0x7f0000000700)=@raw=[@map_idx_val={0x18, 0x2, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0xd}], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x45, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x6a040000) socket(0x8, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000001400b59500000000000000000a400000", @ANYRES32=r8, @ANYBLOB="14000200ff02000000000000000000000000000108000800028d"], 0x34}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) 627.109904ms ago: executing program 6 (id=3150): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000002d00090026bd700000000800040000000f9a50dd32b1e2c8d02b973f5d1e90ff32b283a96fc8a77e6df4cb4275e74e7fdec2aea944c55bc3b196fcd123145f2396913d10e1817b1e9f2e8109b9d6e36c095d3ce7d9d37e5eafdd7e9842fc7163d33d100fb5ea04a32522299146284b01ae9d82d17ae769a9b0945583126153ed53433534fac17d83654e0b98458e25f9cb575efe86df9f441f21df5a1150a842ac4084b65050bb0b6674a0d34c2e339b66b3dfd0c235119a5f77acafd0eb6aa8ce1ba7af99e6771caf7542e8cecdd957032ee6ed2c08ced0a40d1094950ffc25939575f8e5f193f9ec11d359a11127fbef953249320d09c7883ba4e29c19956d6b64517cf00d0ced594805219989fa824dc0349631793d60"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6eaa000000000000711010000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) 438.776666ms ago: executing program 6 (id=3151): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r4, 0x80, 0x4c, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040880}, 0x840) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f0000000180)=@netrom={'nr', 0x0}, 0x10) 302.517368ms ago: executing program 6 (id=3152): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000c40)=@newlink={0x38, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x280, 0x2000}, [@IFLA_EVENT={0x8, 0x2c, 0x6}, @IFLA_MASTER={0x8}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}]}, 0x38}}, 0x4) 218.557415ms ago: executing program 6 (id=3153): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ffffee76", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000060006004e2100000400088014000200776730000000000000000000000000000800070009000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000020000000000000022000000ccbef0ff0000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x6, &(0x7f0000000040)=""/6, 0x41000, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000001d71186a"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) poll(&(0x7f0000000100)=[{r2, 0x4020}, {r2, 0x84}], 0x2, 0x3ff) sendto$inet(r2, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) (async) listen(r2, 0xda90) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000100001000000000000000000000d000a80000000060a0904000000000000000002000002540004803c0001800e000100696d6d656469617465000000280002801c000280060002800900020073797a320000000008000180fffffffc0800014000000000140001800d00010073796e70726f7879000000000900010073797a30000000000900020073797a320000"], 0xa8}}, 0x0) (async) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x1000}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x4084) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r5}, 0x18) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x91, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x3, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r7, 0x0, 0x406f413, 0x0) (async) syz_emit_ethernet(0x92, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dc58c", 0x5c, 0x6, 0x0, @local, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0xfffd, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @sack={0x5, 0x2}]}}, {"56c79c3ceca193cbef6840d5ad79038d7f628bd2bafe000000000000334e283a822115cbac8efdc767774fdce7d373826c05886bba87967579904e4896676fe4736171a4"}}}}}}}, 0x0) (async) ioctl$NS_GET_OWNER_UID(r6, 0xb704, &(0x7f0000000580)) (async) socket(0x1d, 0x3, 0x0) (async) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x105}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x5}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa0}}, 0x20050800) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000001000ffff27bd7000fedbdf25eeff0000", @ANYRES32=0x0, @ANYBLOB="15010000000000002800128009000100766c616e0000000018000280060001000400000002000200110000001300000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB="0a000100aa"], 0x64}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 10.385027ms ago: executing program 6 (id=3154): socket$inet6_mptcp(0xa, 0x1, 0x106) recvfrom(0xffffffffffffffff, 0x0, 0xc0, 0x40000550, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0xd76}, 0x18) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x48}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000140)=ANY=[@ANYBLOB="376849bfc5a655934ebcd5fa9705ec6ca0acf86ac492f0c274494e0bb0f2813eb28487c800fe305229f794b9f934ac8000ad6cd27371cc84a0002931c04ff71216b08746fc64bd9b419b3ece74bb95ae21d17b3b299fffe1e3c3a8452860b3971aac9bba944bf81070944391d596b3361b5019763b635c9cdb5046ade1a80ee37a63158aefbe35d1f8fbeee169ca2201b3968dc1e073db0f85b91c8343f01ee9d86ba95b0312264ff96b5468c4c74405986cc324b3699d96be3f10ca90ea60b1205d0314cb9fd26be70e46f2217adaefd823aa01bf48d27a33150d", @ANYRES16=r4, @ANYBLOB="010000000000000000000c0000000c00038004000380040004001800018014000200766574683000"/50], 0x38}}, 0x0) connect$rose(r0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @bcast}, 0x1c) connect$rose(r0, &(0x7f0000000080)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, 0x0, [@default, @null, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x40) 0s ago: executing program 6 (id=3155): socket$inet6_mptcp(0xa, 0x1, 0x106) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x530, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @bcast}, 0x1c) connect$rose(r0, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0xa00, [@default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @default]}, 0x40) kernel console output (not intermixed with test programs): AX: ffffffffffffffda RBX: 00007f11bcfe5fa0 RCX: 00007f11bcd8eec9 [ 439.013970][T16495] RDX: 0000000000000041 RSI: 0000000000000001 RDI: 0000000000000003 [ 439.013981][T16495] RBP: 00007f11bdc9f090 R08: 0000000000000004 R09: 0000000000000000 [ 439.013992][T16495] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 439.014003][T16495] R13: 00007f11bcfe6038 R14: 00007f11bcfe5fa0 R15: 00007ffee9dd6a88 [ 439.014031][T16495] [ 439.027743][T16376] veth1_vlan: entered promiscuous mode [ 439.235593][ T5186] Bluetooth: hci10: command tx timeout [ 439.247321][T16497] sit0: entered promiscuous mode [ 439.319771][T16376] veth0_macvtap: entered promiscuous mode [ 439.337505][T16376] veth1_macvtap: entered promiscuous mode [ 439.384357][T16376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.399934][T16376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.418967][T16502] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 439.422344][T16417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.447283][ T56] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.459816][ T56] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.487303][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.517347][T16417] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.526753][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.548670][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.556044][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.569638][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.576812][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.661225][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.681691][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.733106][ T1083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.740466][T16417] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 439.752009][ T1083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.865577][ T5186] Bluetooth: hci2: command tx timeout [ 440.008738][T16417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.327815][T16417] veth0_vlan: entered promiscuous mode [ 440.343659][T16417] veth1_vlan: entered promiscuous mode [ 440.394234][T16417] veth0_macvtap: entered promiscuous mode [ 440.405972][T16417] veth1_macvtap: entered promiscuous mode [ 440.428209][T16417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.444129][T16417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 440.478968][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.489868][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.498774][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.509006][ T1083] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.561024][T16522] netlink: 'syz.2.2602': attribute type 2 has an invalid length. [ 440.571021][T16522] netlink: 'syz.2.2602': attribute type 1 has an invalid length. [ 440.602942][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.611093][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.633693][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.642297][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.783790][T16529] lo speed is unknown, defaulting to 1000 [ 440.904460][T16532] sock: sock_timestamping_bind_phc: sock not bind to device [ 441.056282][T16537] FAULT_INJECTION: forcing a failure. [ 441.056282][T16537] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.071455][T16537] CPU: 0 UID: 0 PID: 16537 Comm: syz.4.2607 Not tainted syzkaller #0 PREEMPT(full) [ 441.071479][T16537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 441.071489][T16537] Call Trace: [ 441.071496][T16537] [ 441.071503][T16537] dump_stack_lvl+0x189/0x250 [ 441.071528][T16537] ? __pfx____ratelimit+0x10/0x10 [ 441.071549][T16537] ? __pfx_dump_stack_lvl+0x10/0x10 [ 441.071564][T16537] ? __pfx__printk+0x10/0x10 [ 441.071582][T16537] ? __might_fault+0xb0/0x130 [ 441.071612][T16537] should_fail_ex+0x414/0x560 [ 441.071639][T16537] _copy_from_iter+0x1de/0x1790 [ 441.071664][T16537] ? rcu_is_watching+0x15/0xb0 [ 441.071682][T16537] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 441.071705][T16537] ? __pfx__copy_from_iter+0x10/0x10 [ 441.071724][T16537] ? __build_skb_around+0x257/0x3e0 [ 441.071746][T16537] ? netlink_sendmsg+0x642/0xb30 [ 441.071761][T16537] ? skb_put+0x11b/0x210 [ 441.071781][T16537] netlink_sendmsg+0x6b2/0xb30 [ 441.071808][T16537] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.071829][T16537] ? aa_sock_msg_perm+0xf1/0x1d0 [ 441.071863][T16537] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 441.071879][T16537] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.071898][T16537] __sock_sendmsg+0x21c/0x270 [ 441.071922][T16537] sock_write_iter+0x258/0x330 [ 441.071946][T16537] ? __pfx_sock_write_iter+0x10/0x10 [ 441.071989][T16537] do_iter_readv_writev+0x61c/0x8b0 [ 441.072016][T16537] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 441.072034][T16537] ? common_file_perm+0x1b5/0x230 [ 441.072058][T16537] ? bpf_lsm_file_permission+0x9/0x20 [ 441.072074][T16537] ? security_file_permission+0x75/0x290 [ 441.072094][T16537] ? rw_verify_area+0x255/0x4d0 [ 441.072116][T16537] vfs_writev+0x31a/0x960 [ 441.072136][T16537] ? __lock_acquire+0xab9/0xd20 [ 441.072159][T16537] ? __pfx_vfs_writev+0x10/0x10 [ 441.072189][T16537] ? __fget_files+0x2a/0x420 [ 441.072214][T16537] ? __fget_files+0x3a0/0x420 [ 441.072233][T16537] ? __fget_files+0x2a/0x420 [ 441.072262][T16537] do_writev+0x14d/0x2d0 [ 441.072279][T16537] ? __pfx_do_writev+0x10/0x10 [ 441.072292][T16537] ? rcu_is_watching+0x15/0xb0 [ 441.072312][T16537] ? do_syscall_64+0xbe/0x3b0 [ 441.072332][T16537] do_syscall_64+0xfa/0x3b0 [ 441.072347][T16537] ? lockdep_hardirqs_on+0x9c/0x150 [ 441.072368][T16537] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.072385][T16537] ? clear_bhb_loop+0x60/0xb0 [ 441.072404][T16537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.072420][T16537] RIP: 0033:0x7fa989f8eec9 [ 441.072436][T16537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.072450][T16537] RSP: 002b:00007fa98aee6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 441.072468][T16537] RAX: ffffffffffffffda RBX: 00007fa98a1e5fa0 RCX: 00007fa989f8eec9 [ 441.072480][T16537] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005 [ 441.072490][T16537] RBP: 00007fa98aee6090 R08: 0000000000000000 R09: 0000000000000000 [ 441.072500][T16537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.072510][T16537] R13: 00007fa98a1e6038 R14: 00007fa98a1e5fa0 R15: 00007ffd61eabaf8 [ 441.072540][T16537] [ 441.392372][ T5186] Bluetooth: hci10: command tx timeout [ 441.568647][T16544] netlink: 'syz.4.2610': attribute type 1 has an invalid length. [ 441.599769][T16544] team0: Port device geneve2 added [ 441.620481][T16544] team0: entered promiscuous mode [ 441.646105][T16544] team_slave_0: entered promiscuous mode [ 441.651973][T16544] team_slave_1: entered promiscuous mode [ 441.658843][T16547] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2611'. [ 441.670656][T16547] FAULT_INJECTION: forcing a failure. [ 441.670656][T16547] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 441.681213][T16544] geneve2: entered promiscuous mode [ 441.687171][T16547] CPU: 0 UID: 0 PID: 16547 Comm: syz.0.2611 Not tainted syzkaller #0 PREEMPT(full) [ 441.687194][T16547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 441.687204][T16547] Call Trace: [ 441.687211][T16547] [ 441.687219][T16547] dump_stack_lvl+0x189/0x250 [ 441.687241][T16547] ? __pfx____ratelimit+0x10/0x10 [ 441.687265][T16547] ? __pfx_dump_stack_lvl+0x10/0x10 [ 441.687282][T16547] ? __pfx__printk+0x10/0x10 [ 441.687305][T16547] ? fs_reclaim_acquire+0x7d/0x100 [ 441.687336][T16547] should_fail_ex+0x414/0x560 [ 441.687363][T16547] prepare_alloc_pages+0x213/0x610 [ 441.687392][T16547] __alloc_frozen_pages_noprof+0x123/0x370 [ 441.687420][T16547] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 441.687451][T16547] ? policy_nodemask+0x27c/0x720 [ 441.687470][T16547] ? __lock_acquire+0xab9/0xd20 [ 441.687496][T16547] alloc_pages_mpol+0x232/0x4a0 [ 441.687522][T16547] vma_alloc_folio_noprof+0xe4/0x200 [ 441.687545][T16547] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 441.687578][T16547] folio_prealloc+0x30/0x180 [ 441.687601][T16547] __handle_mm_fault+0x2ab9/0x5440 [ 441.687618][T16547] ? __lock_acquire+0xab9/0xd20 [ 441.687653][T16547] ? __pfx___handle_mm_fault+0x10/0x10 [ 441.687686][T16547] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 441.687700][T16547] ? lock_vma_under_rcu+0xdf/0x3d0 [ 441.687720][T16547] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 441.687748][T16547] handle_mm_fault+0x40a/0x8e0 [ 441.687786][T16547] do_user_addr_fault+0xa81/0x1390 [ 441.687816][T16547] ? rcu_is_watching+0x15/0xb0 [ 441.687831][T16547] ? trace_page_fault_user+0x84/0x1e0 [ 441.687855][T16547] exc_page_fault+0x76/0xf0 [ 441.687881][T16547] asm_exc_page_fault+0x26/0x30 [ 441.687896][T16547] RIP: 0033:0x7f6e04c5a75b [ 441.687911][T16547] Code: 00 00 00 48 8d 3d dd 39 19 00 48 89 c1 31 c0 e8 fb 3a ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 11 3a 19 00 48 89 34 24 48 8b 14 24 48 8b [ 441.687925][T16547] RSP: 002b:00007f6e02ff4fb0 EFLAGS: 00010202 [ 441.687940][T16547] RAX: 0000000000000000 RBX: 00007f6e04fe5fa0 RCX: 0000000000000000 [ 441.687951][T16547] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000200000000280 [ 441.687961][T16547] RBP: 00007f6e02ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 441.687972][T16547] R10: 0000200000000280 R11: 0000000000000000 R12: 0000000000000001 [ 441.687983][T16547] R13: 00007f6e04fe6038 R14: 00007f6e04fe5fa0 R15: 00007ffeaa0eb898 [ 441.688012][T16547] [ 441.688290][T16547] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 441.834508][T16552] netlink: 'syz.2.2612': attribute type 12 has an invalid length. [ 441.957320][ T5872] Bluetooth: hci2: command tx timeout [ 442.126899][T16561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2614'. [ 442.144980][T16561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2614'. [ 442.189748][T16561] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2614'. [ 442.254047][T16561] tipc: Started in network mode [ 442.259067][T16561] tipc: Node identity d6aa6a815a36, cluster identity 4711 [ 442.267967][T16561] tipc: Enabled bearer , priority 0 [ 442.298343][T16560] tipc: Disabling bearer [ 442.723080][ T30] audit: type=1800 audit(1758772213.473:8): pid=16575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2616" name="cgroup.controllers" dev="tmpfs" ino=58 res=0 errno=0 [ 442.770158][T16587] FAULT_INJECTION: forcing a failure. [ 442.770158][T16587] name failslab, interval 1, probability 0, space 0, times 0 [ 442.806931][T16587] CPU: 1 UID: 0 PID: 16587 Comm: syz.2.2621 Not tainted syzkaller #0 PREEMPT(full) [ 442.806958][T16587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 442.806969][T16587] Call Trace: [ 442.806976][T16587] [ 442.806984][T16587] dump_stack_lvl+0x189/0x250 [ 442.807009][T16587] ? __pfx____ratelimit+0x10/0x10 [ 442.807033][T16587] ? __pfx_dump_stack_lvl+0x10/0x10 [ 442.807051][T16587] ? __pfx__printk+0x10/0x10 [ 442.807074][T16587] ? __lock_acquire+0xab9/0xd20 [ 442.807105][T16587] should_fail_ex+0x414/0x560 [ 442.807133][T16587] should_failslab+0xa8/0x100 [ 442.807156][T16587] kmem_cache_alloc_noprof+0x73/0x3c0 [ 442.807176][T16587] ? skb_clone+0x212/0x3a0 [ 442.807201][T16587] skb_clone+0x212/0x3a0 [ 442.807225][T16587] __netlink_deliver_tap+0x404/0x850 [ 442.807258][T16587] ? netlink_deliver_tap+0x2e/0x1b0 [ 442.807278][T16587] netlink_deliver_tap+0x19c/0x1b0 [ 442.807298][T16587] netlink_unicast+0x7fa/0x9e0 [ 442.807324][T16587] ? __pfx_netlink_unicast+0x10/0x10 [ 442.807343][T16587] ? netlink_sendmsg+0x642/0xb30 [ 442.807358][T16587] ? skb_put+0x11b/0x210 [ 442.807381][T16587] netlink_sendmsg+0x805/0xb30 [ 442.807410][T16587] ? __pfx_netlink_sendmsg+0x10/0x10 [ 442.807432][T16587] ? aa_sock_msg_perm+0xf1/0x1d0 [ 442.807458][T16587] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 442.807473][T16587] ? __pfx_netlink_sendmsg+0x10/0x10 [ 442.807492][T16587] __sock_sendmsg+0x21c/0x270 [ 442.807518][T16587] sock_write_iter+0x258/0x330 [ 442.807544][T16587] ? __pfx_sock_write_iter+0x10/0x10 [ 442.807591][T16587] do_iter_readv_writev+0x61c/0x8b0 [ 442.807619][T16587] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 442.807644][T16587] ? common_file_perm+0x1b5/0x230 [ 442.807672][T16587] ? bpf_lsm_file_permission+0x9/0x20 [ 442.807688][T16587] ? security_file_permission+0x75/0x290 [ 442.807711][T16587] ? rw_verify_area+0x255/0x4d0 [ 442.807734][T16587] vfs_writev+0x31a/0x960 [ 442.807755][T16587] ? __lock_acquire+0xab9/0xd20 [ 442.807777][T16587] ? __pfx_vfs_writev+0x10/0x10 [ 442.807810][T16587] ? __fget_files+0x2a/0x420 [ 442.807836][T16587] ? __fget_files+0x3a0/0x420 [ 442.807855][T16587] ? __fget_files+0x2a/0x420 [ 442.807886][T16587] do_writev+0x14d/0x2d0 [ 442.807904][T16587] ? __pfx_do_writev+0x10/0x10 [ 442.807917][T16587] ? rcu_is_watching+0x15/0xb0 [ 442.807938][T16587] ? do_syscall_64+0xbe/0x3b0 [ 442.807959][T16587] do_syscall_64+0xfa/0x3b0 [ 442.807974][T16587] ? lockdep_hardirqs_on+0x9c/0x150 [ 442.807996][T16587] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.808012][T16587] ? clear_bhb_loop+0x60/0xb0 [ 442.808033][T16587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.808049][T16587] RIP: 0033:0x7f11bcd8eec9 [ 442.808065][T16587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.808080][T16587] RSP: 002b:00007f11bdc9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 442.808099][T16587] RAX: ffffffffffffffda RBX: 00007f11bcfe5fa0 RCX: 00007f11bcd8eec9 [ 442.808111][T16587] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005 [ 442.808122][T16587] RBP: 00007f11bdc9f090 R08: 0000000000000000 R09: 0000000000000000 [ 442.808133][T16587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.808143][T16587] R13: 00007f11bcfe6038 R14: 00007f11bcfe5fa0 R15: 00007ffee9dd6a88 [ 442.808173][T16587] [ 442.808875][T16587] netlink: 'syz.2.2621': attribute type 1 has an invalid length. [ 443.159515][T16587] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2621'. [ 443.236647][T16593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2623'. [ 443.253671][T16593] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2623'. [ 443.332916][T16599] dvmrp0: entered allmulticast mode [ 443.348138][T16603] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2627'. [ 443.476309][T16605] lo speed is unknown, defaulting to 1000 [ 443.480545][T16607] IPv6: NLM_F_REPLACE set, but no existing node found! [ 443.539157][T16610] netlink: 'syz.2.2629': attribute type 1 has an invalid length. [ 443.552932][T16610] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2629'. [ 443.773075][T16622] netlink: 'syz.0.2633': attribute type 10 has an invalid length. [ 443.806939][T16622] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 443.836527][T16622] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2633'. [ 444.025870][ T5872] Bluetooth: hci2: command tx timeout [ 444.268791][T16645] sit0: entered promiscuous mode [ 444.283380][T16645] netlink: 'syz.4.2641': attribute type 1 has an invalid length. [ 444.376709][T16653] veth1_macvtap: left promiscuous mode [ 444.382224][T16653] macsec0: entered allmulticast mode [ 444.409393][T16653] veth1_macvtap: entered promiscuous mode [ 444.418750][T16653] veth1_macvtap: entered allmulticast mode [ 444.432661][T16653] macsec0: left allmulticast mode [ 444.439013][T16653] veth1_macvtap: left allmulticast mode [ 444.439141][T16657] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 444.458112][T16653] sit0: entered promiscuous mode [ 444.469110][T16653] netlink: 'syz.0.2640': attribute type 1 has an invalid length. [ 444.816683][T16673] lo speed is unknown, defaulting to 1000 [ 444.817972][T16683] netlink: 'syz.0.2655': attribute type 1 has an invalid length. [ 445.767015][T16723] syzkaller0: entered promiscuous mode [ 445.772522][T16723] syzkaller0: entered allmulticast mode [ 445.980954][ T5186] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 445.991369][ T5186] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 446.001272][ T5186] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 446.011572][ T5186] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 446.019739][ T5186] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 446.055246][T16727] lo speed is unknown, defaulting to 1000 [ 446.513836][T16727] chnl_net:caif_netlink_parms(): no params data found [ 448.105503][ T5872] Bluetooth: hci11: command tx timeout [ 448.313405][T16727] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.323144][T16727] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.330996][T16727] bridge_slave_0: entered allmulticast mode [ 448.340237][T16727] bridge_slave_0: entered promiscuous mode [ 448.359264][T16727] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.366967][T16727] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.374308][T16727] bridge_slave_1: entered allmulticast mode [ 448.383524][T16727] bridge_slave_1: entered promiscuous mode [ 448.490038][T16727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.519056][T16727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.591944][T16727] team0: Port device team_slave_0 added [ 448.604186][T16727] team0: Port device team_slave_1 added [ 448.676324][T16727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.688834][T16727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.723757][T16727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.740112][T16727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.748701][T16727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.780647][T16727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.798102][ T30] audit: type=1800 audit(1758772219.553:9): pid=16764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2675" name="memory.events" dev="tmpfs" ino=130 res=0 errno=0 [ 448.859833][T16727] hsr_slave_0: entered promiscuous mode [ 448.904218][T16727] hsr_slave_1: entered promiscuous mode [ 448.912278][T16727] debugfs: 'hsr0' already exists in 'hsr' [ 448.920336][T16727] Cannot create hsr debugfs directory [ 449.118784][T16727] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.187421][T16727] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.282664][T16727] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.356907][T16727] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.393837][T16793] team_slave_0: entered promiscuous mode [ 449.399970][T16793] team_slave_1: entered promiscuous mode [ 449.408966][T16793] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 449.584463][T16727] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 449.599853][T16727] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 449.618637][T16727] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 449.636302][T16727] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 449.675252][T16803] lo speed is unknown, defaulting to 1000 [ 449.803423][T16814] syz_tun: entered promiscuous mode [ 449.818715][T16814] syz_tun: entered allmulticast mode [ 450.068568][T16816] dvmrp0: entered allmulticast mode [ 450.108905][T16727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.182324][T16727] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.194704][ T5872] Bluetooth: hci11: command tx timeout [ 450.257938][ T1083] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.265135][ T1083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.287480][ T1083] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.294693][ T1083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.421603][T16727] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 450.477668][T16727] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 450.798487][T16839] __nla_validate_parse: 8 callbacks suppressed [ 450.798505][T16839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2701'. [ 451.157934][T16839] bridge_slave_1: left allmulticast mode [ 451.170095][T16839] bridge_slave_1: left promiscuous mode [ 451.202098][T16839] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.222602][T16839] bridge_slave_0: left allmulticast mode [ 451.247487][T16839] bridge_slave_0: left promiscuous mode [ 451.263414][T16839] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.490272][T16727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.574299][T16727] veth0_vlan: entered promiscuous mode [ 451.618733][T16727] veth1_vlan: entered promiscuous mode [ 451.690780][T16727] veth0_macvtap: entered promiscuous mode [ 451.710209][T16727] veth1_macvtap: entered promiscuous mode [ 451.763474][T16849] netlink: 'syz.0.2703': attribute type 1 has an invalid length. [ 451.771824][T16849] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2703'. [ 451.792080][T16727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.812598][T16727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.830521][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.881026][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.913291][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.935841][T16855] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2705'. [ 451.943645][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.024236][T16860] sctp: [Deprecated]: syz.2.2707 (pid 16860) Use of struct sctp_assoc_value in delayed_ack socket option. [ 452.024236][T16860] Use struct sctp_sack_info instead [ 452.100366][ T1083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.114178][ T1083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.198069][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.200953][T16868] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2710'. [ 452.221933][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.268677][ T5872] Bluetooth: hci11: command tx timeout [ 452.325783][T16866] netlink: 'syz.4.2709': attribute type 11 has an invalid length. [ 452.388346][T16876] dummy0: entered promiscuous mode [ 452.405689][T16876] batadv_slave_0: entered promiscuous mode [ 452.425969][T16876] batadv_slave_0: left promiscuous mode [ 452.427816][ T5875] Bluetooth: hci0: command 0x080f tx timeout [ 452.468864][T16876] dummy0: left promiscuous mode [ 452.697917][T16883] syzkaller1: entered promiscuous mode [ 452.703646][T16883] syzkaller1: entered allmulticast mode [ 452.767430][T16892] sock: sock_timestamping_bind_phc: sock not bind to device [ 453.116272][T16901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2720'. [ 453.152960][T16900] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2719'. [ 453.310285][ T5875] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 453.320401][ T5875] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 453.329440][ T5875] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 453.340218][ T5875] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 453.349603][ T5875] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 453.352926][T16908] netlink: 'syz.3.2722': attribute type 1 has an invalid length. [ 453.382010][T16908] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2722'. [ 453.487015][T16905] lo speed is unknown, defaulting to 1000 [ 453.572557][T16922] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2722'. [ 453.643851][T16922] 8021q: VLANs not supported on sit0 [ 453.662424][T16927] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2726'. [ 454.345193][ T5186] Bluetooth: hci11: command tx timeout [ 454.626531][T16970] netlink: 'syz.0.2734': attribute type 4 has an invalid length. [ 454.649674][T16963] bridge1: entered promiscuous mode [ 454.655419][T16963] bridge1: entered allmulticast mode [ 454.693645][T16905] chnl_net:caif_netlink_parms(): no params data found [ 454.713698][T16961] netlink: 'syz.0.2734': attribute type 4 has an invalid length. [ 454.817207][T16973] netlink: 'syz.2.2737': attribute type 39 has an invalid length. [ 454.877664][T16973] veth0_macvtap: left promiscuous mode [ 455.056520][T16905] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.063728][T16905] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.082109][T16905] bridge_slave_0: entered allmulticast mode [ 455.090874][T16905] bridge_slave_0: entered promiscuous mode [ 455.114181][T16992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2743'. [ 455.126695][T16991] tipc: Started in network mode [ 455.131595][T16991] tipc: Node identity 16f463c36d4f, cluster identity 4711 [ 455.148104][T16991] tipc: Enabled bearer , priority 0 [ 455.156181][T16991] syzkaller0: entered promiscuous mode [ 455.161671][T16991] syzkaller0: entered allmulticast mode [ 455.179514][T16905] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.202351][T16905] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.210827][T16905] bridge_slave_1: entered allmulticast mode [ 455.227549][T16905] bridge_slave_1: entered promiscuous mode [ 455.258229][T16996] netlink: 'syz.2.2743': attribute type 1 has an invalid length. [ 455.279257][T16991] tipc: Resetting bearer [ 455.289763][T16989] tipc: Resetting bearer [ 455.338076][T16989] tipc: Disabling bearer [ 455.385848][ T5186] Bluetooth: hci12: command tx timeout [ 455.430980][T16905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.447392][T16905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.533912][T16988] infiniband syz!: set active [ 455.546500][T16988] infiniband syz!: added team_slave_0 [ 455.638937][T16905] team0: Port device team_slave_0 added [ 455.671972][T16905] team0: Port device team_slave_1 added [ 455.688643][T16988] RDS/IB: syz!: added [ 455.869424][T16905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.882022][T16905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.912320][T16905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.939540][T16905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.952675][T16905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.982713][T16905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.256664][T16905] hsr_slave_0: entered promiscuous mode [ 456.271991][T16905] hsr_slave_1: entered promiscuous mode [ 456.285797][T16905] debugfs: 'hsr0' already exists in 'hsr' [ 456.295914][T16905] Cannot create hsr debugfs directory [ 456.494205][T17039] 8021q: adding VLAN 0 to HW filter on device bond1 [ 457.080844][T17051] netlink: 'syz.2.2758': attribute type 13 has an invalid length. [ 457.101224][T16905] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.105208][T17051] netlink: 'syz.2.2758': attribute type 17 has an invalid length. [ 457.285750][T17051] sit0: left promiscuous mode [ 457.378342][T17051] syz_tun: left promiscuous mode [ 457.383521][T17051] syz_tun: left allmulticast mode [ 457.473035][T17051] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 457.490477][ T5186] Bluetooth: hci12: command tx timeout [ 457.536853][T16905] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.570874][T17060] __nla_validate_parse: 3 callbacks suppressed [ 457.570893][T17060] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2761'. [ 457.580103][T17048] lo speed is unknown, defaulting to 1000 [ 457.723961][T16905] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.872227][T16905] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.054048][T17073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2764'. [ 458.181462][T17071] lo speed is unknown, defaulting to 1000 [ 458.207197][T16905] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 458.218675][T16905] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 458.238104][T16905] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 458.259699][T16905] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 458.401868][T16905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.433789][T16905] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.451179][ T1083] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.458426][ T1083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.483912][ T1083] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.491201][ T1083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.780126][T17089] tipc: Started in network mode [ 458.788455][T17089] tipc: Node identity 7f000001, cluster identity 4711 [ 458.796459][T17089] tipc: Enabled bearer , priority 10 [ 458.803093][T17088] tipc: Enabling of bearer rejected, already enabled [ 458.991650][T16905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 459.132886][T17098] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2766'. [ 459.143929][T17098] sock: sock_timestamping_bind_phc: sock not bind to device [ 459.418287][T16905] veth0_vlan: entered promiscuous mode [ 459.437537][T16905] veth1_vlan: entered promiscuous mode [ 459.523414][T17108] netlink: 'syz.3.2768': attribute type 1 has an invalid length. [ 459.533966][T17108] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2768'. [ 459.545241][ T5186] Bluetooth: hci12: command tx timeout [ 459.552160][T16905] veth0_macvtap: entered promiscuous mode [ 459.631434][T16905] veth1_macvtap: entered promiscuous mode [ 459.659122][T16905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.679219][T16905] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.703817][ T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.722530][ T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.748817][ T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.759427][ T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.852948][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.866531][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.914867][T14564] tipc: Node number set to 2130706433 [ 459.915626][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.928899][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.398775][T17118] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.433737][T17119] vlan0: entered promiscuous mode [ 460.494298][T17118] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.579294][T17118] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.703996][T17118] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.852713][ T1083] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.880837][ T1083] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.891098][ T1083] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.922311][ T1083] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.987429][T17122] bond0: entered promiscuous mode [ 460.992611][T17122] bond_slave_0: entered promiscuous mode [ 460.998627][T17122] bond_slave_1: entered promiscuous mode [ 461.007060][T17122] batadv0: entered promiscuous mode [ 461.012983][T17122] debugfs: 'hsr1' already exists in 'hsr' [ 461.019727][T17122] Cannot create hsr debugfs directory [ 461.027582][T17122] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 461.035541][T17123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2770'. [ 461.044412][T17123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2770'. [ 461.625101][ T5186] Bluetooth: hci12: command tx timeout [ 464.982001][T17111] lo speed is unknown, defaulting to 1000 [ 465.193451][T17137] netlink: 'syz.0.2773': attribute type 6 has an invalid length. [ 465.228943][T17127] lo speed is unknown, defaulting to 1000 [ 465.681630][T17166] syz_tun: entered allmulticast mode [ 465.751188][T17166] dvmrp8: entered allmulticast mode [ 465.758982][T17168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2779'. [ 465.772868][T17166] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 466.694486][T14560] IPVS: starting estimator thread 0... [ 466.784787][T17180] IPVS: using max 33 ests per chain, 79200 per kthread [ 468.191373][T17198] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2789'. [ 468.271823][T17205] netlink: 'syz.0.2790': attribute type 1 has an invalid length. [ 468.280450][T17205] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2790'. [ 468.636031][T17211] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2793'. [ 468.776875][T17213] netlink: 6 bytes leftover after parsing attributes in process `syz.6.2793'. [ 468.806313][T17213] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 469.529766][T17215] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2804'. [ 469.781982][T17228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2806'. [ 471.321226][T17260] sit0: entered promiscuous mode [ 471.332015][T17260] netlink: 'syz.6.2808': attribute type 1 has an invalid length. [ 471.340610][T17260] netlink: 1 bytes leftover after parsing attributes in process `syz.6.2808'. [ 472.108803][ T5875] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 472.123798][ T5875] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 472.132256][ T5875] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 472.140571][ T5875] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 472.149517][ T5875] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 472.198005][T17270] lo speed is unknown, defaulting to 1000 [ 472.246070][T17275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2813'. [ 472.556449][T17277] 8021q: VLANs not supported on nlmon0 [ 472.715224][T17270] chnl_net:caif_netlink_parms(): no params data found [ 472.829223][T17270] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.837580][T17270] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.845516][T17270] bridge_slave_0: entered allmulticast mode [ 472.853861][T17270] bridge_slave_0: entered promiscuous mode [ 472.863933][T17270] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.871871][T17270] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.879662][T17270] bridge_slave_1: entered allmulticast mode [ 472.888245][T17270] bridge_slave_1: entered promiscuous mode [ 473.014115][T17290] veth3: entered promiscuous mode [ 473.023595][T17270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.039813][T17270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.103252][T17270] team0: Port device team_slave_0 added [ 473.117530][T17270] team0: Port device team_slave_1 added [ 473.339597][T17270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 473.346885][T17270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.374524][T17270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 473.402161][T17270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.413071][T17270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.440293][T17270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.694219][T17270] hsr_slave_0: entered promiscuous mode [ 473.752539][T17270] hsr_slave_1: entered promiscuous mode [ 473.844030][T17270] debugfs: 'hsr0' already exists in 'hsr' [ 473.863119][T17270] Cannot create hsr debugfs directory [ 474.073290][T17299] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2818'. [ 474.149943][T17304] sock: sock_timestamping_bind_phc: sock not bind to device [ 474.186073][ T5186] Bluetooth: hci13: command tx timeout [ 474.217934][ T5875] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 474.233401][ T5875] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 474.243561][ T5875] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 474.254404][ T5875] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 474.262933][T17308] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2820'. [ 474.273972][ T5875] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 474.301705][T17270] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.314138][T17270] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 51536 - 0 [ 474.372696][T17305] lo speed is unknown, defaulting to 1000 [ 474.416867][T17270] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.435276][T17270] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 51536 - 0 [ 474.553808][T17270] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.575046][T17270] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 51536 - 0 [ 474.761532][T17270] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.782187][T17270] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 51536 - 0 [ 474.822012][T17318] lo speed is unknown, defaulting to 1000 [ 475.017989][T17270] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 475.064492][T17270] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 475.089622][T17270] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 475.105403][T17270] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 475.375788][T17270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.474263][T17270] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.522796][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.530005][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.585335][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.592450][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.606824][T17305] chnl_net:caif_netlink_parms(): no params data found [ 475.801871][T17305] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.809331][T17305] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.817137][T17305] bridge_slave_0: entered allmulticast mode [ 475.824473][T17305] bridge_slave_0: entered promiscuous mode [ 475.839609][T17305] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.846957][T17305] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.854206][T17305] bridge_slave_1: entered allmulticast mode [ 475.867314][T17305] bridge_slave_1: entered promiscuous mode [ 475.903821][T17305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.920816][T17305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.973765][T17305] team0: Port device team_slave_0 added [ 475.984331][T17305] team0: Port device team_slave_1 added [ 476.024162][T17305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.032287][T17305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.058837][T17305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.074335][T17305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.081514][T17305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.107923][T17305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.189747][T17305] hsr_slave_0: entered promiscuous mode [ 476.200547][T17305] hsr_slave_1: entered promiscuous mode [ 476.207552][T17305] debugfs: 'hsr0' already exists in 'hsr' [ 476.213413][T17305] Cannot create hsr debugfs directory [ 476.276383][ T5875] Bluetooth: hci13: command tx timeout [ 476.326456][T17270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.344983][ T5875] Bluetooth: hci14: command tx timeout [ 476.393728][T17305] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.456695][T17305] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.533607][T17305] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.603803][T17305] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.694417][T17270] veth0_vlan: entered promiscuous mode [ 476.726359][T17270] veth1_vlan: entered promiscuous mode [ 476.900838][T17305] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 476.919258][T17305] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 476.940305][T17270] veth0_macvtap: entered promiscuous mode [ 476.952058][T17305] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 476.969971][T17270] veth1_macvtap: entered promiscuous mode [ 476.979475][T17305] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 477.050479][T17270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.097704][T17270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.110642][ T5186] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 477.121193][ T5186] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 477.129190][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.129985][ T5186] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 477.148255][ T5186] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 477.156623][ T5186] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 477.161511][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.173177][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.192086][ T49] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.276423][T17360] lo speed is unknown, defaulting to 1000 [ 477.481170][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.487053][T17305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.507405][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.553886][T17305] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.590464][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.597668][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.629571][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.636760][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.660674][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.677930][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.704112][T17363] pim6reg: entered allmulticast mode [ 477.715823][T17363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2827'. [ 477.877029][T17368] FAULT_INJECTION: forcing a failure. [ 477.877029][T17368] name failslab, interval 1, probability 0, space 0, times 0 [ 477.899972][T17368] CPU: 0 UID: 0 PID: 17368 Comm: syz.8.2811 Not tainted syzkaller #0 PREEMPT(full) [ 477.899998][T17368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 477.900009][T17368] Call Trace: [ 477.900017][T17368] [ 477.900025][T17368] dump_stack_lvl+0x189/0x250 [ 477.900049][T17368] ? __pfx____ratelimit+0x10/0x10 [ 477.900071][T17368] ? __pfx_dump_stack_lvl+0x10/0x10 [ 477.900088][T17368] ? __pfx__printk+0x10/0x10 [ 477.900107][T17368] ? __lock_acquire+0xab9/0xd20 [ 477.900135][T17368] should_fail_ex+0x414/0x560 [ 477.900161][T17368] should_failslab+0xa8/0x100 [ 477.900183][T17368] kmem_cache_alloc_noprof+0x73/0x3c0 [ 477.900202][T17368] ? skb_clone+0x212/0x3a0 [ 477.900227][T17368] skb_clone+0x212/0x3a0 [ 477.900251][T17368] __netlink_deliver_tap+0x404/0x850 [ 477.900290][T17368] ? netlink_deliver_tap+0x2e/0x1b0 [ 477.900310][T17368] netlink_deliver_tap+0x19c/0x1b0 [ 477.900329][T17368] netlink_unicast+0x7fa/0x9e0 [ 477.900356][T17368] ? __pfx_netlink_unicast+0x10/0x10 [ 477.900375][T17368] ? netlink_sendmsg+0x642/0xb30 [ 477.900391][T17368] ? skb_put+0x11b/0x210 [ 477.900414][T17368] netlink_sendmsg+0x805/0xb30 [ 477.900442][T17368] ? __pfx_netlink_sendmsg+0x10/0x10 [ 477.900465][T17368] ? aa_sock_msg_perm+0xf1/0x1d0 [ 477.900491][T17368] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 477.900508][T17368] ? __pfx_netlink_sendmsg+0x10/0x10 [ 477.900527][T17368] __sock_sendmsg+0x21c/0x270 [ 477.900554][T17368] ____sys_sendmsg+0x505/0x830 [ 477.900580][T17368] ? __pfx_____sys_sendmsg+0x10/0x10 [ 477.900610][T17368] ? import_iovec+0x74/0xa0 [ 477.900634][T17368] ___sys_sendmsg+0x21f/0x2a0 [ 477.900657][T17368] ? __pfx____sys_sendmsg+0x10/0x10 [ 477.900716][T17368] ? __fget_files+0x2a/0x420 [ 477.900737][T17368] ? __fget_files+0x3a0/0x420 [ 477.900770][T17368] __x64_sys_sendmsg+0x19b/0x260 [ 477.900794][T17368] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 477.900824][T17368] ? __pfx_ksys_write+0x10/0x10 [ 477.900842][T17368] ? rcu_is_watching+0x15/0xb0 [ 477.900864][T17368] ? do_syscall_64+0xbe/0x3b0 [ 477.900885][T17368] do_syscall_64+0xfa/0x3b0 [ 477.900899][T17368] ? lockdep_hardirqs_on+0x9c/0x150 [ 477.900922][T17368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.900938][T17368] ? clear_bhb_loop+0x60/0xb0 [ 477.900959][T17368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.900975][T17368] RIP: 0033:0x7f9f82b8eec9 [ 477.900991][T17368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 477.901006][T17368] RSP: 002b:00007f9f83991038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 477.901025][T17368] RAX: ffffffffffffffda RBX: 00007f9f82de5fa0 RCX: 00007f9f82b8eec9 [ 477.901037][T17368] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 477.901048][T17368] RBP: 00007f9f83991090 R08: 0000000000000000 R09: 0000000000000000 [ 477.901058][T17368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.901069][T17368] R13: 00007f9f82de6038 R14: 00007f9f82de5fa0 R15: 00007ffdafbc9da8 [ 477.901099][T17368] [ 478.358600][ T5186] Bluetooth: hci13: command tx timeout [ 478.426840][ T5186] Bluetooth: hci14: command tx timeout [ 478.499181][T17380] netlink: 'syz.8.2829': attribute type 1 has an invalid length. [ 478.544117][T17360] chnl_net:caif_netlink_parms(): no params data found [ 478.720872][T17360] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.735652][T17360] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.748633][T17360] bridge_slave_0: entered allmulticast mode [ 478.758570][T17360] bridge_slave_0: entered promiscuous mode [ 478.782124][T17393] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2831'. [ 478.814133][T17305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.822144][T17360] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.834450][T17360] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.843308][T17360] bridge_slave_1: entered allmulticast mode [ 478.851798][T17360] bridge_slave_1: entered promiscuous mode [ 479.047205][T17360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.077115][T17360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.196380][T17360] team0: Port device team_slave_0 added [ 479.203466][T17405] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 479.225430][ T5186] Bluetooth: hci15: command tx timeout [ 479.242617][T17360] team0: Port device team_slave_1 added [ 480.426395][ T5186] Bluetooth: hci13: command tx timeout [ 480.505236][ T5186] Bluetooth: hci14: command tx timeout [ 481.010249][T17360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.020247][T17360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.052577][T17360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.075613][T17360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.082596][T17360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.110162][T17360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.253965][T17407] lo speed is unknown, defaulting to 1000 [ 481.267499][T17360] hsr_slave_0: entered promiscuous mode [ 481.280058][T17360] hsr_slave_1: entered promiscuous mode [ 481.295937][T17360] debugfs: 'hsr0' already exists in 'hsr' [ 481.301701][T17360] Cannot create hsr debugfs directory [ 481.308607][ T5186] Bluetooth: hci15: command tx timeout [ 481.443908][T17305] veth0_vlan: entered promiscuous mode [ 481.524590][T17305] veth1_vlan: entered promiscuous mode [ 481.648570][T17305] veth0_macvtap: entered promiscuous mode [ 481.702223][T17305] veth1_macvtap: entered promiscuous mode [ 481.720813][T17410] lo speed is unknown, defaulting to 1000 [ 481.793380][T17305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.808718][T17305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.903385][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.922611][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.023050][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.097911][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.302038][ T1083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.315045][ T1083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.417557][T17360] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 482.460659][T17360] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 482.480448][T17360] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 482.497048][T17360] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 482.503849][ T1083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.520009][ T1083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.585750][ T5186] Bluetooth: hci14: command tx timeout [ 482.718278][T17422] lo speed is unknown, defaulting to 1000 [ 482.734030][T17360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.832721][T17360] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.852284][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.859481][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.877068][ T1083] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.884253][ T1083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 483.187536][T17360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.383462][T17435] FAULT_INJECTION: forcing a failure. [ 483.383462][T17435] name failslab, interval 1, probability 0, space 0, times 0 [ 483.400290][T17435] CPU: 1 UID: 0 PID: 17435 Comm: syz.5.2837 Not tainted syzkaller #0 PREEMPT(full) [ 483.400313][T17435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 483.400323][T17435] Call Trace: [ 483.400329][T17435] [ 483.400337][T17435] dump_stack_lvl+0x189/0x250 [ 483.400359][T17435] ? __pfx____ratelimit+0x10/0x10 [ 483.400381][T17435] ? __pfx_dump_stack_lvl+0x10/0x10 [ 483.400397][T17435] ? __pfx__printk+0x10/0x10 [ 483.400419][T17435] ? __pfx___might_resched+0x10/0x10 [ 483.400442][T17435] ? fs_reclaim_acquire+0x7d/0x100 [ 483.400470][T17435] should_fail_ex+0x414/0x560 [ 483.400498][T17435] should_failslab+0xa8/0x100 [ 483.400520][T17435] __kmalloc_noprof+0xcb/0x4f0 [ 483.400540][T17435] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 483.400568][T17435] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 483.400599][T17435] genl_family_rcv_msg_doit+0xb8/0x300 [ 483.400628][T17435] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 483.400659][T17435] ? apparmor_capable+0x137/0x1b0 [ 483.400681][T17435] ? bpf_lsm_capable+0x9/0x20 [ 483.400700][T17435] ? security_capable+0x7e/0x2e0 [ 483.400730][T17435] genl_rcv_msg+0x60e/0x790 [ 483.400758][T17435] ? __pfx_genl_rcv_msg+0x10/0x10 [ 483.400786][T17435] ? __pfx_l2tp_nl_cmd_tunnel_create+0x10/0x10 [ 483.400808][T17435] ? __asan_memcpy+0x40/0x70 [ 483.400825][T17435] ? __pfx_ref_tracker_free+0x10/0x10 [ 483.400856][T17435] netlink_rcv_skb+0x208/0x470 [ 483.400873][T17435] ? __lock_acquire+0xab9/0xd20 [ 483.400894][T17435] ? __pfx_genl_rcv_msg+0x10/0x10 [ 483.400915][T17435] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 483.400953][T17435] ? down_read+0x1ad/0x2e0 [ 483.400973][T17435] genl_rcv+0x28/0x40 [ 483.400992][T17435] netlink_unicast+0x82c/0x9e0 [ 483.401019][T17435] ? __pfx_netlink_unicast+0x10/0x10 [ 483.401037][T17435] ? netlink_sendmsg+0x642/0xb30 [ 483.401053][T17435] ? skb_put+0x11b/0x210 [ 483.401075][T17435] netlink_sendmsg+0x805/0xb30 [ 483.401101][T17435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.401122][T17435] ? aa_sock_msg_perm+0xf1/0x1d0 [ 483.401146][T17435] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 483.401162][T17435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.401182][T17435] __sock_sendmsg+0x21c/0x270 [ 483.401207][T17435] ____sys_sendmsg+0x505/0x830 [ 483.401234][T17435] ? __pfx_____sys_sendmsg+0x10/0x10 [ 483.401264][T17435] ? import_iovec+0x74/0xa0 [ 483.401289][T17435] ___sys_sendmsg+0x21f/0x2a0 [ 483.401309][T17435] ? __pfx____sys_sendmsg+0x10/0x10 [ 483.401368][T17435] ? __fget_files+0x2a/0x420 [ 483.401388][T17435] ? __fget_files+0x3a0/0x420 [ 483.401421][T17435] __x64_sys_sendmsg+0x19b/0x260 [ 483.401444][T17435] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 483.401475][T17435] ? __pfx_ksys_write+0x10/0x10 [ 483.401493][T17435] ? rcu_is_watching+0x15/0xb0 [ 483.401515][T17435] ? do_syscall_64+0xbe/0x3b0 [ 483.401536][T17435] do_syscall_64+0xfa/0x3b0 [ 483.401551][T17435] ? lockdep_hardirqs_on+0x9c/0x150 [ 483.401573][T17435] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.401590][T17435] ? clear_bhb_loop+0x60/0xb0 [ 483.401611][T17435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.401627][T17435] RIP: 0033:0x7fe79298eec9 [ 483.401644][T17435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.401658][T17435] RSP: 002b:00007fe793850038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 483.401677][T17435] RAX: ffffffffffffffda RBX: 00007fe792be5fa0 RCX: 00007fe79298eec9 [ 483.401690][T17435] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 483.401701][T17435] RBP: 00007fe793850090 R08: 0000000000000000 R09: 0000000000000000 [ 483.401711][T17435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.401722][T17435] R13: 00007fe792be6038 R14: 00007fe792be5fa0 R15: 00007ffe770e4e38 [ 483.401754][T17435] [ 483.405584][ T5186] Bluetooth: hci15: command tx timeout [ 483.610492][T17440] FAULT_INJECTION: forcing a failure. [ 483.610492][T17440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 483.659304][T17360] veth0_vlan: entered promiscuous mode [ 483.677275][T17440] CPU: 1 UID: 0 PID: 17440 Comm: syz.5.2838 Not tainted syzkaller #0 PREEMPT(full) [ 483.677299][T17440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 483.677309][T17440] Call Trace: [ 483.677316][T17440] [ 483.677325][T17440] dump_stack_lvl+0x189/0x250 [ 483.677349][T17440] ? __pfx____ratelimit+0x10/0x10 [ 483.677373][T17440] ? __pfx_dump_stack_lvl+0x10/0x10 [ 483.677391][T17440] ? __pfx__printk+0x10/0x10 [ 483.677412][T17440] ? __might_fault+0xb0/0x130 [ 483.677443][T17440] should_fail_ex+0x414/0x560 [ 483.677469][T17440] _copy_from_iter+0x1de/0x1790 [ 483.677487][T17440] ? skb_set_owner_w+0x25b/0x3a0 [ 483.677511][T17440] ? sock_alloc_send_pskb+0x875/0x990 [ 483.677538][T17440] ? __pfx__copy_from_iter+0x10/0x10 [ 483.677564][T17440] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 483.677588][T17440] skb_copy_datagram_from_iter+0xf5/0x720 [ 483.677615][T17440] ? skb_put+0x11b/0x210 [ 483.677636][T17440] tun_get_user+0x1691/0x3e20 [ 483.677672][T17440] ? aa_file_perm+0x44d/0x1550 [ 483.677689][T17440] ? __pfx_tun_get_user+0x10/0x10 [ 483.677705][T17440] ? _parse_integer_limit+0x1ae/0x1f0 [ 483.677742][T17440] ? __lock_acquire+0xab9/0xd20 [ 483.677769][T17440] ? ref_tracker_alloc+0x318/0x460 [ 483.677789][T17440] ? __lock_acquire+0xab9/0xd20 [ 483.677811][T17440] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 483.677838][T17440] ? tun_get+0x1c/0x2f0 [ 483.677861][T17440] ? tun_get+0x1c/0x2f0 [ 483.677876][T17440] ? tun_get+0x1c/0x2f0 [ 483.677897][T17440] tun_chr_write_iter+0x113/0x200 [ 483.677918][T17440] vfs_write+0x5c6/0xb30 [ 483.677942][T17440] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 483.677961][T17440] ? __pfx_vfs_write+0x10/0x10 [ 483.677991][T17440] ? __fget_files+0x2a/0x420 [ 483.678020][T17440] ksys_write+0x145/0x250 [ 483.678041][T17440] ? __pfx_ksys_write+0x10/0x10 [ 483.678066][T17440] ? do_syscall_64+0xbe/0x3b0 [ 483.678086][T17440] do_syscall_64+0xfa/0x3b0 [ 483.678101][T17440] ? lockdep_hardirqs_on+0x9c/0x150 [ 483.678122][T17440] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.678138][T17440] ? clear_bhb_loop+0x60/0xb0 [ 483.678157][T17440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.678174][T17440] RIP: 0033:0x7fe79298d97f [ 483.678189][T17440] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 483.678202][T17440] RSP: 002b:00007fe79382f000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 483.678221][T17440] RAX: ffffffffffffffda RBX: 00007fe792be6090 RCX: 00007fe79298d97f [ 483.678232][T17440] RDX: 0000000000000d81 RSI: 0000200000000c00 RDI: 00000000000000c8 [ 483.678243][T17440] RBP: 00007fe79382f090 R08: 0000000000000000 R09: 0000000000000000 [ 483.678254][T17440] R10: 0000000000000d81 R11: 0000000000000293 R12: 0000000000000001 [ 483.678263][T17440] R13: 00007fe792be6128 R14: 00007fe792be6090 R15: 00007ffe770e4e38 [ 483.678291][T17440] [ 484.120100][T17360] veth1_vlan: entered promiscuous mode [ 484.216010][T17360] veth0_macvtap: entered promiscuous mode [ 484.228505][T17360] veth1_macvtap: entered promiscuous mode [ 484.262483][T17360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.287685][T17360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.301594][ T1083] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.310768][ T1083] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.327578][ T1083] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.337888][ T1083] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.475111][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.495214][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.508790][T17448] syz_tun: entered allmulticast mode [ 484.528253][T17448] dvmrp8: entered allmulticast mode [ 484.541275][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.549574][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.583906][T17448] lo speed is unknown, defaulting to 1000 [ 485.056527][T17447] syz_tun: left allmulticast mode [ 485.061707][T17447] dvmrp8: left allmulticast mode [ 485.444925][T17467] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2847'. [ 485.454078][T17467] netlink: 'syz.5.2847': attribute type 1 has an invalid length. [ 485.520533][T17468] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2847'. [ 485.562278][T17467] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2847'. [ 485.571889][T17467] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 485.625261][ T5186] Bluetooth: hci15: command tx timeout [ 486.072391][T17494] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2855'. [ 486.127016][T17496] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2856'. [ 486.141821][T17496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 486.149983][T17496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 486.159246][T17496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 486.166830][T17496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 486.289383][T17498] tc_dump_action: action bad kind [ 486.691389][T17506] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2859'. [ 486.749496][T17506] veth1_vlan: entered allmulticast mode [ 486.896794][T17510] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2861'. [ 486.917114][T17510] syzkaller1: entered promiscuous mode [ 486.922973][T17510] syzkaller1: entered allmulticast mode [ 487.526901][T17529] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2866'. [ 488.038860][T17537] netlink: 'syz.5.2868': attribute type 13 has an invalid length. [ 488.046816][T17537] netlink: 'syz.5.2868': attribute type 17 has an invalid length. [ 488.092483][T17538] netlink: 'syz.5.2868': attribute type 13 has an invalid length. [ 488.102489][T17538] netlink: 'syz.5.2868': attribute type 17 has an invalid length. [ 488.146513][T17537] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 488.173931][T17538] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 488.267010][ T5875] Bluetooth: hci4: command 0x0405 tx timeout [ 488.299397][T17544] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 488.308191][T17545] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 489.523382][T17569] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2876'. [ 489.630997][T17573] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2878'. [ 489.631744][T17571] lo speed is unknown, defaulting to 1000 [ 489.792628][T17576] tipc: Started in network mode [ 489.799218][T17576] tipc: Node identity aed28fbb37be, cluster identity 4711 [ 489.807070][T17576] tipc: Enabled bearer , priority 0 [ 489.817309][T17576] syzkaller0: entered promiscuous mode [ 489.822871][T17576] syzkaller0: entered allmulticast mode [ 489.862389][T17576] tipc: Resetting bearer [ 489.883603][T17575] tipc: Resetting bearer [ 489.905541][ T5875] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 489.916655][ T5875] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 489.925205][ T5875] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 489.933341][ T5875] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 489.942450][ T5875] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 489.985687][T17575] tipc: Disabling bearer [ 490.019988][T17577] lo speed is unknown, defaulting to 1000 [ 490.341919][T17589] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 490.478707][T17590] lo speed is unknown, defaulting to 1000 [ 491.039439][T17577] chnl_net:caif_netlink_parms(): no params data found [ 491.299405][T17577] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.310856][T17577] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.318908][T17577] bridge_slave_0: entered allmulticast mode [ 491.329152][T17577] bridge_slave_0: entered promiscuous mode [ 491.339661][T17577] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.347261][T17577] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.355941][T17577] bridge_slave_1: entered allmulticast mode [ 491.363935][T17577] bridge_slave_1: entered promiscuous mode [ 491.419280][T17577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.433995][T17577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.491698][T17577] team0: Port device team_slave_0 added [ 491.507096][T17577] team0: Port device team_slave_1 added [ 491.552952][T17577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 491.560040][T17577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.586744][T17577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.601030][T17577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.608227][T17577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.635741][T17577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.666176][T17615] vlan2: entered allmulticast mode [ 491.720307][T17577] hsr_slave_0: entered promiscuous mode [ 491.727787][T17577] hsr_slave_1: entered promiscuous mode [ 491.736614][T17577] debugfs: 'hsr0' already exists in 'hsr' [ 491.742475][T17577] Cannot create hsr debugfs directory [ 491.973674][T17577] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.025979][ T5875] Bluetooth: hci16: command tx timeout [ 492.064856][T17577] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.115372][T17629] netlink: 'syz.7.2890': attribute type 11 has an invalid length. [ 492.127110][T17577] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.196789][T17577] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.239824][T17638] sit0: entered promiscuous mode [ 492.251785][T17638] netlink: 'syz.5.2893': attribute type 1 has an invalid length. [ 492.260776][T17638] __nla_validate_parse: 4 callbacks suppressed [ 492.260791][T17638] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2893'. [ 492.319513][T17640] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2894'. [ 492.446498][T17577] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 492.460167][T17577] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 492.478341][T17577] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 492.492030][T17577] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 492.654019][T17577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.693187][T17577] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.707833][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.715033][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.734168][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.741357][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.023895][T17577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 493.369913][T17577] veth0_vlan: entered promiscuous mode [ 493.395794][T17577] veth1_vlan: entered promiscuous mode [ 493.446462][T17577] veth0_macvtap: entered promiscuous mode [ 493.459760][T17577] veth1_macvtap: entered promiscuous mode [ 493.491459][T17577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 493.511661][T17577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 493.539457][ T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.552198][ T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.562287][ T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.573649][ T1083] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.705678][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.717291][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.791724][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.810487][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.105050][ T5875] Bluetooth: hci16: command tx timeout [ 494.817549][T17715] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2913'. [ 494.836544][ T30] audit: type=1800 audit(1758772265.593:10): pid=17716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2912" name="memory.events" dev="tmpfs" ino=30 res=0 errno=0 [ 494.857424][T17715] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 495.294196][T17727] netlink: 200 bytes leftover after parsing attributes in process `syz.7.2916'. [ 495.305754][T17727] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2916'. [ 495.348238][T17731] netlink: 'syz.5.2918': attribute type 4 has an invalid length. [ 495.430830][T17732] netlink: 'syz.5.2918': attribute type 1 has an invalid length. [ 495.460459][T17732] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2918'. [ 495.706360][T17749] netlink: 308 bytes leftover after parsing attributes in process `syz.5.2925'. [ 495.717992][T17749] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2925'. [ 496.184871][ T5875] Bluetooth: hci16: command tx timeout [ 496.541300][T17769] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2930'. [ 496.787812][T17775] tipc: Enabled bearer , priority 0 [ 496.795725][T17775] syzkaller0: entered promiscuous mode [ 496.801271][T17775] syzkaller0: entered allmulticast mode [ 496.842172][ T5186] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 496.854909][ T5186] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 496.865127][ T5186] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 496.875281][ T5186] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 496.883081][ T5186] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 496.897756][T17779] lo speed is unknown, defaulting to 1000 [ 496.918613][T17784] tipc: Resetting bearer [ 497.105859][ T5875] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 497.117000][ T5875] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 497.126318][ T5875] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 497.135144][ T5875] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 497.143080][ T5875] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 497.188778][T17774] tipc: Resetting bearer [ 497.418539][T17795] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2935'. [ 497.497275][T17774] tipc: Disabling bearer [ 497.580362][T17780] lo speed is unknown, defaulting to 1000 [ 497.802513][T17799] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2937'. [ 497.972929][T17788] lo speed is unknown, defaulting to 1000 [ 498.031198][T17805] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.277475][ T5186] Bluetooth: hci16: command tx timeout [ 498.289623][T17814] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2940'. [ 498.330871][T17814] tipc: Enabled bearer , priority 0 [ 498.367527][T17814] syzkaller0: entered promiscuous mode [ 498.380760][T17814] syzkaller0: entered allmulticast mode [ 498.484267][T17814] tipc: Resetting bearer [ 498.518481][T17813] tipc: Resetting bearer [ 498.549779][T17813] tipc: Disabling bearer [ 498.937110][T17780] chnl_net:caif_netlink_parms(): no params data found [ 498.965869][T17829] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2944'. [ 498.981272][T17822] netlink: 'syz.5.2942': attribute type 10 has an invalid length. [ 498.999839][T17822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 499.015415][T17822] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 499.171592][T17839] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2947'. [ 499.226797][ T5186] Bluetooth: hci17: command tx timeout [ 499.233267][ T5186] Bluetooth: hci18: command tx timeout [ 499.290911][T17843] netlink: 7 bytes leftover after parsing attributes in process `syz.5.2948'. [ 499.321736][T17780] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.342409][T17780] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.360210][T17780] bridge_slave_0: entered allmulticast mode [ 499.368962][T17780] bridge_slave_0: entered promiscuous mode [ 499.389987][T17780] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.397933][T17780] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.412783][T17780] bridge_slave_1: entered allmulticast mode [ 499.422467][T17780] bridge_slave_1: entered promiscuous mode [ 499.430313][T17788] chnl_net:caif_netlink_parms(): no params data found [ 499.517812][T17780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.554096][T17780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.693465][T17780] team0: Port device team_slave_0 added [ 499.739999][T17788] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.748028][T17788] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.755987][T17788] bridge_slave_0: entered allmulticast mode [ 499.768527][T17788] bridge_slave_0: entered promiscuous mode [ 499.782317][T17780] team0: Port device team_slave_1 added [ 499.832080][T17788] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.839450][T17788] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.846887][T17788] bridge_slave_1: entered allmulticast mode [ 499.858052][T17788] bridge_slave_1: entered promiscuous mode [ 499.903466][T17780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.910778][T17780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.938805][T17780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.954141][T17788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.965257][T17780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.972202][T17780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.998723][T17780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.012786][T17788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.067760][T17788] team0: Port device team_slave_0 added [ 500.087169][T17788] team0: Port device team_slave_1 added [ 500.098189][T17780] hsr_slave_0: entered promiscuous mode [ 500.107172][T17780] hsr_slave_1: entered promiscuous mode [ 500.113686][T17780] debugfs: 'hsr0' already exists in 'hsr' [ 500.119651][T17780] Cannot create hsr debugfs directory [ 500.163114][T17788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.173716][T17788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 500.200865][T17788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.220271][T17788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.227610][T17788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 500.255478][T17788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.312993][T17857] netlink: 140 bytes leftover after parsing attributes in process `syz.5.2951'. [ 500.375599][T17788] hsr_slave_0: entered promiscuous mode [ 500.382783][T17788] hsr_slave_1: entered promiscuous mode [ 500.395946][T17788] debugfs: 'hsr0' already exists in 'hsr' [ 500.401720][T17788] Cannot create hsr debugfs directory [ 500.543254][T17866] netlink: 'syz.5.2953': attribute type 13 has an invalid length. [ 500.553973][T17866] netlink: 'syz.5.2953': attribute type 17 has an invalid length. [ 500.589326][T17780] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.602101][T17780] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.641007][T17866] sit0: left promiscuous mode [ 500.697785][T17866] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 500.801094][T17780] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.811703][T17780] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.863023][T17869] lo speed is unknown, defaulting to 1000 [ 500.976695][T17780] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.992499][T17780] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.085600][T17780] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.096695][T17780] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.150892][T17868] lo speed is unknown, defaulting to 1000 [ 501.277592][T17788] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.305799][ T5186] Bluetooth: hci17: command tx timeout [ 501.312591][ T5875] Bluetooth: hci18: command tx timeout [ 501.413327][T17788] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.519863][T17788] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.643627][T17788] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.020469][T17780] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 502.054934][T17780] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 502.069240][T17780] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 502.139435][T17780] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 502.217850][T17788] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 502.242683][T17788] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 502.274301][T17788] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 502.301466][T17788] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 502.498931][T17780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.533278][T17780] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.557395][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.564562][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.581874][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.589089][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.617825][T17788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.654415][T17788] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.677334][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.684545][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.703672][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.710892][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 503.019588][T17780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.038369][T17788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.098865][T17780] veth0_vlan: entered promiscuous mode [ 503.131045][T17780] veth1_vlan: entered promiscuous mode [ 503.138413][T17788] veth0_vlan: entered promiscuous mode [ 503.156645][T17788] veth1_vlan: entered promiscuous mode [ 503.199634][T17780] veth0_macvtap: entered promiscuous mode [ 503.211266][T17788] veth0_macvtap: entered promiscuous mode [ 503.223037][T17780] veth1_macvtap: entered promiscuous mode [ 503.236191][T17788] veth1_macvtap: entered promiscuous mode [ 503.260135][T17780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.280031][T17780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.292233][T17788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.313290][T17788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.323901][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.340460][ T56] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.349787][ T56] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.364503][ T56] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.382196][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.391234][ T5186] Bluetooth: hci17: command tx timeout [ 503.391290][ T5186] Bluetooth: hci18: command tx timeout [ 503.413883][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.423131][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.440138][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.552874][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.566726][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.604493][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.608416][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.621808][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.624349][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.686291][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.694217][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.761335][T17896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2928'. [ 503.771698][T17896] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2928'. [ 503.785500][T17896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2928'. [ 503.804390][T17896] team0: entered promiscuous mode [ 503.809587][T17896] team_slave_0: entered promiscuous mode [ 503.815652][T17896] team_slave_1: entered promiscuous mode [ 503.824088][T17896] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 503.833625][T17896] team0: left promiscuous mode [ 503.839130][T17896] team_slave_0: left promiscuous mode [ 503.845036][T17896] team_slave_1: left promiscuous mode [ 504.061823][T17901] lo speed is unknown, defaulting to 1000 [ 504.073356][T17903] tipc: Started in network mode [ 504.081364][T17903] tipc: Node identity 4, cluster identity 4711 [ 504.091275][T17903] tipc: Node number set to 4 [ 504.134177][T17903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2955'. [ 504.143378][T17903] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 504.201453][T17903] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.210136][T17903] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.226067][T17903] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 504.634122][T17907] ipip0: entered promiscuous mode [ 504.661573][T17909] netlink: 'syz.2.2957': attribute type 2 has an invalid length. [ 504.671717][T17909] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2957'. [ 505.475659][ T5875] Bluetooth: hci18: command tx timeout [ 505.475779][ T5186] Bluetooth: hci17: command tx timeout [ 505.675087][T17918] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2960'. [ 505.839201][T17923] dvmrp0: entered allmulticast mode [ 505.847611][T17920] lo speed is unknown, defaulting to 1000 [ 506.483935][T17928] tipc: Enabled bearer , priority 0 [ 506.508316][T17928] syzkaller0: entered promiscuous mode [ 506.513889][T17928] syzkaller0: entered allmulticast mode [ 506.539490][T17928] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2963'. [ 506.553606][T17928] tipc: Resetting bearer [ 506.569284][T17927] tipc: Resetting bearer [ 506.596778][T17927] tipc: Disabling bearer [ 506.712391][T17930] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2964'. [ 506.833585][T17930] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2964'. [ 506.938261][T17938] netlink: 'syz.1.2965': attribute type 1 has an invalid length. [ 506.946377][T17938] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2965'. [ 508.084241][T17963] veth0: entered promiscuous mode [ 508.130586][T17965] veth0: left promiscuous mode [ 508.368030][T17978] vlan2: entered allmulticast mode [ 509.020721][T17999] __nla_validate_parse: 4 callbacks suppressed [ 509.020738][T17999] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2984'. [ 509.091412][T18001] sctp: [Deprecated]: syz.2.2985 (pid 18001) Use of struct sctp_assoc_value in delayed_ack socket option. [ 509.091412][T18001] Use struct sctp_sack_info instead [ 509.289894][T18005] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2987'. [ 509.419124][T18008] netlink: 'syz.2.2988': attribute type 4 has an invalid length. [ 509.430602][T18008] netlink: 'syz.2.2988': attribute type 4 has an invalid length. [ 509.560624][T18012] lo speed is unknown, defaulting to 1000 [ 509.608202][T18013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2989'. [ 509.740500][ T5948] IPVS: starting estimator thread 0... [ 509.834762][T18021] IPVS: using max 26 ests per chain, 62400 per kthread [ 510.100883][ T30] audit: type=1800 audit(1758772280.853:11): pid=18028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2993" name="memory.events" dev="tmpfs" ino=99 res=0 errno=0 [ 512.433023][ T5875] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 512.448114][ T5875] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 512.458825][ T5875] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 512.469228][ T5875] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 512.478504][ T5875] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 512.533995][T18065] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20002 [ 512.592472][T18064] lo speed is unknown, defaulting to 1000 [ 512.780957][ T30] audit: type=1800 audit(1758772283.533:12): pid=18070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3005" name="memory.events" dev="tmpfs" ino=186 res=0 errno=0 [ 513.144463][T18077] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3007'. [ 513.358833][T18087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3011'. [ 513.394693][T18088] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.441709][T18091] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3010'. [ 513.530548][T18088] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.635454][T18095] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3012'. [ 513.665878][T18088] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.740818][T18088] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.769327][T18064] chnl_net:caif_netlink_parms(): no params data found [ 513.873611][T18097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3012'. [ 513.915636][T18064] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.922944][T18064] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.931359][T18064] bridge_slave_0: entered allmulticast mode [ 513.939123][T18064] bridge_slave_0: entered promiscuous mode [ 513.948987][T18097] veth1_macvtap: left promiscuous mode [ 513.987211][T18064] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.994552][T18064] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.002375][T18064] bridge_slave_1: entered allmulticast mode [ 514.010193][T18064] bridge_slave_1: entered promiscuous mode [ 514.053996][ T56] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.097635][ T56] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.120938][T18064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.134934][T18064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.152077][ T56] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.206870][T18064] team0: Port device team_slave_0 added [ 514.224377][T18064] team0: Port device team_slave_1 added [ 514.310207][ T56] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.323079][T18064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 514.332345][T18064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 514.383336][T18064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 514.394301][T18110] batadv_slave_1: entered promiscuous mode [ 514.402760][T18064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 514.409365][T18110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3015'. [ 514.409915][T18064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 514.445625][T18064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 514.474491][T18110] bridge_slave_1: left allmulticast mode [ 514.480396][T18110] bridge_slave_1: left promiscuous mode [ 514.493301][T18110] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.505272][ T5186] Bluetooth: hci19: command tx timeout [ 514.514005][T18110] bridge_slave_0: left allmulticast mode [ 514.519958][T18110] bridge_slave_0: left promiscuous mode [ 514.526888][T18110] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.658778][T18064] hsr_slave_0: entered promiscuous mode [ 514.666997][T18064] hsr_slave_1: entered promiscuous mode [ 514.676211][T18064] debugfs: 'hsr0' already exists in 'hsr' [ 514.681978][T18064] Cannot create hsr debugfs directory [ 514.857346][T18064] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.941995][T18064] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.027733][T18064] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.093174][T18064] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.189062][T18108] batadv_slave_1: left promiscuous mode [ 515.222203][T18064] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 515.232914][T18064] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 515.243086][T18064] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 515.253144][T18064] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 515.329488][T18064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.353440][T18064] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.366435][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.373596][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.394242][ T1083] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.401459][ T1083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.577086][T18064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 515.744559][T18132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3019'. [ 515.895896][T18137] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3021'. [ 515.924834][T18137] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3021'. [ 516.183862][T18064] veth0_vlan: entered promiscuous mode [ 516.285930][T18064] veth1_vlan: entered promiscuous mode [ 516.374891][T18064] veth0_macvtap: entered promiscuous mode [ 516.395594][T18064] veth1_macvtap: entered promiscuous mode [ 516.414379][T18146] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3023'. [ 516.446368][ T5875] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 516.460305][T18064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.468202][ T5875] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 516.491137][ T5872] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 516.492077][T18152] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3023'. [ 516.499623][ T5872] Bluetooth: hci21: unexpected cc 0x0c03 length: 249 > 1 [ 516.523963][ T5872] Bluetooth: hci21: unexpected cc 0x1003 length: 249 > 9 [ 516.533572][T18153] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 516.533716][ T5872] Bluetooth: hci21: unexpected cc 0x1001 length: 249 > 9 [ 516.550693][ T5872] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 516.560049][T18153] Bluetooth: hci21: unexpected cc 0x0c23 length: 249 > 4 [ 516.569086][ T5186] Bluetooth: hci21: unexpected cc 0x0c38 length: 249 > 2 [ 516.585038][ T5186] Bluetooth: hci19: command tx timeout [ 516.605322][T18064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.764503][T18147] lo speed is unknown, defaulting to 1000 [ 516.784959][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.794435][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.843849][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.974386][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.154392][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.165440][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.185406][T18149] lo speed is unknown, defaulting to 1000 [ 517.196904][T18155] atomic_op ffff888092cfd998 conn xmit_atomic 0000000000000000 [ 517.248724][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.267253][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.521032][T18160] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.528885][T18160] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.677301][T18160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 517.695539][T18160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 517.844765][ T56] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.866526][ T56] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.917999][ T56] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.957187][ T56] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.008830][T18167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3028'. [ 518.070599][T18167] netlink: 'syz.4.3028': attribute type 12 has an invalid length. [ 518.079118][T18167] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.3028'. [ 518.291959][T18147] chnl_net:caif_netlink_parms(): no params data found [ 518.585368][ T5186] Bluetooth: hci20: command tx timeout [ 518.616255][T18147] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.631258][T18147] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.652755][T18147] bridge_slave_0: entered allmulticast mode [ 518.667378][ T5186] Bluetooth: hci21: command tx timeout [ 518.674489][ T5186] Bluetooth: hci19: command tx timeout [ 518.690893][T18147] bridge_slave_0: entered promiscuous mode [ 518.716677][T18147] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.723888][T18147] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.737207][T18147] bridge_slave_1: entered allmulticast mode [ 518.746629][T18147] bridge_slave_1: entered promiscuous mode [ 518.789020][T18199] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3035'. [ 518.805433][T18199] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3035'. [ 518.851505][T18147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.885568][T18147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 518.896227][T18149] chnl_net:caif_netlink_parms(): no params data found [ 518.908175][T18203] netlink: 'syz.4.3035': attribute type 13 has an invalid length. [ 518.917730][T18203] netlink: 'syz.4.3035': attribute type 17 has an invalid length. [ 519.250103][T18203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.291278][T18203] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.345346][T18203] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 519.606286][T18147] team0: Port device team_slave_0 added [ 519.628298][T18205] lo speed is unknown, defaulting to 1000 [ 519.671947][T18147] team0: Port device team_slave_1 added [ 519.918639][T18222] veth0: entered promiscuous mode [ 519.926080][T18147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 519.948815][T18147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.976010][T18147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.023233][T18147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 520.035590][T18147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.063064][T18147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.093915][T18223] veth0: left promiscuous mode [ 520.101469][T18149] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.140897][T18232] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3042'. [ 520.150390][T18149] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.158150][T18149] bridge_slave_0: entered allmulticast mode [ 520.167577][T18149] bridge_slave_0: entered promiscuous mode [ 520.212304][T18149] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.222293][T18149] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.233087][T18149] bridge_slave_1: entered allmulticast mode [ 520.261861][T18149] bridge_slave_1: entered promiscuous mode [ 520.318984][T18234] netem: incorrect gi model size [ 520.324302][T18234] netem: change failed [ 520.433575][T18149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.480747][T18149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 520.533835][T18147] hsr_slave_0: entered promiscuous mode [ 520.543310][T18147] hsr_slave_1: entered promiscuous mode [ 520.550747][T18147] debugfs: 'hsr0' already exists in 'hsr' [ 520.559116][T18147] Cannot create hsr debugfs directory [ 520.582686][T18149] team0: Port device team_slave_0 added [ 520.621074][T18149] team0: Port device team_slave_1 added [ 520.669096][ T5186] Bluetooth: hci20: command tx timeout [ 520.746513][ T5186] Bluetooth: hci19: command tx timeout [ 520.752118][ T5875] Bluetooth: hci21: command tx timeout [ 520.814506][T18149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.827350][T18149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.854357][T18149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.882506][T18149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 520.890722][T18149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.919761][T18149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 521.055020][T18149] hsr_slave_0: entered promiscuous mode [ 521.062301][T18149] hsr_slave_1: entered promiscuous mode [ 521.069730][T18149] debugfs: 'hsr0' already exists in 'hsr' [ 521.075629][T18149] Cannot create hsr debugfs directory [ 521.344134][T18147] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.482754][T18147] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.579614][T18147] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.626952][T18267] lo speed is unknown, defaulting to 1000 [ 521.655113][T18147] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.803397][T18149] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.912981][T18149] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.939499][T18274] dvmrp11: entered allmulticast mode [ 522.014363][T18149] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.131565][T18149] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.305274][T18279] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3056'. [ 522.494370][T18147] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 522.524451][T18147] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 522.537070][T18147] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 522.552012][T18147] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 522.631944][T18149] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 522.644364][T18149] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 522.656800][T18149] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 522.677906][T18149] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 522.745427][T18153] Bluetooth: hci20: command tx timeout [ 522.824870][T18153] Bluetooth: hci21: command tx timeout [ 522.849832][T18149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.860514][T18147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.901629][T18147] 8021q: adding VLAN 0 to HW filter on device team0 [ 522.915594][T18149] 8021q: adding VLAN 0 to HW filter on device team0 [ 522.929889][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.937069][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 522.956882][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.964134][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.979296][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.986501][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.014018][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.021190][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.517310][T18149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 523.555105][T18147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 523.638319][T18147] veth0_vlan: entered promiscuous mode [ 523.652461][T18308] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 523.687506][T18147] veth1_vlan: entered promiscuous mode [ 523.739915][T18147] veth0_macvtap: entered promiscuous mode [ 523.751944][T18147] veth1_macvtap: entered promiscuous mode [ 523.782979][T18147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 523.802454][T18147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 523.822499][ T56] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.832721][ T3524] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.843774][ T3524] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.856292][ T3524] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.987451][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.000016][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.033909][T18149] veth0_vlan: entered promiscuous mode [ 524.044052][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.049706][T18149] veth1_vlan: entered promiscuous mode [ 524.057590][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.108393][T18153] Bluetooth: hci5: command 0x0406 tx timeout [ 524.108616][T18151] Bluetooth: hci6: command 0x0406 tx timeout [ 524.145463][T18149] veth0_macvtap: entered promiscuous mode [ 524.172877][T18149] veth1_macvtap: entered promiscuous mode [ 524.210930][T18149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 524.226444][T18149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 524.244865][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.253774][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.278352][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.295593][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.397734][ T1083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.421825][ T1083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.500280][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.512036][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.733191][T18334] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3064'. [ 524.744247][T18336] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3064'. [ 524.832082][ T5186] Bluetooth: hci20: command tx timeout [ 524.906258][ T5186] Bluetooth: hci21: command tx timeout [ 525.158760][ T30] audit: type=1800 audit(1758772295.913:13): pid=18345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3065" name="memory.events" dev="tmpfs" ino=365 res=0 errno=0 [ 525.296608][T18348] netlink: 'syz.3.3067': attribute type 1 has an invalid length. [ 525.304504][T18348] nbd: error processing sock list [ 525.311850][T18348] block nbd4: shutting down sockets [ 525.393188][T18356] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.400559][T18356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.408194][T18356] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.415382][T18356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.524777][T18356] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 525.699342][T18368] lo speed is unknown, defaulting to 1000 [ 525.812533][T18379] veth0: entered promiscuous mode [ 525.836583][T18377] veth0: left promiscuous mode [ 526.177067][T18384] lo speed is unknown, defaulting to 1000 [ 526.279340][T18395] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3083'. [ 526.291938][T18395] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.299222][T18395] IPv6: NLM_F_CREATE should be set when creating new route [ 526.306533][T18395] IPv6: NLM_F_CREATE should be set when creating new route [ 526.355700][T18396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3083'. [ 526.365157][T18395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3083'. [ 526.565389][T18385] lo speed is unknown, defaulting to 1000 [ 526.963174][T18411] FAULT_INJECTION: forcing a failure. [ 526.963174][T18411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 526.976464][T18411] CPU: 0 UID: 0 PID: 18411 Comm: syz.2.3087 Not tainted syzkaller #0 PREEMPT(full) [ 526.976488][T18411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 526.976499][T18411] Call Trace: [ 526.976506][T18411] [ 526.976514][T18411] dump_stack_lvl+0x189/0x250 [ 526.976538][T18411] ? __pfx____ratelimit+0x10/0x10 [ 526.976561][T18411] ? __pfx_dump_stack_lvl+0x10/0x10 [ 526.976579][T18411] ? __pfx__printk+0x10/0x10 [ 526.976600][T18411] ? __might_fault+0xb0/0x130 [ 526.976632][T18411] should_fail_ex+0x414/0x560 [ 526.976659][T18411] _copy_from_user+0x2d/0xb0 [ 526.976679][T18411] __sys_connect+0x123/0x440 [ 526.976700][T18411] ? __fget_files+0x3a0/0x420 [ 526.976722][T18411] ? __pfx___sys_connect+0x10/0x10 [ 526.976754][T18411] ? __pfx_ksys_write+0x10/0x10 [ 526.976772][T18411] ? rcu_is_watching+0x15/0xb0 [ 526.976797][T18411] __x64_sys_connect+0x7a/0x90 [ 526.976817][T18411] do_syscall_64+0xfa/0x3b0 [ 526.976831][T18411] ? lockdep_hardirqs_on+0x9c/0x150 [ 526.976853][T18411] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.976871][T18411] ? clear_bhb_loop+0x60/0xb0 [ 526.976892][T18411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.976908][T18411] RIP: 0033:0x7f843e18eec9 [ 526.976925][T18411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 526.976940][T18411] RSP: 002b:00007f843ef68038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 526.976959][T18411] RAX: ffffffffffffffda RBX: 00007f843e3e5fa0 RCX: 00007f843e18eec9 [ 526.976973][T18411] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 0000000000000005 [ 526.976984][T18411] RBP: 00007f843ef68090 R08: 0000000000000000 R09: 0000000000000000 [ 526.976996][T18411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 526.977006][T18411] R13: 00007f843e3e6038 R14: 00007f843e3e5fa0 R15: 00007ffe5f67deb8 [ 526.977035][T18411] [ 526.985548][ T5186] Bluetooth: hci21: command 0x0405 tx timeout [ 528.468970][T18445] FAULT_INJECTION: forcing a failure. [ 528.468970][T18445] name failslab, interval 1, probability 0, space 0, times 0 [ 528.482176][T18445] CPU: 1 UID: 0 PID: 18445 Comm: syz.6.3099 Not tainted syzkaller #0 PREEMPT(full) [ 528.482200][T18445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 528.482210][T18445] Call Trace: [ 528.482215][T18445] [ 528.482220][T18445] dump_stack_lvl+0x189/0x250 [ 528.482236][T18445] ? __pfx____ratelimit+0x10/0x10 [ 528.482252][T18445] ? __pfx_dump_stack_lvl+0x10/0x10 [ 528.482263][T18445] ? __pfx__printk+0x10/0x10 [ 528.482280][T18445] ? __lock_acquire+0xab9/0xd20 [ 528.482296][T18445] should_fail_ex+0x414/0x560 [ 528.482313][T18445] should_failslab+0xa8/0x100 [ 528.482328][T18445] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 528.482342][T18445] ? __alloc_skb+0x112/0x2d0 [ 528.482355][T18445] __alloc_skb+0x112/0x2d0 [ 528.482368][T18445] rose_write_internal+0x100/0x1ac0 [ 528.482379][T18445] ? lockdep_hardirqs_on+0x9c/0x150 [ 528.482396][T18445] ? __local_bh_enable_ip+0x12d/0x1c0 [ 528.482411][T18445] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 528.482428][T18445] ? __pfx_rose_write_internal+0x10/0x10 [ 528.482439][T18445] ? rose_route_free_lci+0x140/0x170 [ 528.482448][T18445] ? rose_connect+0x69c/0x10a0 [ 528.482471][T18445] rose_connect+0x909/0x10a0 [ 528.482503][T18445] ? __pfx_rose_connect+0x10/0x10 [ 528.482524][T18445] ? aa_af_perm+0x200/0x2c0 [ 528.482542][T18445] ? tomoyo_socket_connect_permission+0x164/0x290 [ 528.482557][T18445] ? bpf_lsm_socket_connect+0x9/0x20 [ 528.482569][T18445] __sys_connect+0x316/0x440 [ 528.482581][T18445] ? __fget_files+0x3a0/0x420 [ 528.482595][T18445] ? __pfx___sys_connect+0x10/0x10 [ 528.482613][T18445] ? __pfx_ksys_write+0x10/0x10 [ 528.482630][T18445] __x64_sys_connect+0x7a/0x90 [ 528.482641][T18445] do_syscall_64+0xfa/0x3b0 [ 528.482650][T18445] ? lockdep_hardirqs_on+0x9c/0x150 [ 528.482665][T18445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.482674][T18445] ? clear_bhb_loop+0x60/0xb0 [ 528.482686][T18445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.482695][T18445] RIP: 0033:0x7f2bd2f8eec9 [ 528.482706][T18445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 528.482715][T18445] RSP: 002b:00007f2bd3ef1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 528.482726][T18445] RAX: ffffffffffffffda RBX: 00007f2bd31e5fa0 RCX: 00007f2bd2f8eec9 [ 528.482734][T18445] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 0000000000000005 [ 528.482740][T18445] RBP: 00007f2bd3ef1090 R08: 0000000000000000 R09: 0000000000000000 [ 528.482746][T18445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 528.482752][T18445] R13: 00007f2bd31e6038 R14: 00007f2bd31e5fa0 R15: 00007ffcb0cdbc38 [ 528.482768][T18445] [ 529.373426][T18454] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3102'. [ 529.382931][T18454] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3102'. [ 529.641857][T18458] lo speed is unknown, defaulting to 1000 [ 530.932939][ T30] audit: type=1800 audit(1758772301.683:14): pid=18492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3113" name="memory.events" dev="tmpfs" ino=135 res=0 errno=0 [ 531.131127][T18498] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3116'. [ 531.155855][T18498] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3116'. [ 531.174228][T18498] netlink: 'syz.6.3116': attribute type 39 has an invalid length. [ 532.091137][T18511] openvswitch: netlink: IP tunnel attribute has 17 unknown bytes. [ 532.100942][T18511] netlink: 'syz.2.3119': attribute type 3 has an invalid length. [ 532.169527][T18513] vlan2: entered promiscuous mode [ 532.176148][T18513] bond0: entered promiscuous mode [ 532.181196][T18513] bond_slave_0: entered promiscuous mode [ 532.190065][T18513] bond_slave_1: entered promiscuous mode [ 532.296677][T18518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3122'. [ 532.582042][ T30] audit: type=1800 audit(1758772303.313:15): pid=18531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3125" name="memory.events" dev="tmpfs" ino=498 res=0 errno=0 [ 532.751021][T18536] netlink: 'syz.2.3126': attribute type 10 has an invalid length. [ 532.785369][T18536] team0: Port device dummy0 added [ 532.802807][T18536] netlink: 'syz.2.3126': attribute type 10 has an invalid length. [ 532.834329][T18536] team0: Port device dummy0 removed [ 532.848660][T18536] dummy0: entered promiscuous mode [ 532.855997][T18536] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 533.506278][T18538] netlink: 'syz.6.3127': attribute type 1 has an invalid length. [ 533.532094][T18538] nbd: error processing sock list [ 533.538833][T18538] block nbd4: shutting down sockets [ 534.220373][ T5186] Bluetooth: hci22: unexpected cc 0x0c03 length: 249 > 1 [ 534.250981][ T5186] Bluetooth: hci22: unexpected cc 0x1003 length: 249 > 9 [ 534.269215][ T5186] Bluetooth: hci22: unexpected cc 0x1001 length: 249 > 9 [ 534.279384][ T5186] Bluetooth: hci22: unexpected cc 0x0c23 length: 249 > 4 [ 534.291143][ T5186] Bluetooth: hci22: unexpected cc 0x0c38 length: 249 > 2 [ 534.416259][T18570] tipc: Enabled bearer , priority 0 [ 534.426501][T18564] lo speed is unknown, defaulting to 1000 [ 534.445350][T18570] syzkaller0: entered promiscuous mode [ 534.450854][T18570] syzkaller0: entered allmulticast mode [ 534.559011][T18570] tipc: Resetting bearer [ 534.573867][T18568] tipc: Resetting bearer [ 534.600228][T18568] tipc: Disabling bearer [ 535.361492][T18564] chnl_net:caif_netlink_parms(): no params data found [ 535.401767][ T30] audit: type=1800 audit(1758772306.153:16): pid=18577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3136" name="memory.events" dev="tmpfs" ino=525 res=0 errno=0 [ 535.563791][T18595] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3137'. [ 535.564519][T18564] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.580714][T18564] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.590014][T18564] bridge_slave_0: entered allmulticast mode [ 535.598787][T18564] bridge_slave_0: entered promiscuous mode [ 535.608072][T18595] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 535.683684][T18595] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 535.691775][T18598] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3137'. [ 535.730888][T18564] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.738321][T18564] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.746019][T18564] bridge_slave_1: entered allmulticast mode [ 535.753982][T18564] bridge_slave_1: entered promiscuous mode [ 535.800701][T18564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 535.829827][T18564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 535.909269][T18564] team0: Port device team_slave_0 added [ 535.923079][T18564] team0: Port device team_slave_1 added [ 535.969500][T18609] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3141'. [ 535.983871][T18564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 535.992274][T18564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 536.019036][T18564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 536.042014][T18564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 536.049607][T18564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 536.076523][T18564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 536.138298][T18564] hsr_slave_0: entered promiscuous mode [ 536.145194][T18564] hsr_slave_1: entered promiscuous mode [ 536.151519][T18564] debugfs: 'hsr0' already exists in 'hsr' [ 536.157467][T18564] Cannot create hsr debugfs directory [ 536.303679][T18564] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.345105][ T5186] Bluetooth: hci22: command tx timeout [ 536.375656][T18564] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.479019][T18564] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.642716][T18564] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.017527][T18564] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 537.053134][T18564] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 537.088921][T18564] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 537.130739][T18564] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 537.141967][ T5875] Bluetooth: hci23: unexpected cc 0x0c03 length: 249 > 1 [ 537.156975][ T5875] Bluetooth: hci23: unexpected cc 0x1003 length: 249 > 9 [ 537.179530][ T5875] Bluetooth: hci23: unexpected cc 0x1001 length: 249 > 9 [ 537.190988][ T5875] Bluetooth: hci23: unexpected cc 0x0c23 length: 249 > 4 [ 537.199663][ T5875] Bluetooth: hci23: unexpected cc 0x0c38 length: 249 > 2 [ 537.274424][T18629] lo speed is unknown, defaulting to 1000 [ 537.450819][T18564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 537.472770][T18564] 8021q: adding VLAN 0 to HW filter on device team0 [ 537.578870][T18627] lo speed is unknown, defaulting to 1000 [ 537.619021][ T30] audit: type=1800 audit(1758772308.363:17): pid=18632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3147" name="memory.events" dev="tmpfs" ino=214 res=0 errno=0 [ 537.661670][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.668875][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 537.730935][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.738167][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 538.422658][T18564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 538.424854][ T5186] Bluetooth: hci22: command tx timeout [ 538.549725][T18564] veth0_vlan: entered promiscuous mode [ 538.579020][T18564] veth1_vlan: entered promiscuous mode [ 538.667234][ T31] INFO: task kworker/u8:6:1104 blocked for more than 143 seconds. [ 538.675764][ T31] Not tainted syzkaller #0 [ 538.680725][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 538.696900][T18564] veth0_macvtap: entered promiscuous mode [ 538.705353][ T31] task:kworker/u8:6 state:D stack:22152 pid:1104 tgid:1104 ppid:2 task_flags:0x4208160 flags:0x00004000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 538.723394][T18564] veth1_macvtap: entered promiscuous mode [ 538.729284][ T31] Workqueue: netns cleanup_net [ 538.734072][ T31] Call Trace: [ 538.755098][ T31] [ 538.764680][ T31] __schedule+0x1798/0x4cc0 [ 538.769316][ T31] ? __lock_acquire+0xab9/0xd20 [ 538.774199][ T31] ? __lock_acquire+0xab9/0xd20 [ 538.839387][ T31] ? __pfx___schedule+0x10/0x10 [ 538.844316][ T31] ? schedule+0x91/0x360 [ 538.854694][ T31] schedule+0x165/0x360 [ 538.869048][ T31] schedule_preempt_disabled+0x13/0x30 [ 538.894813][ T31] __mutex_lock+0x7e6/0x1350 [ 538.899470][ T31] ? __mutex_lock+0x5bb/0x1350 [ 538.904264][ T31] ? rdma_dev_change_netns+0x39/0x300 [ 538.935334][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 538.940413][ T31] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 538.946813][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 538.952817][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 538.958161][ T31] ? _raw_spin_unlock+0x28/0x50 [ 538.963030][ T31] rdma_dev_change_netns+0x39/0x300 [ 538.968686][ T31] rdma_dev_exit_net+0x203/0x340 [ 538.973639][ T31] ? __pfx___might_resched+0x10/0x10 [ 538.979056][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 538.984524][ T31] ? net_generic+0x1e/0x240 [ 538.990235][ T31] ? mutex_is_locked+0x17/0x50 [ 538.995197][ T31] ? rtnl_is_locked+0x15/0x20 [ 538.999889][ T31] ops_undo_list+0x49a/0x990 [ 539.004472][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 539.009689][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 539.015119][ T31] cleanup_net+0x4c5/0x800 [ 539.019558][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 539.024479][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 539.029936][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 539.038713][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 539.044469][ T31] process_scheduled_works+0xae1/0x17b0 [ 539.050349][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 539.056406][ T31] worker_thread+0x8a0/0xda0 [ 539.060984][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 539.068019][ T31] ? __kthread_parkme+0x7b/0x200 [ 539.073004][ T31] kthread+0x70e/0x8a0 [ 539.077194][ T31] ? __pfx_worker_thread+0x10/0x10 [ 539.082313][ T31] ? __pfx_kthread+0x10/0x10 [ 539.086964][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 539.092165][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 539.097473][ T31] ? __pfx_kthread+0x10/0x10 [ 539.102054][ T31] ret_from_fork+0x439/0x7d0 [ 539.106751][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 539.111877][ T31] ? __switch_to_asm+0x39/0x70 [ 539.116760][ T31] ? __switch_to_asm+0x33/0x70 [ 539.121509][ T31] ? __pfx_kthread+0x10/0x10 [ 539.126155][ T31] ret_from_fork_asm+0x1a/0x30 [ 539.130930][ T31] [ 539.134127][ T31] INFO: task syz.4.2211:15009 blocked for more than 143 seconds. [ 539.142345][ T31] Not tainted syzkaller #0 [ 539.161029][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 539.170386][ T31] task:syz.4.2211 state:D stack:25064 pid:15009 tgid:15008 ppid:5874 task_flags:0x400140 flags:0x00004004 [ 539.182584][ T31] Call Trace: [ 539.185964][ T31] [ 539.188902][ T31] __schedule+0x1798/0x4cc0 [ 539.193397][ T31] ? do_syscall_64+0xfa/0x3b0 [ 539.198148][ T31] ? __lock_acquire+0xab9/0xd20 [ 539.203013][ T31] ? __pfx___schedule+0x10/0x10 [ 539.207959][ T31] ? schedule+0x91/0x360 [ 539.212194][ T31] schedule+0x165/0x360 [ 539.216473][ T31] schedule_timeout+0x9a/0x270 [ 539.221364][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 539.225480][ T5186] Bluetooth: hci23: command tx timeout [ 539.227102][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 539.237729][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 539.242954][ T31] ? wait_for_completion+0x267/0x5d0 [ 539.248297][ T31] wait_for_completion+0x2bf/0x5d0 [ 539.253417][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 539.259091][ T31] ? up_write+0x1c4/0x420 [ 539.263406][ T31] ? remove_client_context+0xc0/0x1e0 [ 539.268911][ T31] disable_device+0x1c6/0x320 [ 539.273607][ T31] ? __pfx_disable_device+0x10/0x10 [ 539.278863][ T31] __ib_unregister_device+0x2cb/0x3f0 [ 539.284226][ T31] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 539.290228][ T31] ib_unregister_device_and_put+0xb8/0xf0 [ 539.296242][ T31] nldev_dellink+0x2d1/0x320 [ 539.300828][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 539.309728][ T31] ? apparmor_capable+0x137/0x1b0 [ 539.314888][ T31] ? bpf_lsm_capable+0x9/0x20 [ 539.319613][ T31] ? security_capable+0x7e/0x2e0 [ 539.324775][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 539.329881][ T31] rdma_nl_rcv+0x6ae/0x980 [ 539.334290][ T31] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 539.339317][ T31] ? __lock_acquire+0xab9/0xd20 [ 539.344180][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 539.349432][ T31] netlink_unicast+0x82c/0x9e0 [ 539.354189][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 539.359512][ T31] ? netlink_sendmsg+0x642/0xb30 [ 539.364446][ T31] ? skb_put+0x11b/0x210 [ 539.368748][ T31] netlink_sendmsg+0x805/0xb30 [ 539.373509][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 539.379894][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 539.385079][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 539.390375][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 539.395936][ T31] __sock_sendmsg+0x21c/0x270 [ 539.400634][ T31] ____sys_sendmsg+0x505/0x830 [ 539.405524][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 539.410803][ T31] ? import_iovec+0x74/0xa0 [ 539.415332][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 539.419994][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 539.425302][ T31] ? __fget_files+0x2a/0x420 [ 539.429889][ T31] ? __fget_files+0x3a0/0x420 [ 539.434555][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 539.439527][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 539.445212][ T31] ? rcu_is_watching+0x15/0xb0 [ 539.449969][ T31] ? do_syscall_64+0xbe/0x3b0 [ 539.454690][ T31] do_syscall_64+0xfa/0x3b0 [ 539.459206][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 539.464419][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.471673][ T31] ? clear_bhb_loop+0x60/0xb0 [ 539.476451][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.482353][ T31] RIP: 0033:0x7f632ed8eec9 [ 539.486795][ T31] RSP: 002b:00007f632fbad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 539.495265][ T31] RAX: ffffffffffffffda RBX: 00007f632efe5fa0 RCX: 00007f632ed8eec9 [ 539.503226][ T31] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 539.511235][ T31] RBP: 00007f632ee11f91 R08: 0000000000000000 R09: 0000000000000000 [ 539.519238][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 539.527270][ T31] R13: 00007f632efe6038 R14: 00007f632efe5fa0 R15: 00007ffca3d53f88 [ 539.535283][ T31] [ 539.538307][ T31] INFO: task syz.3.2227:15057 blocked for more than 144 seconds. [ 539.546830][ T31] Not tainted syzkaller #0 [ 539.551781][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 539.560687][ T31] task:syz.3.2227 state:D stack:25224 pid:15057 tgid:15056 ppid:5867 task_flags:0x400140 flags:0x00004006 [ 539.572721][ T31] Call Trace: [ 539.576102][ T31] [ 539.579040][ T31] __schedule+0x1798/0x4cc0 [ 539.583570][ T31] ? __lock_acquire+0xab9/0xd20 [ 539.614801][ T31] ? __lock_acquire+0xab9/0xd20 [ 539.619715][ T31] ? __pfx___schedule+0x10/0x10 [ 539.634724][ T31] ? schedule+0x91/0x360 [ 539.639021][ T31] schedule+0x165/0x360 [ 539.643189][ T31] schedule_preempt_disabled+0x13/0x30 [ 539.654746][ T31] __mutex_lock+0x7e6/0x1350 [ 539.659387][ T31] ? __mutex_lock+0x5bb/0x1350 [ 539.664178][ T31] ? rdma_dev_change_netns+0x39/0x300 [ 539.684722][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 539.689791][ T31] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 539.714702][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 539.720728][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 539.734740][ T31] ? _raw_spin_unlock+0x28/0x50 [ 539.739646][ T31] rdma_dev_change_netns+0x39/0x300 [ 539.754676][ T31] rdma_dev_exit_net+0x203/0x340 [ 539.759669][ T31] ? __pfx___might_resched+0x10/0x10 [ 539.774902][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 539.780460][ T31] ? net_generic+0x1e/0x240 [ 539.794668][ T31] ? mutex_is_locked+0x17/0x50 [ 539.799704][ T31] ? rtnl_is_locked+0x15/0x20 [ 539.804409][ T31] ops_undo_list+0x49a/0x990 [ 539.824744][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 539.829906][ T31] ? ops_init+0x469/0x5c0 [ 539.834261][ T31] setup_net+0x2d3/0x320 [ 539.851710][ T31] ? __pfx_setup_net+0x10/0x10 [ 539.859064][ T31] ? copy_net_ns+0x304/0x4d0 [ 539.863706][ T31] ? down_read_killable+0x1d1/0x350 [ 539.884927][ T31] copy_net_ns+0x31b/0x4d0 [ 539.889398][ T31] create_new_namespaces+0x3f3/0x720 [ 539.904748][ T31] ? security_capable+0x7e/0x2e0 [ 539.909744][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 539.924721][ T31] ksys_unshare+0x4c8/0x8c0 [ 539.929271][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 539.934313][ T31] ? rcu_is_watching+0x15/0xb0 [ 539.939254][ T31] __x64_sys_unshare+0x38/0x50 [ 539.944038][ T31] do_syscall_64+0xfa/0x3b0 [ 539.950239][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 539.955997][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.962901][ T31] ? clear_bhb_loop+0x60/0xb0 [ 539.967697][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.973581][ T31] RIP: 0033:0x7f010998eec9 [ 539.978122][ T31] RSP: 002b:00007f010a875038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 539.986590][ T31] RAX: ffffffffffffffda RBX: 00007f0109be5fa0 RCX: 00007f010998eec9 [ 539.994617][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 540.002589][ T31] RBP: 00007f0109a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 540.010818][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 540.018906][ T31] R13: 00007f0109be6038 R14: 00007f0109be5fa0 R15: 00007fff7f377038 [ 540.026995][ T31] [ 540.030046][ T31] INFO: task syz.3.2227:15061 blocked for more than 144 seconds. [ 540.037895][ T31] Not tainted syzkaller #0 [ 540.042834][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 540.051572][ T31] task:syz.3.2227 state:D stack:25568 pid:15061 tgid:15056 ppid:5867 task_flags:0x400140 flags:0x00004006 [ 540.063599][ T31] Call Trace: [ 540.066928][ T31] [ 540.069848][ T31] __schedule+0x1798/0x4cc0 [ 540.074347][ T31] ? __lock_acquire+0xab9/0xd20 [ 540.079242][ T31] ? __lock_acquire+0xab9/0xd20 [ 540.084083][ T31] ? __pfx___schedule+0x10/0x10 [ 540.089005][ T31] ? schedule+0x91/0x360 [ 540.093241][ T31] schedule+0x165/0x360 [ 540.097424][ T31] schedule_preempt_disabled+0x13/0x30 [ 540.102872][ T31] __mutex_lock+0x7e6/0x1350 [ 540.107959][ T31] ? __mutex_lock+0x5bb/0x1350 [ 540.112789][ T31] ? rdma_dev_change_netns+0x39/0x300 [ 540.118316][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 540.123326][ T31] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 540.128988][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 540.135009][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 540.140214][ T31] ? _raw_spin_unlock+0x28/0x50 [ 540.145096][ T31] rdma_dev_change_netns+0x39/0x300 [ 540.150290][ T31] rdma_dev_exit_net+0x203/0x340 [ 540.155304][ T31] ? __pfx___might_resched+0x10/0x10 [ 540.160609][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 540.169866][ T31] ? net_generic+0x1e/0x240 [ 540.174395][ T31] ? mutex_is_locked+0x17/0x50 [ 540.179198][ T31] ? rtnl_is_locked+0x15/0x20 [ 540.183868][ T31] ops_undo_list+0x49a/0x990 [ 540.196830][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 540.201998][ T31] ? ops_init+0x469/0x5c0 [ 540.206420][ T31] setup_net+0x2d3/0x320 [ 540.210681][ T31] ? __pfx_setup_net+0x10/0x10 [ 540.215654][ T31] ? copy_net_ns+0x304/0x4d0 [ 540.220257][ T31] ? down_read_killable+0x1d1/0x350 [ 540.225586][ T31] copy_net_ns+0x31b/0x4d0 [ 540.230011][ T31] create_new_namespaces+0x3f3/0x720 [ 540.235497][ T31] ? security_capable+0x7e/0x2e0 [ 540.240437][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 540.246198][ T31] ksys_unshare+0x4c8/0x8c0 [ 540.250692][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 540.255773][ T31] ? rcu_is_watching+0x15/0xb0 [ 540.260548][ T31] __x64_sys_unshare+0x38/0x50 [ 540.265608][ T31] do_syscall_64+0xfa/0x3b0 [ 540.270280][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 540.276031][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.282120][ T31] ? clear_bhb_loop+0x60/0xb0 [ 540.287752][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.293666][ T31] RIP: 0033:0x7f010998eec9 [ 540.298222][ T31] RSP: 002b:00007f010a854038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 540.306843][ T31] RAX: ffffffffffffffda RBX: 00007f0109be6090 RCX: 00007f010998eec9 [ 540.314885][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 540.322848][ T31] RBP: 00007f0109a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 540.330845][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 540.339003][ T31] R13: 00007f0109be6128 R14: 00007f0109be6090 R15: 00007fff7f377038 [ 540.347760][ T31] [ 540.352618][ T31] INFO: task syz.6.2280:15224 blocked for more than 145 seconds. [ 540.363107][ T31] Not tainted syzkaller #0 [ 540.368181][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 540.377017][ T31] task:syz.6.2280 state:D stack:25256 pid:15224 tgid:15218 ppid:12902 task_flags:0x400140 flags:0x00004006 [ 540.390435][ T31] Call Trace: [ 540.393741][ T31] [ 540.396854][ T31] __schedule+0x1798/0x4cc0 [ 540.401399][ T31] ? __lock_acquire+0xab9/0xd20 [ 540.406389][ T31] ? __lock_acquire+0xab9/0xd20 [ 540.411271][ T31] ? __pfx___schedule+0x10/0x10 [ 540.416278][ T31] ? schedule+0x91/0x360 [ 540.420529][ T31] schedule+0x165/0x360 [ 540.425011][ T31] schedule_preempt_disabled+0x13/0x30 [ 540.430516][ T31] __mutex_lock+0x7e6/0x1350 [ 540.435153][ T31] ? __mutex_lock+0x5bb/0x1350 [ 540.439901][ T31] ? rdma_dev_change_netns+0x39/0x300 [ 540.445447][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 540.450459][ T31] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 540.456171][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 540.462138][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 540.467546][ T31] ? _raw_spin_unlock+0x28/0x50 [ 540.472398][ T31] rdma_dev_change_netns+0x39/0x300 [ 540.477648][ T31] rdma_dev_exit_net+0x203/0x340 [ 540.482575][ T31] ? __pfx___might_resched+0x10/0x10 [ 540.487917][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 540.493365][ T31] ? net_generic+0x1e/0x240 [ 540.498183][ T31] ? mutex_is_locked+0x17/0x50 [ 540.502956][ T31] ? rtnl_is_locked+0x15/0x20 [ 540.504936][ T5186] Bluetooth: hci22: command tx timeout [ 540.508659][ T31] ops_undo_list+0x49a/0x990 [ 540.517714][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 540.522932][ T31] ? ops_init+0x469/0x5c0 [ 540.527349][ T31] setup_net+0x2d3/0x320 [ 540.531593][ T31] ? __pfx_setup_net+0x10/0x10 [ 540.536407][ T31] ? copy_net_ns+0x304/0x4d0 [ 540.540999][ T31] ? down_read_killable+0x1d1/0x350 [ 540.546234][ T31] copy_net_ns+0x31b/0x4d0 [ 540.550640][ T31] create_new_namespaces+0x3f3/0x720 [ 540.555976][ T31] ? security_capable+0x7e/0x2e0 [ 540.560908][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 540.566652][ T31] ksys_unshare+0x4c8/0x8c0 [ 540.571141][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 540.576324][ T31] ? rcu_is_watching+0x15/0xb0 [ 540.581081][ T31] __x64_sys_unshare+0x38/0x50 [ 540.590397][ T31] do_syscall_64+0xfa/0x3b0 [ 540.594995][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 540.600209][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.607022][ T31] ? clear_bhb_loop+0x60/0xb0 [ 540.611726][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.617654][ T31] RIP: 0033:0x7f8379f8eec9 [ 540.622058][ T31] RSP: 002b:00007f837aebf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 540.630519][ T31] RAX: ffffffffffffffda RBX: 00007f837a1e6180 RCX: 00007f8379f8eec9 [ 540.638557][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000068040200 [ 540.646600][ T31] RBP: 00007f837a011f91 R08: 0000000000000000 R09: 0000000000000000 [ 540.654618][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 540.662598][ T31] R13: 00007f837a1e6218 R14: 00007f837a1e6180 R15: 00007ffd38ea5a08 [ 540.671090][ T31] [ 540.674314][ T31] [ 540.674314][ T31] Showing all locks held in the system: [ 540.682472][ T31] 1 lock held by khungtaskd/31: [ 540.687392][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 540.697908][ T31] 4 locks held by kworker/u8:6/1104: [ 540.703206][ T31] #0: ffff88801b2fe948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 540.714424][ T31] #1: ffffc90003b37bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 540.725556][ T31] #2: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 540.735048][ T31] #3: ffff888057678700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 540.746660][ T31] 2 locks held by getty/5626: [ 540.751350][ T31] #0: ffff88814cea40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 540.761132][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 540.771278][ T31] 3 locks held by kworker/1:13/14562: [ 540.776756][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 540.788152][ T31] #1: ffffc90003097bc0 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 540.800969][ T31] #2: ffff8880551de240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x26b/0x3180 [ 540.811193][ T31] 2 locks held by syz.4.2211/15009: [ 540.816680][ T31] #0: ffffffff99e44958 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980 [ 540.827505][ T31] #1: ffff888057678700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 540.839197][ T31] 2 locks held by syz.3.2227/15057: [ 540.844410][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 540.853928][ T31] #1: ffff888057678700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 540.865343][ T31] 2 locks held by syz.3.2227/15061: [ 540.870539][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 540.879976][ T31] #1: ffff888057678700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 540.891265][ T31] 2 locks held by syz.6.2280/15224: [ 540.896484][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 540.906950][ T31] #1: ffff888057678700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 540.918810][ T31] 2 locks held by syz.8.2370/15603: [ 540.924018][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 540.933714][ T31] #1: ffff888057678700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 540.947179][ T31] 2 locks held by syz.5.2386/15668: [ 540.952395][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 540.961988][ T31] #1: ffff888057678700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 540.974093][ T31] 2 locks held by syz.7.2465/15994: [ 540.979421][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 540.989869][ T31] #1: ffff888057678700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 541.001523][ T31] 2 locks held by syz.9.2556/16320: [ 541.006981][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 541.016429][ T31] #1: ffff888057678700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 541.027973][ T31] 2 locks held by syz.1.2594/16476: [ 541.033187][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 541.042840][ T31] #1: ffff888057678700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 541.054129][ T31] 2 locks held by syz.2.2758/17048: [ 541.059624][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 541.069378][ T31] #1: ffff888057678700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 541.080726][ T31] 2 locks held by syz.4.2763/17071: [ 541.085979][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 541.095430][ T31] #1: ffff888057678700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 541.106749][ T31] 2 locks held by syz.3.2771/17127: [ 541.111935][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 541.121382][ T31] #1: ffff888057678700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 541.132643][ T31] 2 locks held by syz.6.2821/17318: [ 541.137864][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 541.147836][ T31] #1: ffff888057678700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 541.159313][ T31] 2 locks held by syz.0.2834/17407: [ 541.164510][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 541.173970][ T31] #1: ffff888057678700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 541.185338][ T31] 2 locks held by syz.8.2835/17410: [ 541.190542][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 541.200023][ T31] #1: ffff888057678700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 541.211288][ T31] 2 locks held by syz.7.2932/17779: [ 541.216496][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 541.226945][ T31] #1: ffff888057678700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 541.238454][ T31] 2 locks held by syz.5.2953/17868: [ 541.243893][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 541.253432][ T31] #1: ffff888057678700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 541.264931][ T31] 2 locks held by syz.9.2954/17869: [ 541.270132][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 541.279577][ T31] #1: ffff888057678700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 541.290861][ T31] 2 locks held by syz.4.3035/18205: [ 541.296158][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 541.305393][ T5186] Bluetooth: hci23: command tx timeout [ 541.306121][ T31] #1: ffff888057678700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 541.322421][ T31] 2 locks held by syz.1.3051/18267: [ 541.327715][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 541.337182][ T31] #1: ffff888057678700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 541.348441][ T31] 2 locks held by syz.3.3079/18384: [ 541.353651][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 541.363073][ T31] #1: ffff888057678700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 541.374317][ T31] 2 locks held by syz.3.3079/18385: [ 541.379658][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 541.390174][ T31] #1: ffff888057678700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 541.402000][ T31] 3 locks held by syz-executor/18564: [ 541.407479][ T31] #0: ffff8881650b8dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 541.417463][ T31] #1: ffff8881650b80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 541.427166][ T31] #2: ffffffff8e13fb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 541.438137][ T31] 2 locks held by syz.2.3148/18629: [ 541.443326][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 541.452752][ T31] #1: ffff888057678700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 541.464004][ T31] 1 lock held by syz-executor/18627: [ 541.469545][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 541.478994][ T31] 5 locks held by syz.6.3156/18666: [ 541.484174][ T31] #0: ffff888037b18dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 541.494255][ T31] #1: ffff888037b180b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 541.503955][ T31] #2: ffffffff8f69f1a8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 541.514017][ T31] #3: ffff88809a60eb38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 541.523390][ T31] #4: ffffffff8e13fb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 541.534386][ T31] [ 541.537147][ T31] ============================================= [ 541.537147][ T31] [ 541.546071][ T31] NMI backtrace for cpu 0 [ 541.546088][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 541.546107][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 541.546116][ T31] Call Trace: [ 541.546123][ T31] [ 541.546131][ T31] dump_stack_lvl+0x189/0x250 [ 541.546156][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 541.546173][ T31] ? __pfx__printk+0x10/0x10 [ 541.546207][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 541.546231][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 541.546255][ T31] ? __pfx__printk+0x10/0x10 [ 541.546281][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 541.546306][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 541.546350][ T31] watchdog+0xf93/0xfe0 [ 541.546376][ T31] ? watchdog+0x1de/0xfe0 [ 541.546402][ T31] kthread+0x70e/0x8a0 [ 541.546424][ T31] ? __pfx_watchdog+0x10/0x10 [ 541.546444][ T31] ? __pfx_kthread+0x10/0x10 [ 541.546464][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 541.546486][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 541.546506][ T31] ? __pfx_kthread+0x10/0x10 [ 541.546527][ T31] ret_from_fork+0x439/0x7d0 [ 541.546546][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 541.546569][ T31] ? __switch_to_asm+0x39/0x70 [ 541.546587][ T31] ? __switch_to_asm+0x33/0x70 [ 541.546604][ T31] ? __pfx_kthread+0x10/0x10 [ 541.546625][ T31] ret_from_fork_asm+0x1a/0x30 [ 541.546659][ T31] [ 541.546666][ T31] Sending NMI from CPU 0 to CPUs 1: [ 541.693156][ C1] NMI backtrace for cpu 1 [ 541.693173][ C1] CPU: 1 UID: 0 PID: 3524 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 541.693191][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 541.693201][ C1] Workqueue: events_unbound toggle_allocation_gate [ 541.693225][ C1] RIP: 0010:kasan_check_range+0x10/0x2c0 [ 541.693247][ C1] Code: cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 55 41 57 41 56 41 55 41 54 53 b0 01 <48> 85 f6 0f 84 ba 01 00 00 4c 8d 04 37 49 39 f8 0f 82 82 02 00 00 [ 541.693261][ C1] RSP: 0018:ffffc9000ca9f4e8 EFLAGS: 00000097 [ 541.693274][ C1] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: ffffffff817492c0 [ 541.693286][ C1] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff88801a470a00 [ 541.693297][ C1] RBP: ffffc9000ca9f5f0 R08: ffff88801a470a07 R09: 1ffff1100348e140 [ 541.693309][ C1] R10: dffffc0000000000 R11: ffffed100348e141 R12: 0000000000000001 [ 541.693321][ C1] R13: ffff88801a470000 R14: ffff88801a470a00 R15: ffff88801a470a00 [ 541.693333][ C1] FS: 0000000000000000(0000) GS:ffff888125d3d000(0000) knlGS:0000000000000000 [ 541.693346][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 541.693358][ C1] CR2: 000000110c3233fe CR3: 000000000df36000 CR4: 00000000003526f0 [ 541.693373][ C1] Call Trace: [ 541.693380][ C1] [ 541.693391][ C1] switch_mm_irqs_off+0x240/0x7a0 [ 541.693413][ C1] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 541.693430][ C1] ? do_raw_spin_lock+0x121/0x290 [ 541.693446][ C1] ? __pte_offset_map_lock+0x13e/0x210 [ 541.693465][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 541.693483][ C1] use_temporary_mm+0x12f/0x220 [ 541.693509][ C1] ? __pfx_use_temporary_mm+0x10/0x10 [ 541.693530][ C1] ? __page_table_check_ptes_set+0x277/0x2f0 [ 541.693551][ C1] __text_poke+0x60f/0xa10 [ 541.693572][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 541.693589][ C1] ? __kmalloc_cache_node_noprof+0x8b/0x3d0 [ 541.693609][ C1] ? __pfx___text_poke+0x10/0x10 [ 541.693625][ C1] ? rcu_is_watching+0x15/0xb0 [ 541.693639][ C1] ? trace_contention_end+0x39/0x120 [ 541.693662][ C1] smp_text_poke_batch_finish+0xd0f/0x1130 [ 541.693686][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 541.693707][ C1] ? arch_jump_label_transform_queue+0x97/0x110 [ 541.693732][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 541.693751][ C1] static_key_disable_cpuslocked+0xc5/0x1b0 [ 541.693772][ C1] static_key_disable+0x1a/0x20 [ 541.693790][ C1] toggle_allocation_gate+0x1a1/0x240 [ 541.693808][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 541.693826][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 541.693848][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 541.693869][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 541.693889][ C1] process_scheduled_works+0xae1/0x17b0 [ 541.693923][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 541.693951][ C1] worker_thread+0x8a0/0xda0 [ 541.693967][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 541.693992][ C1] ? __kthread_parkme+0x7b/0x200 [ 541.694012][ C1] kthread+0x70e/0x8a0 [ 541.694030][ C1] ? __pfx_worker_thread+0x10/0x10 [ 541.694044][ C1] ? __pfx_kthread+0x10/0x10 [ 541.694062][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 541.694080][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 541.694100][ C1] ? __pfx_kthread+0x10/0x10 [ 541.694117][ C1] ret_from_fork+0x439/0x7d0 [ 541.694133][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 541.694150][ C1] ? __switch_to_asm+0x39/0x70 [ 541.694168][ C1] ? __switch_to_asm+0x33/0x70 [ 541.694184][ C1] ? __pfx_kthread+0x10/0x10 [ 541.694201][ C1] ret_from_fork_asm+0x1a/0x30 [ 541.694225][ C1] [ 541.695367][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 541.695388][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 541.695408][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 541.695419][ T31] Call Trace: [ 541.695428][ T31] [ 541.695437][ T31] dump_stack_lvl+0x99/0x250 [ 541.695459][ T31] ? __asan_memcpy+0x40/0x70 [ 541.695478][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 541.695496][ T31] ? __pfx__printk+0x10/0x10 [ 541.695528][ T31] vpanic+0x281/0x750 [ 541.695549][ T31] ? __pfx_vpanic+0x10/0x10 [ 541.695566][ T31] ? preempt_schedule+0xae/0xc0 [ 541.695591][ T31] ? preempt_schedule_common+0x83/0xd0 [ 541.695620][ T31] panic+0xb9/0xc0 [ 541.695637][ T31] ? __pfx_panic+0x10/0x10 [ 541.695657][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 541.695684][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 541.695708][ T31] watchdog+0xfd2/0xfe0 [ 541.695735][ T31] ? watchdog+0x1de/0xfe0 [ 541.695766][ T31] kthread+0x70e/0x8a0 [ 541.695789][ T31] ? __pfx_watchdog+0x10/0x10 [ 541.695809][ T31] ? __pfx_kthread+0x10/0x10 [ 541.695828][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 541.695850][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 541.695872][ T31] ? __pfx_kthread+0x10/0x10 [ 541.695892][ T31] ret_from_fork+0x439/0x7d0 [ 541.695911][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 541.695933][ T31] ? __switch_to_asm+0x39/0x70 [ 541.695951][ T31] ? __switch_to_asm+0x33/0x70 [ 541.695969][ T31] ? __pfx_kthread+0x10/0x10 [ 541.695989][ T31] ret_from_fork_asm+0x1a/0x30 [ 541.696024][ T31] [ 542.206119][ T31] Kernel Offset: disabled [ 542.210426][ T31] Rebooting in 86400 seconds..