last executing test programs: 11m41.609243494s ago: executing program 4 (id=546): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4cfb}, 0x50) close(0x3) (async) close(0x3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) (async) r2 = socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r4, 0x112, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @empty}]}, 0x28}, 0x1, 0x0, 0x0, 0xc011}, 0x80) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000003c0)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x14, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x9, 0x0, 0x5, 0x0, 0x18, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa}]}}}}}}, 0x46) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x29) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000005000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) 11m41.192985121s ago: executing program 4 (id=551): r0 = socket$igmp6(0xa, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000240), &(0x7f00000002c0)=0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x21b0, 0x4) sendmmsg$inet6(r0, &(0x7f0000001c00)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000079e02200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) recvfrom(r0, 0x0, 0x0, 0x40012020, 0x0, 0xfffffffffffffe08) 11m41.009734989s ago: executing program 4 (id=555): socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83}, 0x1c) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) 11m39.93874131s ago: executing program 4 (id=566): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r0, 0x0, 0xfaf}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='mm_shrink_slab_start\x00', r0, 0x0, 0xfaf}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r3, 0x0) r4 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r4, &(0x7f0000000400)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept4$inet6(r3, 0x0, 0x0, 0x0) sendmsg$tipc(r4, &(0x7f0000000640)={&(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) unshare(0x22020400) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x3a, 0x8, 0x2}, 0x48) bpf$BPF_PROG_ATTACH(0x1c, &(0x7f00000010c0)={@map=r6, 0xffffffffffffffff, 0x2c}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1b, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, 0x2}, 0x94) write$tun(r2, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x86dd, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000280)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'pimreg0\x00'}) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400000025000100000000000000040006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 11m39.74528866s ago: executing program 4 (id=567): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="1400"/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x12, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x7b}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) shutdown(0xffffffffffffffff, 0x1) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) socket$packet(0x11, 0x2, 0x300) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300050018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) r3 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x20000000ec071, r3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="1400"/28], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x12, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x7b}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) (async) shutdown(0xffffffffffffffff, 0x1) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) (async) socket$packet(0x11, 0x2, 0x300) (async) socket(0x10, 0x3, 0x0) (async) sendto$inet6(r2, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300050018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) (async) socket$netlink(0x10, 0x3, 0x0) (async) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x20000000ec071, r3, 0x0) (async) 11m38.821071079s ago: executing program 4 (id=571): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000280)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='syzkaller\x00'}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r1, 0x0, 0x180000}, 0x18) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0x4}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000240)={0xf3, 0x1000, 0x800e, 0x8000, 0x3, 0x81, 0x68, 0x7, r4}, &(0x7f00000002c0)=0x20) close(r2) 11m38.356659389s ago: executing program 32 (id=571): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000280)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='syzkaller\x00'}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r1, 0x0, 0x180000}, 0x18) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0x4}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000240)={0xf3, 0x1000, 0x800e, 0x8000, 0x3, 0x81, 0x68, 0x7, r4}, &(0x7f00000002c0)=0x20) close(r2) 3m5.44862468s ago: executing program 2 (id=4063): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e27, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2800}, 0x1c) listen(r0, 0x39c) 3m5.237435821s ago: executing program 2 (id=4066): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, r2, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xa, 0x64}}}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x7}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x70}, 0x1, 0x0, 0x0, 0x40080}, 0x80) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffd4b, &(0x7f0000000080)={&(0x7f0000000840)={0x6c, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'tunl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0xfffffffffffffcca, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x40, @mcast2, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xfff, @loopback, 0x50}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3m5.045116765s ago: executing program 2 (id=4070): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000680), 0x8) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@func={0xf, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x61, 0x0, 0x2e, 0x5f, 0x5f, 0x30, 0x5f, 0x0, 0x2e]}}, &(0x7f0000001780)=""/4096, 0x2f, 0x1000, 0x1, 0x7fffffff}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x20000000000000a8, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, 0x0, r0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1, 0x0, 0x3}, 0x18) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700), 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000740)={0x0, r3}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xa, 0x5, 0x1065, 0x4, 0x22e40, r2, 0x0, '\x00', 0x0, r3, 0x1, 0x0, 0x10000001}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'bond_slave_0\x00'}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) recvmmsg(r6, 0x0, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r7, 0xffffffffffffffff}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffff963}, [@call={0x85, 0x0, 0x0, 0x41}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0x6, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_lsm={0x1d, 0x14, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, @generic={0x7, 0x6, 0x9, 0x81, 0x1}, @generic={0x7, 0x9, 0x7, 0x0, 0x87d4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x24, &(0x7f00000002c0)=""/36, 0x41000, 0x40, '\x00', 0x0, 0x1b, r6, 0x8, &(0x7f00000003c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0xd, 0x3, 0x4}, 0x10, r10, 0x0, 0x2, &(0x7f0000000540)=[r2, r4, r8, r4], &(0x7f0000000580)=[{0x3, 0x3, 0x4, 0xa}, {0x3, 0x2, 0x0, 0x3}], 0x10, 0x73d}, 0x94) write$cgroup_netprio_ifpriomap(r6, &(0x7f0000000080)={'veth0_macvtap', 0x32, 0x38}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRESDEC], 0x8) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000140)=@newqdisc={0x58, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x1, 0x8, 0x3, 0xfc, 0x2e}, {0x34, 0x2, 0x0, 0x7, 0x7cea, 0x10001}, 0x80000001, 0x2, 0xd64}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 3m4.065941613s ago: executing program 2 (id=4074): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async, rerun: 64) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x3ec0) close(0xffffffffffffffff) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c00)={0x100, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'macvlan1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_bridge\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_hsr\x00'}}]}, 0x100}, 0x1, 0x0, 0x0, 0x10008000}, 0x850) r1 = socket$inet(0x10, 0x3, 0x100000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) socket$netlink(0x10, 0x3, 0x12) (async) r3 = socket(0x2, 0x80805, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async, rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (rerun: 64) write$cgroup_int(r5, &(0x7f0000000200), 0x806000) (async) unshare(0x2c020400) (async, rerun: 32) writev(r5, 0x0, 0x0) (async, rerun: 32) write$tun(r5, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000400)=@assoc_value={r7, 0x5}, 0x8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="380000000c141000d41308814ed0c8eb08003d0001000000380003000300000008003d000300000008003d000100000008003d000200000017b622893972e0985350f694d25210f556836b"], 0x38}}, 0x40000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x14, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@call={0x85, 0x0, 0x0, 0xaa}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x6}, 0x94) (async) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xfffffffd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x70}, 0x1, 0x0, 0x0, 0x40010}, 0x0) (rerun: 32) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="c4030000120000022dbd700003dbdf25290408f4591c11d11a1c72d6044e214e2005000000090000005d0b0000080000000000ebdd2b1840", @ANYRES32=r2, @ANYBLOB="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"], 0x3c4}, 0x1, 0x0, 0x0, 0x8810}, 0x24004804) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x4, 0x0, 0x0, @ipv4=@multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4000000) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000540)={r1, 0x8, 0x0, "fdbacb6d354ed4206f07a85ccb1352c7e3bc751edc17109c0c32173c41389700fb3ee2269b028386f4be893b70017bd6c2607320fca8ccc4f155dac307e6292719aad786859f6cb8ad4a516e2c8f273e30c211be7c9cc51499e5735075eef88cff8808917247ece325915c0f8b5817780ecc8095d8131460061c353f952d887f10ee99b7d6d9f3576dbe16acc0768515cf9f18b646869e71cdf7de64499e0e5a9c738b1df26d1e1fbe53e9557c33cb1a98f94f5bffef8ee997d55b4d48"}) 3m3.861636823s ago: executing program 2 (id=4078): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRESDEC], 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) (fail_nth: 3) 3m3.676931432s ago: executing program 2 (id=4081): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="7a0a00ff00000000711086000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r2 = socket$kcm(0xa, 0x2, 0x0) close(r2) socket$kcm(0x2, 0x2, 0x73) setsockopt$sock_attach_bpf(r2, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000140)={0x2, 0x4e22, @local}, 0x82, 0x0}, 0x400c080) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES8=r1], 0x7c}}, 0xd0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0xf503, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000340)=0x8) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RANGE_TO_DATA={0x4}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'C'}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) 2m48.48783728s ago: executing program 33 (id=4081): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="7a0a00ff00000000711086000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r2 = socket$kcm(0xa, 0x2, 0x0) close(r2) socket$kcm(0x2, 0x2, 0x73) setsockopt$sock_attach_bpf(r2, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000140)={0x2, 0x4e22, @local}, 0x82, 0x0}, 0x400c080) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES8=r1], 0x7c}}, 0xd0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0xf503, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000340)=0x8) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RANGE_TO_DATA={0x4}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'C'}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) 2m33.740351844s ago: executing program 1 (id=4343): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x300, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008803}, 0x20040010) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r2 = socket$unix(0x1, 0x1, 0x0) listen(r2, 0x0) socket$unix(0x1, 0x1, 0x0) socket$tipc(0x1e, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x65, 0x2, 0x3, 0x17, 0xd, 0x8, 0x2}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) 2m33.424531756s ago: executing program 1 (id=4346): bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaf60c9f7a7281d32142f2fdbc3d37e5a072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a37f7fb9a16059ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a9883815654486fe42cf2f676cdbf91f7582ab314be"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r1, 0x4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) (async) r2 = socket$packet(0x11, 0x3, 0x300) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000000)={0x3}, 0x1) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000400)=[{0x2d, 0x0, 0x0, 0x7ffff021}, {0x6, 0xfe}]}, 0x10) (async) socket$l2tp6(0xa, 0x2, 0x73) 2m33.198829841s ago: executing program 1 (id=4347): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000040)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0002}}}, 0x14) connect$802154_dgram(r1, &(0x7f0000000140)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000003e000701fcffffff00000000017c0000040042800c00018006000600ab230000100002800c001780080001800400", @ANYRES64], 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) bind$802154_dgram(r1, &(0x7f0000000040)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0002}}}, 0x14) (async) connect$802154_dgram(r1, &(0x7f0000000140)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000003e000701fcffffff00000000017c0000040042800c00018006000600ab230000100002800c001780080001800400", @ANYRES64], 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000) (async) 2m32.845792441s ago: executing program 1 (id=4349): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x14, 0x1}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) 2m32.640676108s ago: executing program 1 (id=4352): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1}}], 0x1, 0x8800) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000080)={0x4, 0xffffffff, 0x1000}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x51, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r5, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x30, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, r5, 0x13, 0x618c4}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c044) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @dev={0xfe, 0x80, '\x00', 0xe}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x80000000, 0x0, 0x4, 0x400, 0xa3, 0x20000, r5}) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xff}]}) close(r1) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000180)=0xfffffff9, 0x4) 2m32.296019771s ago: executing program 1 (id=4357): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time_recursive\x00', 0x7a44, 0x1700) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000005, 0x13, r1, 0x607d8000) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14, 0x80000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x28, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r7}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0x4, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x34000}}}]}, 0x28}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x25, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x5, 0x5, 0x9, 0x0, 0x8}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r9, 0x94, &(0x7f0000000880)=[@in6={0xa, 0x4e23, 0x1, @empty, 0x4}, @in6={0xa, 0x4e21, 0x2, @loopback, 0x8000}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x39}}, @in6={0xa, 0x8, 0x800, @empty, 0x401}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e21, @private=0xa0100ff}, @in={0x2, 0x5e22, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000380)=0x10) unshare(0x2c060000) unshare(0x2c020400) unshare(0x20a0200) accept4(r8, &(0x7f00000003c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000500)=0x80, 0x800) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r10, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xb}, 0x50) 2m17.13703105s ago: executing program 34 (id=4357): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time_recursive\x00', 0x7a44, 0x1700) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000005, 0x13, r1, 0x607d8000) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14, 0x80000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x28, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r7}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0x4, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x34000}}}]}, 0x28}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x25, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x5, 0x5, 0x9, 0x0, 0x8}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r9, 0x94, &(0x7f0000000880)=[@in6={0xa, 0x4e23, 0x1, @empty, 0x4}, @in6={0xa, 0x4e21, 0x2, @loopback, 0x8000}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x39}}, @in6={0xa, 0x8, 0x800, @empty, 0x401}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e21, @private=0xa0100ff}, @in={0x2, 0x5e22, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000380)=0x10) unshare(0x2c060000) unshare(0x2c020400) unshare(0x20a0200) accept4(r8, &(0x7f00000003c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000500)=0x80, 0x800) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r10, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xb}, 0x50) 1m24.840144605s ago: executing program 0 (id=4930): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = accept$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f00000002c0)=0x1a4, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000200)=0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000140)={r4, 0xf}, &(0x7f0000000180)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 1m23.857110864s ago: executing program 0 (id=4943): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000001001000001000000dc0000000000000079ddf87a6fb3d45ac1383b9f9d6edae23406000000000000003c6de234f51a47928ddb022e4ad434cb99572b858bb59e38"], 0x18}, 0xfc00) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1002}, 0x28) r1 = epoll_create1(0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r1, 0x1d0}, {r3, 0x80}, {r2}], 0x3, &(0x7f0000000180)={0x77359400}, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r3, 0x0, 0x86, 0xc1, &(0x7f0000000580)="45340c8c727786e54b91e248e8b1cf41f1ea91c80b98d1ce27dec79f11e27fb4c5155c6af658c0705d999b3c1016fd0ae365ae934d9093cb400e2f29cd0587c44d7bfc69e6e19bd132e4513038c907f654cf38cad12eeceb1c8bf151c7d627c8899cc47e98731d59c2b523184053c35e6c434ffa11fd7ff102809e446bec5c9240cba55141ef", &(0x7f0000000780)=""/193, 0x94, 0x0, 0x12, 0x5, &(0x7f00000001c0)="ecfc9bbae35bbe4d410f35c21f195557215a", &(0x7f0000000640)="e8ac8497c3", 0x1, 0x0, 0x9a77}, 0x50) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r5, &(0x7f0000000380)='/', 0x0}, 0x20) recvmmsg(r4, &(0x7f0000005c80), 0x400030f, 0x0, 0x0) r6 = socket(0x2a, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) sendmsg$NFT_BATCH(r6, 0x0, 0x40) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) close(0x3) 1m19.521216412s ago: executing program 0 (id=4979): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1830000007000000000000da020000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x1, 0x9a, &(0x7f00000001c0)=""/154}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) (async) write(r2, &(0x7f0000000240)="94", 0x1) (async) tee(r1, r5, 0x8f5, 0x100000000000000) write$cgroup_type(r5, &(0x7f0000000180), 0x9) (async, rerun: 32) write(r3, 0x0, 0x0) (async, rerun: 32) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) (async) sendfile(r7, r7, 0x0, 0x8000) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async, rerun: 64) r8 = accept4(r0, 0x0, 0x0, 0x80800) (async) openat$cgroup_procs(r6, &(0x7f0000000300)='cgroup.threads\x00', 0x2, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001f40)={0x234, 0x7, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x1a4, 0x4, 0x0, 0x1, [{0x120, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x110, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0x108, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x102, 0x1, "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"}]}, @NFTA_RANGE_FROM_DATA={0x4}]}}}, {0x58, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_ADDR={0x8}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}]}}}, {0x28, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x54, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x80f3}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88e7}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1320}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1e1f}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf7}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x16}]}, @NFTA_RULE_POSITION_ID={0x8}]}, 0x234}, 0x1, 0x0, 0x0, 0x4801}, 0x4049000) (async) sendmsg$alg(r8, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}, 0x20044000) (async, rerun: 32) ioctl$F2FS_IOC_DEFRAGMENT(r6, 0xc010f508, &(0x7f0000000480)={0x4, 0xfc0}) (async, rerun: 32) recvmmsg$unix(r8, &(0x7f0000001800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000fc0)=""/85, 0x55}], 0x1}}], 0x2, 0x12040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x2}, 0x20}}, 0x0) (async, rerun: 64) setsockopt$netrom_NETROM_T2(r8, 0x103, 0x2, &(0x7f0000000340)=0x10000, 0x4) (async, rerun: 64) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) 1m19.306708033s ago: executing program 0 (id=4982): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x2, @private0}, 0x1c, &(0x7f0000000d00)=[{&(0x7f0000000b00)='\n#', 0x2}], 0x1}}], 0x1, 0x440088d4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) shutdown(r0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x3, &(0x7f00000003c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000200)={0x3c, r6, 0x1, 0x71bd25, 0x3, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x3c}}, 0x4) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r5, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1374}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x8804) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018040000", @ANYRES32=0x0, @ANYBLOB="0000000000000041bfff00000000000018000000000000000000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xb8, &(0x7f0000000380)=""/184, 0x0, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xecc}, 0x94) 1m18.819390504s ago: executing program 0 (id=4987): pipe(&(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000140)=@assoc_value, &(0x7f0000000180)=0x8) (async) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000006a00010021bd7009000000250a00001200000000080001"], 0x20}, 0x1, 0xba01, 0x0, 0x400c002}, 0x0) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r3) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r4, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x8001}, 0x0) (async) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000a00)={0x57c, r1, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x400}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0x544, 0x8, 0x0, 0x1, [{0x318, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x314, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3d}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x20}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}]}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}]}, {0x1e0, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "bb616488ea4a0197850becd60f7baa9ad7aa97c2b8544f5fcbc3721f2bd1e77c"}, @WGPEER_A_ALLOWEDIPS={0x184, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x43}}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}]}, 0x57c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r5) (async) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r5) (async) getpeername$llc(r3, &(0x7f00000002c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000300)=0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r7, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_lib_t:s0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000000}, 0x805) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x28, r6, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20048000) 1m18.320045648s ago: executing program 0 (id=4990): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r0, 0x0, 0xb9b}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0xffff, 0x70bd2a, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc0d4}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r1, 0x0, 0xb9b}, 0x18) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c1}, 0x0) pselect6(0x40, &(0x7f0000000100)={0xd47, 0x0, 0x10001, 0x9, 0x4, 0xe, 0x3, 0x4}, &(0x7f0000000140)={0x5, 0x8000000000000001, 0x3, 0x280000000000, 0x7f, 0x30c, 0xf, 0x5272f06f}, &(0x7f0000000240)={0x3e82, 0x0, 0xdc, 0x24, 0x10, 0x5, 0x8, 0xfffffffffffffffc}, &(0x7f0000000280), &(0x7f0000000300)={&(0x7f00000002c0)={[0xe7a]}, 0x8}) 1m3.057058873s ago: executing program 35 (id=4990): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r0, 0x0, 0xb9b}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0xffff, 0x70bd2a, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc0d4}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r1, 0x0, 0xb9b}, 0x18) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c1}, 0x0) pselect6(0x40, &(0x7f0000000100)={0xd47, 0x0, 0x10001, 0x9, 0x4, 0xe, 0x3, 0x4}, &(0x7f0000000140)={0x5, 0x8000000000000001, 0x3, 0x280000000000, 0x7f, 0x30c, 0xf, 0x5272f06f}, &(0x7f0000000240)={0x3e82, 0x0, 0xdc, 0x24, 0x10, 0x5, 0x8, 0xfffffffffffffffc}, &(0x7f0000000280), &(0x7f0000000300)={&(0x7f00000002c0)={[0xe7a]}, 0x8}) 38.054530111s ago: executing program 7 (id=5381): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x80, 0x700, 0x101, 0x6, {{0xf, 0x4, 0x0, 0x18, 0x3c, 0x66, 0x0, 0x7, 0x29, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x1c, 0xb1, 0x3, 0x8, [{@remote, 0xe}, {@broadcast, 0x1ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffc0000}]}, @generic={0x86, 0xb, "8e004d3b8d22bc5a0a"}]}}}}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc8, r1, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x44, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x9, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4c101) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r0) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, r3, 0x24b287dc2b956293, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x44001}, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x6, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff63, 0x0, 0x0, 0x0, 0x7}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xfffff4b4, 0x0, 0x0, 0x0, 0x7f000000}, @alu={0x7, 0x1, 0x5, 0x8, 0xb, 0x10, 0xfffffffffffffff0}]}, &(0x7f00000004c0)='GPL\x00', 0x6, 0xc2, &(0x7f0000000500)=""/194, 0x40f00, 0x10, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x3, 0x1}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000680)=[{0x5, 0x2, 0x0, 0x7}, {0x2, 0x5, 0x8, 0x1}, {0x2, 0x3, 0x2, 0xb}, {0x4, 0x3, 0x2}], 0x10, 0x2}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x17, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x9}, [@map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc63}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xca4}}, @jmp={0x5, 0x1, 0x3, 0x9, 0x1, 0xffffffffffffffff, 0x8}, @exit, @map_idx={0x18, 0x35470eeb89b53d0, 0x5, 0x0, 0x3}, @tail_call, @jmp={0x5, 0x0, 0x3, 0xb, 0x5, 0x8, 0xffffffffffffffff}]}, &(0x7f0000000840)='GPL\x00', 0x9, 0xd, &(0x7f0000000880)=""/13, 0x41100, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000900)={0x2, 0xb, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000940)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x6b201394}, 0x94) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_tracing={0x1a, 0x1c, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xb0e7}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x75, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b80)={0x4, 0x9, 0x8, 0x7}, 0x10, 0x25a86, 0xffffffffffffffff, 0x3, &(0x7f0000000bc0)=[0x1], &(0x7f0000000c00)=[{0x0, 0x2, 0xd}, {0x2, 0x1, 0x6, 0x4}, {0x4, 0x1, 0xc, 0xd}]}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000e00)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d00)=@bridge_getneigh={0xa8, 0x1e, 0x4, 0x70bd2c, 0x25dfdbfe, {0x7, 0x0, 0x0, r2, 0x2, 0x2}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x4}, @IFLA_PHYS_PORT_ID={0x1b, 0x22, "f07127c5cd48e123dc7018e57cc6f6d3a3cf4b54d0ca37"}, @IFLA_IFALIASn={0x4}, @IFLA_PORT_SELF={0x28, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x10000}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "492022f12a3323d3d5bcde264d4b3442"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x1}]}, @IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}, @IFLA_XDP_FD={0x8, 0x1, r6}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r7}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'netpci0\x00'}, @IFLA_GROUP={0x8, 0x1b, 0x1}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000c45}, 0x40084) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r6, 0x8008f511, &(0x7f0000000e40)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000e80)='f2fs_fiemap\x00', r5, 0x0, 0x7fffffff}, 0x18) r8 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000f00), &(0x7f0000000f40)=0x10, 0x0) setsockopt$PNPIPE_ENCAP(r8, 0x113, 0x1, &(0x7f0000000f80)=0x1, 0x4) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000fc0)={0x0, 0x254, 0x1, [0x6]}, &(0x7f0000001000)=0xa) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000001040)=@assoc_id=r9, 0x4) syz_genetlink_get_family_id$SEG6(&(0x7f0000001080), r0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000010c0)={0x2, 'vlan0\x00', {0xfffffff8}, 0x3}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), r0) getpeername$l2tp(r8, &(0x7f0000001140)={0x2, 0x0, @multicast2}, &(0x7f0000001180)=0x10) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x74, 0x0, 0x8, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe253}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2cc}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xc6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x69f9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x809b}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x4024040) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r10, 0x84, 0x6d, &(0x7f0000001300)={r9, 0xe2, "0e9345edc56f8dd98657e8b6bb6ca7627cc264182f93016ff943d65e0a345bfdb7bca916ea2a7b625333d885395deb83388335b83d42eb0402949681d1a29ee440163c546cb31eaf5e60d1cef8ed5f7b4ed394c4785fb9e276a66fd49bb9e38b2f8e0d736f31e1979c8cb4515184b0c28f940b91a456b76b1313ef2e47ad394fc7d8cbe558af02c8a94735142b18462f5e73a8156f85459253e605c1480aa08a76a240348145956e7edcb09d557bf23866665a611b4407efb0afee023b976fa059f12bcfc31ae41f9ff459ca3f6a5fc1f23dcfbe43560bf5b2a8171d7faeb9011618"}, &(0x7f0000001400)=0xea) r11 = accept4$inet6(0xffffffffffffffff, &(0x7f0000001440)={0xa, 0x0, 0x0, @dev}, &(0x7f0000001480)=0x1c, 0x80000) bind$inet6(r11, &(0x7f00000014c0)={0xa, 0x4e23, 0x5, @remote, 0x4}, 0x1c) sendmsg$inet6(r11, &(0x7f0000001a00)={&(0x7f0000001500)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x9}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000001540)="f8ffea6dfb3d9c40830d64e45dffe9fd68ec60abfcf3a4ecfd23e36f6ed3138d36efc8520c12d9339fdf30cbf5b85e32ac6f1f9be6e3620f9fc6c900ee9d868d686cf5dd044f142eac9a5dadb9064931a3dee26364fafcf7f8278d1a7be5edb1cc1d2bd6af277a4abb207626ddad76f06f7b00", 0x73}, {&(0x7f00000015c0)="34b2871be5dbfc9bc3a806450d4e188a64f0d44d315f1833983a8540084b0f2924592e99080e23765081f5ab4ec34b571bc33a3a6070b3e4747af829f85754ae68da4f3bbd13f61e14", 0x49}, {&(0x7f0000001640)="0d0eac0fc42829cffe976ac5197e3b06916c4e72a0095e3bd8a0aec5c1226d6ac2015ac45ec26c05c0a7c0a6c4acdcc6e3feaedf79d397cb4eb5247688d5e73cd980c2672762499d48e6e074d08800d1864156b1f908e8e6892748752f7dffd7e6a3815afed847fa", 0x68}, {&(0x7f00000016c0)="85be3e099843fb2b924c361f2217b300aef5a01eb171b332", 0x18}, {&(0x7f0000001700)="ad8407e0", 0x4}, {&(0x7f0000001740)="39ab18ca55afd34701", 0x9}], 0x6, &(0x7f0000001800)=[@hoplimit={{0x14, 0x29, 0x34, 0x13f}}, @flowinfo={{0x14, 0x29, 0xb, 0x4}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x0, 0x0, '\x00', [@ra={0x5, 0x2, 0x7}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private1={0xfc, 0x1, '\x00', 0x1}, r2}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xe}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x0, 0x2, 0x0, 0x3, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast2}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x9}}, @rthdr_2292={{0x88, 0x29, 0x39, {0x33, 0xe, 0x1, 0x6, 0x0, [@remote, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @ipv4={'\x00', '\xff\xff', @empty}, @local, @empty, @empty]}}}, @dstopts_2292={{0x28, 0x29, 0x4, {0x6c, 0x1, '\x00', [@pad1, @ra={0x5, 0x2, 0x2}, @pad1, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @hopopts={{0x68, 0x29, 0x36, {0x6c, 0x9, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x0, 0x6, [0x0]}}, @enc_lim={0x4, 0x1, 0x2d}, @enc_lim={0x4, 0x1, 0x9}, @ra={0x5, 0x2, 0x8001}, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x8, {0x1, 0x0, 0x7, 0x7}}, @calipso={0x7, 0x10, {0x2, 0x2, 0x9, 0x9, [0x4]}}, @jumbo={0xc2, 0x4, 0x7}, @ra={0x5, 0x2, 0x8}]}}}], 0x1e8}, 0x85) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r10, 0x84, 0x10, &(0x7f0000001a40)=@sack_info={r9, 0x401}, 0xc) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r7, 0x8040942d, &(0x7f0000001a80)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b40)={&(0x7f0000001ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x7, 0x3}, {0x8, 0x4}, {0x7, 0x4}]}]}, {0x0, [0x2e]}}, &(0x7f0000001b00)=""/5, 0x3f, 0x5, 0x0, 0x9, 0x10000}, 0x28) 37.865759591s ago: executing program 7 (id=5384): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000200)=0x6) socket$unix(0x1, 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/61, 0x3d}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@ifindex, r0, 0x2f}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@fallback=r0, r2, 0x2f, 0x2038, 0x4, @void, @void, @value=r3}, 0x20) 37.493258147s ago: executing program 7 (id=5386): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) (async) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}}, 0x0) (async) write$cgroup_int(r4, &(0x7f00000000c0), 0x12) (async) r7 = socket(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) (async) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00010200"/20, @ANYBLOB="e3"], 0x1c}}, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r10 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r10, 0x29, 0xd1, 0x0, 0x4) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000006d0c993771e9cf6927098f489d98bb0000000000000a58000000060a09040000000000000000020000000900010073797a30001c00000900020073797a32000000002c000480280001800b00010064796e7365740000180002800900010073797a32000000000800034000000000140200001100010000000000000034479d06ec732fddec484d7f26e6d49dda1219ba84bb5cda72720377db45ffb335ae97131d473e35e77a89573fd083a8529d05b64c750522eddd3a9d6dcb827fa721cb5fba7ff14c02630a93789b1900"/231], 0x80}}, 0x0) (async) sendfile(r7, r9, &(0x7f0000000000)=0x4, 0x81) 37.353677361s ago: executing program 7 (id=5389): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x2}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB="000000000000000400000000f0ffffff00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) connect$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r2, 0x1, {0x2, 0xff, 0x1}, 0xff}, 0x18) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) listen(r3, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r5 = accept4$unix(r3, 0x0, 0x0, 0x0) recvfrom$unix(r5, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) close(0x4) r6 = socket$netlink(0x10, 0x3, 0xe) syz_genetlink_get_family_id$smc(&(0x7f0000000100), r6) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x1}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="320f8e51dceb7c9300d20150599139ffc30ccb3e456ec336911387db3705ad6ee824dfa434cdb513825438728e8207630013969f4c56b0f6c2c786f93f6580d56f0fba8299286f1394453312b67ee661d66d2dfe2f2b31faadd020a6c97f22a64116068173d1068a8ea9b12206aa5a74ea0e9ac61e6adafbb180fa76d9cc0c025e6524520c6ea18d517cb0e9ddaa8382618385cbe7540ba7e8a69d463e222b03d5f6f3027a14f2ac87f51ce60cbd3710f0dca552f88ac0c4e3a911ee9d16cc91", @ANYRES16=0x0], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xe, 0x0, &(0x7f0000000380)="256cd21ea843968d83c9a0b0a1a6", 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$inet_sctp(0x2, 0x0, 0x84) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$rxrpc(0x21, 0x2, 0x2) socket$netlink(0x10, 0x3, 0x13) bind$rxrpc(r10, &(0x7f0000000400)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x6e24, @empty}}, 0x24) close(r10) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 36.225016455s ago: executing program 7 (id=5399): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead", 0x51}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$qrtr(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000700)=""/195, 0xc3}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x10020) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000100e1ff0000000000000000850000005600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmsg$nl_route(r5, &(0x7f00000043c0)={0x0, 0x0, &(0x7f0000004380)={&(0x7f0000000100)=@delneigh={0x44, 0x1d, 0x100, 0x70bdac, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x2, 0xa1, 0xb}, [@NDA_CACHEINFO={0x14, 0x3, {0x3, 0xfffffff7, 0x7, 0x7}}, @NDA_CACHEINFO={0x14, 0x3, {0x2, 0x1, 0x800}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400a001}, 0x20001840) recvmsg(r5, &(0x7f0000008c00)={0x0, 0x0, &(0x7f0000007b80)=[{&(0x7f0000006a00)=""/76, 0x4c}], 0x1}, 0x40012003) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r0, 0x0) r6 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f00000004c0)=@l2={0x1f, 0x59, @any, 0x7879, 0x2}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000b00)="0e5b408ce682e1e1d3bd278182148fe67c0f2a351e9f81a6d32b0752bbb1e7b9d2369eea1dbbd81b7381854d156a127087354e87400e1220256aae54997c01965ead1404e304a1051b79ae15075f2f9b9013ff4d7526db1bd4142b6a9c241a77fe1880e16b38a981c65fea7451461f1f7e948be84606b925ba7fa3cde755d41433afee77692f8b8a5df9c842630d2c74df3e6c6b17f1c123d5ea0781a70c1179e1afc28e906b778be32c4b0ee6cb94c5197c69093638542f5e91a07aa1822a6385d7f37a056694f2ac26429a520ec8e7b1e4110f0d96ae8032e3dbb7353d4e26ea0128394f35de1e0b467ff7e0ab40a62469f11570597f8e53051c5123e7f175211dfaafc600312c3da01508544de6506e1af81353cbf41334841d1c305b599aacf847b95c10343a391c88f7864d418e11013537e3e8aa13e41d648729905cf595f606352efa227d9193247ee106f6ebb28eec82bc8880bcc996ff04203946db0f777403bf99", 0x166}, {&(0x7f00000002c0)="c52f9449cc9d3e6c61e0442367ca45f28628553422341a619c9fb8d233b82ce283928137c8205c110a469642", 0x2c}, {&(0x7f0000000940)="c447a24f4088d8c4afb4837ec540b0dedd7b50350c8eeb5293ec65537e6d12b010dd2d5f7768b419f5f2790ac3eb62c14519b2fea36a0c738d4bf8f1c98edd278f87922a31d0c8bf6ee43b55ca001e8c3400f4a17224aad29dcf496227abce55ab18c42add46ac391014f9f021f82635edb033b725fa35928edef7c0a652b719402705804383128360bdb7da8654ebd2adb83f6ae347699581402c67ed3b32f77039f87cf41bbe4131b2948b0a1795894614b7903ebfd408be4ace9ef29a020a3ada831c2aa3f868a1770e8d981bebb186cc017259f94ad56dc8b1f64b4212e3a93d", 0xe2}], 0x3, &(0x7f0000001b40)=[{0x48, 0x102, 0xfffffffb, "e99f8eb4797c990839bef59e5c242110b59e00c3d8993f1b849dfacd166017540fc30b375f3d41088f06b00dead25de9a25e53d1"}, {0xf0, 0x11, 0x1, "25759d73c19ab019b1c4ce2b256ed35bf79eef4db88e005156e40a731410e0d5c5902b3c9d3802402b094c54671c369ebe460eb6158488ef33d407bc6fca08fad7d6a866caabe3af7d4b242dd0d20b947aab82031a4627ac2f831acfec0ae1cbbd666ddaa30617a131268743c158e0a1cd9ae7b5186e06735b69e3f7660783c2505e610c5e12f4f3333f239dea3d0dd17680fd985bd6b0bd545ff1045088c3ac19a5d7222f58305e52e7df0ba79918f614b3f4ead92ee73937b64084b97319212d1a645049ba3c97cbe2077eacea9d54cb8242d06b237a92f80212"}, {0xa0, 0x1f3, 0x85c, "c0c3865aef61d1d41f112152179c9d5f8e54218aaed1f39d9e9e5d0dda18c64600342018fcc5c9f6bde43312616ee3f7a18c88da2281cef05721ae67ef500a56a53eb789d8cd8bddc0db04dbbecfd32c5de77c9cc15fec22127441c7c16c0fed371aabe8b3d6c5411398c9723d9d3893bd6d55bfc53502beb03320bdcf12c0b698bff24ceeff04d5d7df6001000000"}, {0xa8, 0x117, 0x7, "b045f9392c598db35218fb7626373b59a02d43541d8d0b3633066430304f81d1e550e23de9c5f7db7bc55acddda372dc42e2b3a497e62ded03c8c26b3454bc7551ceb9f76deca7ae4c189d545ccd3ed5fbd9fc959b0ab70132dd1296f961aae24f9bb74ce10ee9e4d0c6f09c0e734cce1fc512aba4189caaab740d26f0d42bcd69e78f1ac992e8a1a137cbc75694a9b8be164c"}, {0xa0, 0x109, 0x3, "79437256ed6dd1570d401cc39c3d792245a789973c3205ea1e21b6bc92c64de404eb1b01e393e26eddbdfebbd01efa1530ed41b3ed7949e40679c95d90485b7570765bc55d989e620c0befb40b450d7ec3030f06182a31e322a18b5d501e898b37061503e9acf472e0d02917443db9b060df79c7854db6a8f762888b28c06241d11bebd6eb517024ef99"}, {0x1010, 0x84, 0x721, "2af3a6c399e2323471e3ba140d696af766efc7cfbb9db07783a35a30d1bab2b15e757069ffaa7aaab36fc131083bfc9a80d9178878b3daaaf2d0116736ae8dbb9d69d196fe769d12cc66a3aa2107a51e523d3092bf5e68f8ff1ebb6405202714d43dac09cfbc9b1b1110d14084a11ecbfa38c68cb1b9abda23adf4d56b59ffddc8a1dbfcd18527949a4d6c04facad3bd0879dee43d1782281fb923fd3d54fb307fcd6c1220457ff0eeb2ce8b9fc0c891102b07aeea768c0e246b2d5a8fd7bf06815aad98778f2dc7dc6e1b24be6e087b3b3ac8df42e729eb1469f8e21adea77cc79e3eb7a6b3069ca5d37354bb8e46bac6962e7c3473dc962883e5b4b44929eea9b7ac06f670a4be6a0927ab4fbe387c72e08b65b6e6d0313847ba9a74ad742e90f148c6febd388cce0e360b76caf3de0aec28c281fa21a0e1efc8625e4c8f1a278c104b8fdde30bfa74a1f6b719ec768095444c5b58437bb63f42e68dd5ac3c05802a335b82ca9d4dbc940c33bf1794007becf8226d10f8e850e6cd198036b9d5b13af969c350a53ccd90437122a5e0ebb185abc2c1213607e61c8cca0d7577d5a52489594b3d72fd4a868ce4cc6ec5c3686e0d49eb0dd585976b8da1eb0f16ba47113e17f52e168868de8447fca81613c2767035b508500c83f7b361f073f2995df1857209340df00085fac5aec0155a859cf988c5ae1ccc9215274134d82bc03f608c0c7dce51079edeaa114de78cfab4a661123b7d22826d192dc379ef1b9f136ce9b6d46f5c693f5cbd8321a1e60e611b5f0b3b76e9edae88fe90c3819cd56c74b3eb425c6272fdda9f4db0bdb309c02cc02a18452e8271a2a25f21cb166a2758de2e8e8db55e70535050f7cc122ccc50e6d10bf94e40a8ed66c7e670750971e4eba39c17c367aa81ee08161bb793ec3ab3ac446e43764d35c7f2ffde434abd47832160d4ee9dab913e93702bc8b50537e4e8c2443d91b8af8bac0be0430270723ec9e5061ee657d8ef2fbfb6094f81d4c3f8c3d051c47c3d49dd47da70b7eebe48f55c49a39e7888f17d34ae7c6c78412f9cf43253c614fdc24ec0de40e3c697bd3e07b59dcf9b1eb4e80ac6e856c7ee4b02998bf3bd35f86e81d15369e7a84d1ef140035a909d92d79bccf52b5667f3afd0dfc084c66221779c2b9e69854c18c21311d81cbd6102448dd77d473304e9a927c7d884e657b18fe8779e666bb6c72231cfd7b037a91cf160979e3df7f68d0fc4ffc0c5fc190bc7fdc5255d0474924fa40a98c85c77b36331bac47b62323466e5c43df9b3300ce03a97304343a338ca90905068b71844ece0de765ed88f0aa3dc64db8a2ddf911e133fac3149e0399366b25f91f926c5e34bc49fe1beee6994abdaddef6ecc24f17065798cbb897b3e8649690c1f55c0af6c8328c5223d9a800a1793508abb0452fff3ac842191019a7ad9672f9e4da1e18ebd85a1a851d3e1a84bdc3b343a29bfa0f72181306806064030af135b9bb9406a2ae7672b5e1982d3f99110dd8850f3c80fbe8f8847ec65b905edb1844b5de7255c41f8ee2146a087c22ea5afd288447865023e869391f626f519e022c502c3ddd004991a1118da5eaff2591d50d7e06b50b33e5164df43e4335b2a0558d68ee99eab34be1fd49d8b1af48676e5754427b2579ae8d7e61fa84227aff78ecf5a90f84b3a046f6463e2d5bfd2d959baa30eabf5e085316d3831691a39fb8030e216e052d9fd9ac60b9e60009f39e68c8dc9bc3aa953a3da0c31c29e459af0bb2d088c1d0c79f63c2882f58cdf59541cb2ae4ac672836ac1bbe1de0530fb1bf998c22abc618a5975ea5cbe16f9e84ed94dec6f0088121a909dc6af6ac3920c2a587f57017002052bffca1082749099e59787449b9f56eaa70edf1d9c2f896579ce27768b2b07ca76895aec59b3c5810daba8039d24be86df84a73d5ffd41cd87714e3e4e580575de938fb1e9d6151b3384953039ec426730091b610983f7af2872ac617b09a54413b022a5b8218c27cf73ba87083181d7e2e8af6337b1e77829021ba4f98a9fd1800de781c70e07a91db7d22f5eb6f0cb929532ba85f77bf64b1b3bade9edd612403238f22f165306482da73b3d564d90e96a1637285d16ed4abd478e379cdb8709c0d16fbc5175a6d1f6c539cf60b0b1c0ccb8d35d43f89e41fd9025a99e028d0d9d20bc6932108d3a0dd86f5c0641c3ecdc9dbc50101fae3124128c51bf777baf3b77a39fd890b7fe9bbef9e3bcf97e43b248331ca2c95049521ab00abddcf06bb126726d27eb8eb878c2d4faacbd0964f162c21bf70167629c692ea54576926787d0847993386a8d28686fc07fc00c7b1ec43fc44572cf5b9dae7c98654b5be90403ac72e70b48a3f0816bf0035192aaccb50f563c6ce90ff5cffb80f653c7776aaadd08e78470bda2671de3801d30c8a6030062e9d3096cfa88d6c978c809a6f0442513a34853d7b76befeb3a51b6562465931c356f299531cc5370fb76222e74850abd9e428b3171709f291f73c2a6b202f91eb3df450161ee1073d3cf1414a3a278a5379db2424fa985052ecf70c63f073af664b3406f50ed2a485aa007cf8b3c9d5b8af7ac3bfbe04c35a5625187e1fe15e939c94be40727db065cb335a6c6a7d51376f7e502f89ce0228d289dab4c8f2ba36942e4267aa37f35840532f4c1b079bb0445dbb44f0c6ab6b76006302d363a480ba062c30d7f6adfc384ec0b452f47b354de5867e3e2491cee4ff26ac9219fdcfb4c8517ca660c97f8cdc81b04b80ec31cbd7a95b7f86d1f3f7d324c1fa709db49b50be20be1b676e8f5fcc45757ecd77805068d022bc1c30be0f812c1524ea80b5370c58318e6f9917e656678c91db4a85c3f9c4fb9d484f1d2580aded8bdbca5176b8d4c166929c8f0f3cf8d34c907265cfdfcd3914cc7639f61a9475d286f212ee9cd7dfd9272dc410fa2fe313650496afb6e178c2a8196ea8972e5c265fa7277416a838918e8112c6c115950ba665ee09a42aa40f73bb60d73025f9905180b1438e2921d467e251a353bcc09f85eb3f77df2ffea00857748f10f917d0089dbb377ffc7db5e292d321041a7d1d512d8c29ffe81076327d941c79e54794be97ca428aa8193ed07f8dfbaa3903b8fc6c78904feda9f61b9540132ba7ec6d406c5832016ffe59eb296d2e4b91ca4219d13b443344a7ba13537f5711b89961c314a4860a43c7ec4260e67cafd156ec435b353f66047ef09ea4a2328311b88205a21926c346c4b39cbd7b94ac2b4bce1a44016d50df56af9e947f9b899d28e96b3da2fc9f884aa5ac58f6c4552ee6c70cbb77405a0396ce8ccc492973408914d6bc073002d3a6afc26f8b819fef7ef80043dfda8b3da22b2375cd3d21f14526f6e46a3e1fc30bab3ca0bca2216a5d83e3cb6be56888b1823744e95e0754206005d11f467cedf2a325a257e177d4c2ed98a8188ef72e01311038c7ebaf140bdba0fdc24a7a6265d0dc0da0fe88e45298dc1e162a7204762b67b2f968a0732bcdef909acb07fa159d4e6be87f6f36af782d94ba0387022699c56139c0211f056ed2c3d767751b3b55b64ba2301b64ad14a7110a2af4387869ab27600d1931eb54abf82396bc1c7548601b7133f2dea2a4b3c189b27232dd96b794809056a6abe972a5a4cf8e1eeace1e2de43be10f1bf650fb8e1bdcb24466d66a6887f07a43c147c1f273a89b81f66794b29f810fe2546f6c8ff104fe70fefeef850c3f7d7b4ab251ca98bf5c9444c7b2850a36053de5995ca43a0b58d7c8117696c746973cd47606b9f8cd4851e8bffb65e38dea779574ac80d627e5b0aabc945aff1fd3fb1294b02c2f273fcf9fc232ff8901341fb2418ef776651e61d99c4cd4d1248274b4299d619453a3d8de0db9665d257102b1a92f0879eaf69a2de4b2eb09687716b815d8dc3a0ff4b8093ca8823deaae3c569c5efdc74f95817dc34a582c2563096bac716384d30d7748d939130a361cfae7c124986374560280eda03eacdbdf3bf3010c039b22609cb8c014b2cc2210f8b5baadf9d80435c90e219d74f5f48a70df1af571985f94ae86d7bcd718594756972c8d015888278c109b09d745b14981e80678834337d9a21dac6a7431377b4b859ec3bf1b68160c32d9375e1e975eeea9134c5943b255fe8421184afbe62d5e499ffd4703fc5416eea4f924e924070f5e417bdc83b9ce95730a3815eaee8edc0b56749ab76cd96af3059f70217a465b0696abcd173960c99e7a48ef063b7206687f9572da2d15261022f7177db145d10882c8657557ed99cfc04ca462de2b54af502e57d3581135d83204943141e679dd545ea97829a5666d7b6448e100780bd589c29bd5995938df0bd2a1c37d61dada786bef906d99e350ecc61f9de37b576997cb0f8a9d490a621a09d4d3eb277fcb8982056ef34f8b8f49c3dd906aa19f27f0152065d0d7fe59be37c9f04a34ac029f4013bd74fd7fec3c1c3dca1453ee45b9803af586057059a22cfacad7e354be3b33834d2a52d42a50cd733f2db3554f94a15825f5f6ccd4fe89903b6639fea60b8270ff9f8e5a7e736788b5e9066b6ebad16ce1722abd84629f44556869d99e5d110d5a14011e22a59a99a626b82bf4634ad5d8701138eb051110259d78468c6f398e40127efdd61b98da956828eb55a5039e8d6b088856641b4bb436d94df96f8c5d8f0317a1081b318d95656198cb6c5bc50e869b7ef2aa50356d63852c2572eb56ef7972373698622fc7348013840970d5da8707b7d803d7df8804fa236d3273f50f8f5552470aac37cf82178e1c2a775954f474bd4ed9a1fff2f3740d4b9953aa03734810d792c141f01d452c6d2727b38813777e5d9c6ac909a95056ff51bd1b5d6612ce407e54f92cebc0a90f5c251b9772e36105b7d5c377b99e9260450639b7caa47d9491d591e982ccc11b231cdaf9172baef5885aad39ff7afe61e73e14a4bb243869eee6c08bc0a3ef68521c2c75601033f76a03b9310515514f40bc8e982e7ea569f3400d0652ebc1d679b63d8aa4396da2cf3071fe9c67773cc18187585bf08b829e8a063a4312d4946dfa33ba687e0ab6978b5307ebc0783f6729730e7f5029f93b895670df79edabbae5b573f49f825a3dbfdfe11d1588a64c6ef63db820d77824b83abdb369a9839b9a475d10c52d944b9edd89a5fbf4e26ac3ef82fa6ad228a31282f07aff49870e2529435cac272caa3494cf61f81f94c916b8112206c86b23bc08ac84f0b9feba6147a8a66084d84a4338e4545b9c229161840ed6fe72aac985763e1958b68275757c0a8fb8fe2bdc5bd5ec2e2ecf506b46ca4fe68717db11c614c19dedc0a7f21233aaaa2b8dea86e9a1a87f25622aabd55956d8444a84b4ed42d6e45a54e5e098e2849efb43a3e3938b73305181dd58eaa5dd090ea7e10a57e66b04f7d6320e3e6309731974fe21d2df6e942ca131b57b4447bb8690b041313179b007c4db7a4d01e31fb84b3f0a5bbee3e915f64ce54935d7f2e2759df30845380a086b3db9eaec514630773b83707c7196f163090fe9295a74c1cd48c5d92442eb4ec7513e3fd2761e795d7c78e87ff685a724bc62551492b583e2bf9eda0bd94f757c19159ee14f18d9dedc32f3440da6b86dfc62af70d70e08b78f848202bafbe277b6a9fab68883844d4c4cb98869a216945fd62f78ef52a09080fd1e5be3214a8be6781eceddc764e4a445dacfce11f4dd12550d7f99cd687bfc4f80068d791834ce4fc77cdc4a3949f26a885"}], 0x1330}, 0x24000801) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) r7 = socket(0x14, 0x2, 0x4) ioctl$SIOCX25GDTEFACILITIES(r7, 0x61d9, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800600060090390000100002800c000300080009"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYRESDEC=r9], 0x0, 0x34, 0x0, 0x0, 0xc1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) 35.411618406s ago: executing program 7 (id=5402): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r0, 0x0, 0x7f}, 0x18) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000840)={0x0, 0xe1}, 0x8) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r3, 0x0, 0x7f}, 0x18) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 20.372053975s ago: executing program 36 (id=5402): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r0, 0x0, 0x7f}, 0x18) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000840)={0x0, 0xe1}, 0x8) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r3, 0x0, 0x7f}, 0x18) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 7.113375594s ago: executing program 3 (id=5691): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r10) sendmsg$NLBL_CIPSOV4_C_ADD(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r11, @ANYBLOB="01000000000000000000010000000800010000000000140004800500030007000000050000000000000008000200010000000800020001000000a00008801c000782"], 0xe0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44800) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x70bd2b, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r10) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r11, @ANYBLOB="01000000000000000000010000000800010000000000140004800500030007000000050000000000000008000200010000000800020001000000a00008801c000782"], 0xe0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44800) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x70bd2b, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) (async) 6.737615117s ago: executing program 3 (id=5695): r0 = socket(0xa, 0x1, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000006c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x1, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x2}}}}}}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r5, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x20000090) setsockopt$packet_rx_ring(r2, 0x107, 0x5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x20939, 0x6003}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0xff02, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r8, 0x118, 0x1, &(0x7f00000001c0)=0x386, 0x4) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x28}}, 0x0) 4.917147236s ago: executing program 5 (id=5706): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x6) r4 = socket(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x1, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x800, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x10000, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0x1, 0xffff}, {0x2, 0x3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8041}, 0x800) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000100)) (async, rerun: 32) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xcb43, 0x0, 0x0, 0xfffffffd}, 0x10) (async, rerun: 32) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000480)={0x0, r1}, 0x8) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x39}, [@map_val={0x18, 0xb, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xff}, @map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}]}, &(0x7f0000000200)='syzkaller\x00', 0x5ef9, 0x4f, &(0x7f0000000240)=""/79, 0x41000, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x8, 0x4, 0x7}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x4, 0x1, 0x3, 0x3}, {0x0, 0x4, 0x8, 0x1}], 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000140)='rpcgss_svc_unwrap_failed\x00', r7, 0x0, 0x9}, 0x18) (async) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0xfffffffffffffe1b, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000005e0001002dbd7000fddbdf250000000018e610e867e5800066fd497cf83c22e4d5c73f49b2f69126d7d54cfb29f58882b1fa6e113179d99b056367d7fff177538714c7304fcb8346f4f120bbe0b5bc237de8e8debb2e6ce194739c5fbdad092de54c6fb012fd845bda00"/123, @ANYRES64=r6, @ANYRESHEX=r1], 0x1c}, 0x1, 0x0, 0x0, 0x60}, 0x24004844) 3.026836066s ago: executing program 6 (id=5707): bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = socket(0x18, 0x3, 0xfffffffd) r1 = socket(0x28, 0x803, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x10}, @IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}}}]}, 0x54}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x57, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x4008811}, 0x58890) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendto$packet(r1, &(0x7f0000000200)="28c59bf1b2f9eac49b8d7584ced2151b8d903d7fc338118b7aba08730fffcad3a73c661bde2892608831255b9819bc6aa494fe05bf33dc1b857fab22f82bfd691b1220fe3870a79bfdf6b0ddd4525cd5c68b4e7ba561832a9ab894c6a0", 0x5d, 0x10, &(0x7f0000000100)={0x11, 0x1b, r3, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.913425318s ago: executing program 5 (id=5708): socket(0x10, 0x803, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xffffffffffffffa0, 0x0, &(0x7f0000000640)="0cffffdf71c8afefeba000dee560", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f00000000c0)='syz1\x00', 0x1ff) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="5dcd004021000000000000003b81000085cf26006d000000b40d2dd091ac0a00957bbd1a343eba5e7481df6fe568adba5dbe7e"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffefe, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000240)='kfree_skb\x00', r3, 0x0, 0x8}, 0x18) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r5 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r5, 0x110, 0x4, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r4, 0x240}], 0x1, &(0x7f0000000080)={r6, r7+10000000}, &(0x7f0000000100)={[0x1000]}, 0x8) socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) 2.911636172s ago: executing program 3 (id=5710): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000843c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000090900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a0001006c696d6974000000240002800c00024000000000000000000c001558e9830000000000030800044000000001"], 0x118}}, 0x0) 2.831160803s ago: executing program 6 (id=5712): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0xfffffffa, 0x640f9818723db717}, 0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x29, 0x8, 0x5, 0x6, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x700, 0x80000000, 0x3}}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r3, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x583e}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1b, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, r5, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0x2e, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@exit, @ldst={0x0, 0x1, 0x3, 0x8, 0xa, 0xfffffffffffffff4, 0x10}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0xe, 0x3, 0x0, 0x3}, @exit, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000005c0)='syzkaller\x00', 0xf, 0x0, 0x0, 0x40f00, 0x45, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x5, 0x3, 0x1, 0x400}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000680)=[0xffffffffffffffff, 0x1], &(0x7f00000006c0)=[{0x4, 0x5, 0x6, 0x6}, {0x5, 0x4, 0x1, 0x2}, {0xa, 0x5}, {0x2, 0x2, 0x5, 0xa}, {0x1, 0x4, 0xd, 0x3}], 0x10, 0x8}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'veth0_to_hsr\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000540)='GPL\x00', 0x1ff, 0x0, 0x0, 0x41100, 0x0, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6d2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = socket$inet_smc(0x2b, 0x1, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r13, &(0x7f0000000240), &(0x7f00000004c0)=@tcp=r12}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x15, 0x12, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x1ff, 0x8f, &(0x7f0000000300)=""/143, 0x40f00, 0x37, '\x00', r1, @sk_reuseport=0x28, r2, 0x8, &(0x7f0000000400)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, r4, r6, 0x2, &(0x7f0000000800)=[r7, r9, r13], &(0x7f0000000840)=[{0x1, 0x2, 0xd, 0x8}, {0x1, 0x4, 0x7, 0x3}], 0x10, 0x10}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x9c, &(0x7f0000001300)=""/156, 0x0, 0xa}, 0x94) 2.752483389s ago: executing program 5 (id=5714): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = gettid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)}], 0x1}, 0x40045) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x6) getsockopt$ax25_int(r3, 0x101, 0x2, 0x0, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) 2.737180006s ago: executing program 3 (id=5715): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_emit_ethernet(0x5e, &(0x7f0000001480)={@broadcast, @random="000500", @val={@val={0x88a8, 0x7, 0x0, 0x2}, {0x8100, 0x3, 0x0, 0x3}}, {@canfd={0xd, {{0x3, 0x0, 0x1}, 0xb, 0x0, 0x0, 0x0, "b42bd4f5dc5bd4d8f1741f70f87625c51c3b4f47d29647fc4561914cd3c7e5b5bab003578cfd9258533d5432b342ee0ada27e4782af1f0026c9558ba4f48ce74"}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400200010000100000000b40d0011"], 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000001500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x4, [@float={0x6, 0x0, 0x0, 0x10, 0x4}, @volatile={0xa, 0x0, 0x0, 0x9, 0x2}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0x48, 0x0, 0x1f, 0x3}, @func={0x7, 0x0, 0x0, 0xc, 0x3}, @int={0x5, 0x0, 0x0, 0x1, 0x0, 0x1d, 0x0, 0x2b, 0x3}, @volatile={0x3, 0x0, 0x0, 0x9, 0x5}, @enum={0x1, 0x3, 0x0, 0x6, 0x4, [{0x3, 0x6}, {0x8, 0xfffffffb}, {0x10, 0x4}]}, @const={0x2, 0x0, 0x0, 0xa, 0x2}, @float={0xe}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0xc}}]}, {0x0, [0x61, 0x0]}}, &(0x7f0000000080)=""/65, 0xc0, 0x41, 0x1, 0x9, 0x10000, @value=r1}, 0x28) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x4008, r1}, 0x18) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)={0x1b, 0x0, 0x0, 0x400, 0x0, r2, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2005, 0xfffffffe}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r5, 0x0, 0x4040810) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r7) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x437, 0x4, 0x0, {0x0, 0x0, 0x0, r8, 0x50483}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x13}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) sendmmsg$inet(r6, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x15, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "d1"}]}], {0x14}}, 0x7c}}, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r3, &(0x7f0000000400)="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", &(0x7f0000000100)=""/44, 0x4}, 0x20) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="12008864"], 0xfce) 2.683612473s ago: executing program 6 (id=5716): unshare(0x20000400) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1200000004000000040000000300000000000000", @ANYRES32, @ANYBLOB="00000000000000000000c11f0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x40}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd25, 0x25df9bfb, {0x0, 0x0, 0x0, r3, {0xd, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_ACT={0x50, 0x6, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x5, 0x4, 0x7, 0x8}, 0x39}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x3}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040), 0x10) listen(r4, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) close(0x3) sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008094) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007112c9000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.559224018s ago: executing program 5 (id=5717): r0 = accept4(0xffffffffffffffff, &(0x7f00000003c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f0000000440)=0x80, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000480)={0x0, 0xac}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000500)={r1, 0x0, 0x2, 0x4}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(r2, &(0x7f0000000080)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x54, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x24, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}, @TCA_FQ_PIE_TARGET={0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f0000000300)={r1, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x200005, 0x3, 0x8, 0x5, 0x3}, &(0x7f00000001c0)=0x98) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000200)={0x7, 0x3, 0x4, 0x400, 0x520, 0x0, 0x10, 0x3, r8}, 0x20) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000040000b6191dea0b64eff6f000300000008000200070000000600018000000000"], 0x24}}, 0x4040080) r9 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setsockopt$XDP_TX_RING(r9, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) r10 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r10, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x9}, 0xc) setsockopt$MRT6_FLUSH(r10, 0x29, 0xd4, &(0x7f0000000080)=0x9, 0x4) r11 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r11, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0x10000000, @local, 0xfffc}}, 0x24) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="002000130400000000fbdbd825fe800000000000000000000000000000ac1414c800000000000000e3ffa5ff0000000000000000000000000000000080", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffff7f0000010000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000008000000000000000000000000000040000000000000000000000010a000000000000000000000050001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000004000000025cac521"], 0x140}}, 0x4000080) sendmmsg(r11, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r11, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x1, 0x1, 0x4, 0x4}, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r11, 0x12, 0x3, &(0x7f0000000100), 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) 2.426866985s ago: executing program 9 (id=5719): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket(0xa, 0x800, 0x2) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="600100001000130428bd700000000000ac1414aa000000000000000000000000ac1e0101000000000000000000000000002000074e2400000a0020201d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe88000000000000000000000000030100000000320000000a0101000000000000000000000000000400000000000000070000000000000000000000000000000400000000004000ffffffffffffffff06000000000000007f0000000000000000000000000000000000000000000000ffffffffffffffff04000000000000000000000000000000f6000000040000000800000000000000ff340000020001be000000000000000070001200726663343330392863636d28c1bc66dcb64b4e84d97662ebda6165732929000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020010000600000007919d8c1a084855cc3fb00"/280], 0x160}}, 0x804) 2.253560789s ago: executing program 6 (id=5720): ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000140)={{}, 0x7, &(0x7f0000000000)=[0x3, 0x15, 0x7, 0x2, 0x5, 0x9, 0xd4d], 0x9, 0xd}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x0, 0x806, 0xffffffff}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) 2.12874463s ago: executing program 9 (id=5721): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800000, 0x22051, r0, 0x0) r1 = socket(0x8, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffffff}, @in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x39}, 0x2}, @in6={0xa, 0x4e23, 0x57, @remote, 0x800}, @in6={0xa, 0x4e24, 0x5, @mcast2}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}, @in6={0xa, 0x4e20, 0xf00c, @private0, 0x8}], 0xac) r3 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) connect$unix(r3, &(0x7f0000000100)=@abs={0x1}, 0x6e) ioctl$IMGETCOUNT(r1, 0x40106183, 0x0) 1.813303009s ago: executing program 6 (id=5723): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x4, 0x8, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC_PROXY(r3, 0x0, 0xd3, &(0x7f0000000000)={@local, @private=0xa010100, 0xffffffffffffffff, "0135158a4b17b20d8d4a00d0042f8f006f72f8b02b978974d18f13c6dcc39c75", 0x0, 0xb7ee, 0x100}, 0x3c) socket(0x10, 0x2, 0x0) (async) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) (async) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x4, 0x8, 0x5}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) (async) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$MRT_DEL_MFC_PROXY(r3, 0x0, 0xd3, &(0x7f0000000000)={@local, @private=0xa010100, 0xffffffffffffffff, "0135158a4b17b20d8d4a00d0042f8f006f72f8b02b978974d18f13c6dcc39c75", 0x0, 0xb7ee, 0x100}, 0x3c) (async) 1.563693864s ago: executing program 3 (id=5724): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x1}}, [@TCA_RATE={0x6, 0x5, {0xf7, 0x8}}]}, 0x2c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.373379583s ago: executing program 6 (id=5726): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000020000000000000003000000180000000300000000000000040000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc5c79a324b7d4b3d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x0, &(0x7f0000000180), &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) unshare(0x68040200) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f00000043c0)={'tunl0\x00', {0x2, 0x4e23, @empty}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0xfffffffffffffd64, &(0x7f0000000400)=[{&(0x7f0000000240)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x10000000000001da, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000002100010000000000fedbdf2502000000000000000000000025f61d0e4305569c5673590084484fb48a8656e192d06acfb0fa830016a20a0fef9e1e000000"], 0x1c}}, 0x44044) socket$nl_netfilter(0x10, 0x3, 0xc) listen(r2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x6, &(0x7f0000000040)=r0, 0x4) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000340)=@phonet={0x23, 0x4, 0x1, 0x7}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080), 0x33}], 0x1}, 0x26004051) sendmsg$NL80211_CMD_STOP_NAN(r6, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="af83893eb3", @ANYRES16, @ANYBLOB="000227bd7000ffdbdf25740000000c0099000700000006000000"], 0x20}, 0x1, 0x0, 0x0, 0x4044801}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r8) sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r9, 0xae7b47118b512754, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8044}, 0x0) sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900010073797a30000000fc43552a3f575381800b00010065787468647200002c681f39e53f95831692c1ab3cd422702c000280080007400000000c05000200000000000800034000000a4a"], 0x94}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 1.368101349s ago: executing program 9 (id=5727): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x2a}, 0x3, 0x78, 0xfff9, 0x0, 0x8000000066b8, 0x400202e8, r2}) 1.306083491s ago: executing program 5 (id=5728): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYRESOCT=0x0, @ANYRES32, @ANYRESDEC=0x0, @ANYRES64, @ANYRES32, @ANYRESDEC=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000001080021850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000050000000000000000000000850000002c000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000300000085000000060000009500000000020000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @remote, 0x2}, 0x1c) shutdown(r3, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000800)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) setsockopt(r3, 0x84, 0x80, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) close(0x3) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r5, @ANYRES16=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r7}, 0x10) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c0503e0"], 0x30}, 0x40880) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000009c0)={0xffffffffffffffff, 0x0, 0x25, 0x19, @void}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0}, 0x28) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x11, r9, 0x3cd30000) ioctl$FS_IOC_RESVSP(r9, 0x40305829, &(0x7f0000000040)={0x1100, 0x2, 0x8, 0x10003}) write$tun(r9, &(0x7f0000000280)=ANY=[@ANYBLOB="000051a2070028040100010909c154f0b6a893b9d707bbb41e81e2bc449e91ca7662db1b0f397a829e1d0586bfbee5244d207ed5aa8402ea424044a8f85b4ca29fa570d8e821fae02f26a5888b8965f32f21d40e8cc3ca694077d0b3c8c7cd1ed95b43224b161d3562f50f12c8ede75f81875a450633f86ff94360ea56d0"], 0x7e) sendmsg$can_bcm(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="0100"/16, @ANYBLOB="5d1cf6f2b26cff0c0c53c4749228ead69964bbf751101aa0462b80caa18d7b0202c0de59a0e21ba9e2a38bcb548b8d8224ab3e4cad9ac3861a574376e35d0cf4c462117b5e1661227ae392cca971ff9d3b39c504d123519b99535950083462431564fb907fd18d942680662d477a073342ebb5b3f607a99b0bc597511d", @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) r11 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r11, &(0x7f0000001d80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010104}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}, {{&(0x7f0000000380)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000000b00)='>', 0x1}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="110000000000000000000000010000000b000000000000001400000000000000000000000200000001000080000000004c", @ANYRESOCT=r10, @ANYRESDEC=r6], 0x80}}], 0x3, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) 1.287031664s ago: executing program 3 (id=5729): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@gettaction={0x14, 0x32, 0x20, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4042004}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000009c0)=@getchain={0x24, 0x66, 0x100, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf, 0x7}, {0x7, 0xc}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) unshare(0x6a040000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) unshare(0x600) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0xa, &(0x7f0000000440)=0x7b, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r2, &(0x7f0000001c00), 0x0, 0x40) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000000c0)='cgroup.max.depth\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000632af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf98000000000000560800000000000085000000070000000059f052131803cbd7fe02d68498036667b18724d4d4a263a0bccae2ded707b264eb115beda998260d6f9399be587e"], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0011006272696467650000100002800c0021008000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00990010039bc03283824876856a0bce3b1ba7efbfa11ef9921981a5298d02072819e70afb369dcf5d73328f6939b0d330680307a53dade3588709a9859967d6ee93b6f6f80d8d555d7ce3dc0e019225e3b8be9c502f4d5d010bc4a6852beba58397f4dc520400000073c29815f8075a2624178ab4"], 0x50}}, 0x4008840) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) unshare(0x24060400) 1.215887077s ago: executing program 9 (id=5730): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000980)=ANY=[@ANYBLOB="20000000240a01030000000000000073797a300000000041226b8c98bbf3c8745c27ceb78976656da9210c37dc933db7e530e34156c42979a3951614f01dc720bc1878bdc4d4a365700aebd4943d97ada4ac896933fb271fd0190273c856c512d0abc7173d51e69a202436634f255853a373ff263f287c27013828a29f67c496d83eda3cd721000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000067282559f1b731fcecd8dd60a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300fc0000000b000100736f636b657400000800024000000002140000001100010000"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010700000000000a000000000000"], 0x14}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYRESOCT=r0, @ANYRES32=r3, @ANYBLOB="2b82ee61862298aa8f693c704155f20787b34469a897e0d35c89be864bad79ffbc5a7179670595650b43df2277d5eb603cf9d6ce61bffc99f63cbc8ca204ebf91a965f8fa810b0189788f73327e8cae993a5e3bd0410f3fc138ee547cfe45812bb96d343963466cd9fefd807282e48a0c1d6ca55acea10e728ab03fd0af9eedb5f0d0b758e4bfde7294c2c3d57e5cd1080e92b842e7d2e57054b18632c6999bdcdc7f08547043d13143ae60cdee76580f4b4890d"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001408b59500000000000000000a00", @ANYRES32, @ANYBLOB="140002"], 0x34}}, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r7, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) syz_emit_ethernet(0x66, &(0x7f0000000440)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0xd, 0x2, 0x0, 0x0, 0x0, 0x68, 0x2, 0x0, 0x1, 0x0, @loopback, @local, {[@noop, @timestamp={0x44, 0x1c, 0x28, 0x0, 0x2, [0x7, 0x7, 0x3, 0x9, 0x6, 0x4]}]}}, "00186371ae9b1c03"}}}}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r9, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000640)={r11, @in6={{0xa, 0x4e23, 0x4, @empty, 0x7ae}}}, &(0x7f0000000500)=0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000000700)=@assoc_value={r12, 0x6d12}, &(0x7f0000000180)=0x8) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f00000003c0)={0x1d}, 0x8) recvmmsg(r7, &(0x7f0000004200)=[{{0x0, 0x0, 0x0}, 0xfffffffa}], 0x1, 0x2002, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r5, 0x100, 0x70bd25, 0x3, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x13}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x48}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000010) 1.215556593s ago: executing program 8 (id=5731): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r1, 0x101, 0x4, &(0x7f0000000180)=0x2, 0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="08010000", @ANYRES16=r2, @ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0x8010}, 0x5) unshare(0x400) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000d100000000000000000000730128000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xcb, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000000)={{r0}, 0xeb, 0x80000007ff, 0x2}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket(0xa, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00082bbd7000fcdbdf256200000008000300", @ANYRES32=0x0, @ANYBLOB="0600b400a508000b0600b4004b0f00000600b3000000000006000600a70c00000600b300000000000600b300030000000600b300020000000600b400920109000600300d000000007d039f05d2b0c6b8d00c"], 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x24000000) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="600100001000130428bd000000000000ac1414aa00f54f0000cf923488a98ef4401e0101000000000000000000000000002000074e2400000a0020201d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x160}}, 0x804) setsockopt$packet_int(r5, 0x107, 0x10, &(0x7f0000000000)=0x7, 0x4) 1.034945285s ago: executing program 8 (id=5732): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="24000000021401"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x800) (async) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="24000000021401"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x800) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[], 0x0) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000440)={0x5}, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000015c0)) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, 0x0) unshare(0x72050800) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002001, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) bind$unix(r3, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) (async) listen(r3, 0x0) shutdown(r2, 0x0) connect$unix(r2, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = accept(r3, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000540)="24e469", 0x3, 0x4000805, 0x0, 0x0) (async) sendto$inet6(r4, &(0x7f0000000540)="24e469", 0x3, 0x4000805, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x20000000) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) 776.306859ms ago: executing program 5 (id=5733): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000817000001"], 0x50) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x4, 0xfc, 0x6, 0x8, 0x10, @private0, @local, 0x700, 0x40, 0x5, 0x9}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@gettaction={0x40, 0x32, 0xe72c5f922f23cad9, 0x70bd27, 0x25dfdbf7, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xffffa8b4}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c844}, 0x4000000) r2 = socket$rds(0x15, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x9}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}]}}]}, 0x40}}, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{0x0}], 0x1}}], 0x48}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r5, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r5, 0x0) r6 = socket(0xa, 0x2, 0x0) getpeername$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={&(0x7f0000000a40)=""/4096, 0x1000, 0x0, 0x0}}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r11, &(0x7f00000000c0), 0x9) r12 = socket(0x10, 0x3, 0x0) connect$bt_sco(r12, &(0x7f0000000340)={0x1f, @none}, 0x8) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r12, 0x89f1, &(0x7f00000007c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', r13, 0x29, 0xf, 0x7, 0x1, 0x10, @empty, @mcast2, 0x10, 0x7, 0x5b, 0x4}}) getsockname$netrom(r6, &(0x7f0000000840)={{0x3, @null}, [@remote, @default, @rose, @netrom, @remote, @default, @netrom, @null]}, &(0x7f00000008c0)=0x48) sendfile(r11, r10, 0x0, 0x10000) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x800000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r8}, {}, {}, {}, {0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x55}}]}, &(0x7f0000000300)='syzkaller\x00', 0x5b8c, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @xdp, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, r10, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1e0000004fc30000000104cbe65a3c811c650100", @ANYRES32=r0, @ANYBLOB="000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r4], 0x50) 533.47286ms ago: executing program 8 (id=5734): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x2}, @ldst={0x2, 0x0, 0x3, 0x0, 0x0, 0x50}]}, &(0x7f0000000100)='GPL\x00', 0x7, 0xdb, &(0x7f0000000700)=""/219, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000002c0)='ip_vti0\x00', 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r3, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x130, 0x24, 0x4ee4e6a52ff56541, 0x2000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0x7}, {0x10}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1b}, @TCA_STAB={0x104, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x3, 0x1ff, 0x6, 0x1, 0x1000, 0x4, 0x1}}, {0x6, 0x2, [0xec3]}}, {{0x1c, 0x1, {0xe, 0xf, 0x8, 0xd63, 0x0, 0x3, 0x4, 0x8}}, {0x14, 0x2, [0x6, 0x0, 0x0, 0x4, 0x1c24, 0x400, 0x2, 0xeff9]}}, {{0x1c, 0x1, {0x1, 0x6, 0x3, 0xf9e4, 0x1, 0x5, 0x6, 0x6}}, {0x10, 0x2, [0x3, 0x47, 0x73d, 0x3, 0x401, 0x7]}}, {{0x1c, 0x1, {0x7, 0x0, 0xb, 0x7, 0x1, 0x2, 0x0, 0x9}}, {0x16, 0x2, [0x10, 0x7fff, 0x4, 0x2, 0x5, 0x9, 0x8000, 0x9, 0x0]}}, {{0x1c, 0x1, {0x3, 0x25, 0x1, 0x3, 0x0, 0x7, 0x0, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x6, 0x70, 0x9, 0x1000, 0x1, 0xd4e, 0x2, 0x4}}, {0xc, 0x2, [0x4, 0x2, 0x76a, 0x2]}}]}]}, 0x130}}, 0x4000010) 437.85189ms ago: executing program 8 (id=5735): socket$packet(0x11, 0x3, 0x300) write$nci(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="663402008395a19df05363416751d5a657b7015f5e5afec0888834d9772a0b1fbb353e381f1b2865c6b1626110cd0e3b0b8b36ed02896c1bcc97ac6b0348da8bef3188c34052ca730085c4a9eaaa429f6316b9d5278ef015499710"], 0x4) r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) r6 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x1f}, 0x1c) r7 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r7, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="71000600", @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="4400028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000200000008000600", @ANYRES32=r5, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x400}, 0xc8014) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket(0xf, 0xa, 0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = accept4(r10, &(0x7f0000000200)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000140)=0x80, 0x800) setsockopt$RXRPC_SECURITY_KEY(r11, 0x110, 0x1, &(0x7f00000002c0)='\x00', 0x1) r12 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r12, &(0x7f000000b440)=[{{&(0x7f0000000300)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001740)=[{&(0x7f00000006c0)='\f', 0x1}], 0x1}}], 0x1, 0x4000800) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r13, 0xd}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r11, 0x84, 0xa, &(0x7f0000000300)={0x0, 0x3, 0x1, 0x5, 0x82, 0xb, 0x8, 0x4e9, r13}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000300)={r13, @in6={{0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff}}, 0xd3, 0x6, 0x7, 0x3e, 0x81, 0x4ba7, 0xf6}, 0x9c) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480200001800e000100636f6e6e6c696d69740000000cff01800800014000000010000180090001006c61737400000000100001800a00010003006469720000000900010073797a30000000000900020073797a3200000000110800001100010000000000000000000000000a"], 0x98}}, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x3, 0x3, 0x9, 0x9, 0x100000000, 0x0, 0x3, 0xfffffffffffffc00}, &(0x7f0000000100)={0x8000000000000001, 0x2, 0x5, 0x62a, 0xffff, 0x3, 0x9, 0x10000000006}, &(0x7f0000000140)={0x7f, 0x7, 0x8, 0x6db1, 0xbea9, 0x3, 0x3, 0x2}, &(0x7f00000001c0), &(0x7f0000000280)={&(0x7f0000000240)={[0x1]}, 0x8}) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x124}}, 0x4008000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f00000002c0)={'wlan1\x00'}) 324.596006ms ago: executing program 9 (id=5736): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) (async) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) openat$cgroup_ro(r2, &(0x7f0000000000)='freezer.state\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000140)=@assoc_value, &(0x7f0000000180)=0x8) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) (async) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de089022000aaa696ec000aac14140ce000000d49e832f0", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de089022000aaa696ec000aac14140ce000000d49e832f0", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000040)=0x1) close(0x3) (async) close(0x3) syz_init_net_socket$ax25(0x3, 0x2, 0x1) (async) r9 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) ioctl$SIOCAX25GETUID(r9, 0x89e0, &(0x7f0000000480)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r8, 0xc0709411, &(0x7f0000101b40)={{0x0, 0xffffffff, 0xb, 0x9, 0x6d6, 0x1, 0x1, 0x7fff, 0x9, 0x4, 0x10001, 0x1, 0xb, 0x41d, 0xe}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r9, 0xd000943e, &(0x7f0000101c00)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000102c00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r9, 0xd000943d, &(0x7f0000103e00)={0x8ac, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}], 0x6, "11d1c3e7261748"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000104e00)) ioctl$BTRFS_IOC_TREE_SEARCH(r6, 0xd0009411, &(0x7f0000105000)={{0x0, 0x2, 0x6, 0x9, 0x6e50000, 0x7, 0x7f, 0x400, 0xff, 0x3, 0x5, 0x0, 0x6, 0xfff, 0x1}}) ioctl$BTRFS_IOC_TREE_SEARCH(r8, 0xd0009411, &(0x7f0000106000)={{0x0, 0x7fffffff, 0xfffffffffffffffc, 0x80000000, 0x8000000000000000, 0x8, 0x7f, 0x8, 0x6, 0x4, 0x2, 0x8, 0x5, 0x8000000000000000, 0x2}}) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r8, 0xd0009411, &(0x7f0000106000)={{0x0, 0x7fffffff, 0xfffffffffffffffc, 0x80000000, 0x8000000000000000, 0x8, 0x7f, 0x8, 0x6, 0x4, 0x2, 0x8, 0x5, 0x8000000000000000, 0x2}}) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf25050000000c000980080002000300001f6d000280080001"], 0x46}}, 0x4004) 109.52948ms ago: executing program 8 (id=5737): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000078f082ee00000080ed95"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5b471ae3}, 0x94) 87.976532ms ago: executing program 9 (id=5738): socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180700000000000000000000000000007110be000000000095"], &(0x7f0000000100)='GPL\x00', 0x4}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180700000000000000000000000000007110be000000000095"], &(0x7f0000000100)='GPL\x00', 0x4}, 0x94) (async) 0s ago: executing program 8 (id=5739): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x4, 0x4}, 0x50) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r2, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x6, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@d, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xc4}}}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0xe43c4cf3342b4a61, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) kernel console output (not intermixed with test programs): speed is unknown, defaulting to 1000 [ 762.235629][T23186] syz_tun: left allmulticast mode [ 762.285762][T23186] dvmrp8: left allmulticast mode [ 762.769490][T23193] lo speed is unknown, defaulting to 1000 [ 763.055366][T23237] wg2: entered promiscuous mode [ 763.064878][T23237] wg2: entered allmulticast mode [ 763.597845][T23246] netlink: 'syz.0.4583': attribute type 10 has an invalid length. [ 763.620618][T23246] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4583'. [ 763.680778][T23247] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4583'. [ 763.706176][T23246] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 763.744259][T23249] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4582'. [ 763.995571][T23252] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4584'. [ 764.067743][T23254] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4585'. [ 764.242145][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802ea1cc00: rx timeout, send abort [ 764.251775][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802ea1cc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 764.266436][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802ea1f800: rx timeout, send abort [ 764.283207][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802ea1f800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 764.288814][T23265] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4587'. [ 764.338685][T23265] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4587'. [ 764.366354][T23265] netlink: 'syz.6.4587': attribute type 11 has an invalid length. [ 764.441020][T23266] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 764.531641][ T7680] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 764.563522][ T7680] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 764.583684][ T7680] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 764.615574][ T7680] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 764.688169][T23276] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4591'. [ 764.703429][T23276] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4591'. [ 764.770730][T23282] veth1_to_bond: entered allmulticast mode [ 764.777568][T23282] veth1_to_bond: entered promiscuous mode [ 764.785051][T23280] veth1_to_bond: left promiscuous mode [ 764.790769][T23280] veth1_to_bond: left allmulticast mode [ 764.799678][T23285] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 765.068923][T23294] wg1 speed is unknown, defaulting to 1000 [ 765.170205][T23303] openvswitch: netlink: Message has 4 unknown bytes. [ 765.192756][T23303] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 765.244153][T23303] netlink: 'syz.0.4599': attribute type 1 has an invalid length. [ 765.334563][T23302] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4598'. [ 765.489251][T23294] lo speed is unknown, defaulting to 1000 [ 766.394363][T23345] tipc: Enabled bearer , priority 0 [ 766.670684][T23350] siw: device registration error -23 [ 766.685193][T23351] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4611'. [ 766.849626][T23353] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.880088][T23359] sock: sock_timestamping_bind_phc: sock not bind to device [ 767.196751][T23353] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.246112][T23379] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4616'. [ 767.254663][T23375] @0Ù: renamed from bond_slave_1 (while UP) [ 767.358891][T23379] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4616'. [ 767.424565][T23353] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.620921][T23353] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.636652][T23385] openvswitch: netlink: Flow actions attr not present in new flow. [ 767.893059][T20099] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.025740][T20099] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.044656][T20099] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.106251][T23394] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 768.139797][ T7680] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.174146][T23395] bridge_slave_0: left allmulticast mode [ 768.179948][T23395] bridge_slave_0: left promiscuous mode [ 768.218336][T23395] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.238859][T23395] bridge_slave_1: left allmulticast mode [ 768.262410][T23395] bridge_slave_1: left promiscuous mode [ 768.268883][T23395] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.299905][T23395] bond0: (slave bond_slave_0): Releasing backup interface [ 768.365166][T23395] bond0: (slave bond_slave_1): Releasing backup interface [ 768.434643][T23395] team0: Port device team_slave_0 removed [ 768.509091][T23395] team0: Port device team_slave_1 removed [ 768.547817][T23395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 768.606844][T23395] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 768.669513][T23395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 768.792631][T23395] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 768.825692][T23395] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 769.277389][T23404] syzkaller0: entered promiscuous mode [ 769.283601][T23404] syzkaller0: entered allmulticast mode [ 769.830055][T23420] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 772.151323][T23418] __nla_validate_parse: 5 callbacks suppressed [ 772.151346][T23418] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4628'. [ 772.167335][T23418] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4628'. [ 772.184572][T23422] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.273461][T23433] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4633'. [ 772.385606][T23422] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.428534][T23441] netlink: 'syz.3.4635': attribute type 7 has an invalid length. [ 772.452907][T23441] netlink: 'syz.3.4635': attribute type 8 has an invalid length. [ 772.461110][T23439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4633'. [ 772.475865][T23441] netlink: 'syz.3.4635': attribute type 13 has an invalid length. [ 772.519039][T23448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4633'. [ 772.546288][T23450] sctp: [Deprecated]: syz.6.4636 (pid 23450) Use of struct sctp_assoc_value in delayed_ack socket option. [ 772.546288][T23450] Use struct sctp_sack_info instead [ 772.792799][T23422] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.827327][T23445] wg1 speed is unknown, defaulting to 1000 [ 772.925570][T23422] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.059132][T23458] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.145783][T16537] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.155132][T23462] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4638'. [ 773.218236][T20097] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.229178][T20097] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.229184][T23445] lo speed is unknown, defaulting to 1000 [ 773.259659][T23458] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.310652][T20099] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.324270][T23458] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.444644][T23467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 773.458360][T23467] 8021q: adding VLAN 0 to HW filter on device team0 [ 773.481684][T23467] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 773.525346][T23458] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.606229][T23477] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4643'. [ 773.846484][T23494] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0 [ 773.881471][T20100] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.890919][T23497] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4650'. [ 773.950257][T20097] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.001389][T20099] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.039880][T23501] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4652'. [ 774.047498][T20097] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.319859][T23512] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4654'. [ 774.377576][T23512] netlink: 'syz.0.4654': attribute type 29 has an invalid length. [ 774.600188][T23533] syzkaller0: entered promiscuous mode [ 774.616235][T23533] syzkaller0: entered allmulticast mode [ 774.731927][T23533] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 774.784127][T23533] tipc: Resetting bearer [ 775.360180][T23577] syzkaller1: entered promiscuous mode [ 775.367730][T23577] syzkaller1: entered allmulticast mode [ 775.682052][T23595] xt_bpf: check failed: parse error [ 776.247773][T23634] Bluetooth: MGMT ver 1.23 [ 776.572013][T23654] netlink: zone id is out of range [ 776.582974][T23654] netlink: zone id is out of range [ 776.590033][T23654] netlink: set zone limit has 4 unknown bytes [ 776.919304][T23672] netlink: 'syz.0.4702': attribute type 13 has an invalid length. [ 776.927532][T23672] netlink: 'syz.0.4702': attribute type 17 has an invalid length. [ 777.420460][T23701] wg1 speed is unknown, defaulting to 1000 [ 777.555462][T23709] netlink: 'syz.3.4711': attribute type 1 has an invalid length. [ 777.679008][T23717] __nla_validate_parse: 6 callbacks suppressed [ 777.679031][T23717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4711'. [ 777.697075][T23717] netlink: 'syz.3.4711': attribute type 3 has an invalid length. [ 777.707466][T23714] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4699'. [ 777.778112][T23720] netlink: 'syz.0.4713': attribute type 1 has an invalid length. [ 777.882701][T23725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4713'. [ 778.042779][T23731] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4716'. [ 778.063575][T23731] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 778.274378][T23734] bridge_slave_0: entered promiscuous mode [ 778.280846][T23701] lo speed is unknown, defaulting to 1000 [ 778.315153][T23738] netlink: 212296 bytes leftover after parsing attributes in process `syz.6.4719'. [ 778.351908][T23740] netlink: 'syz.5.4718': attribute type 10 has an invalid length. [ 778.362892][T23740] bond0: (slave wlan1): Opening slave failed [ 778.372100][T23740] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 778.436953][T23740] syzkaller0: left promiscuous mode [ 778.448402][T23740] syzkaller0: left allmulticast mode [ 778.701368][T23759] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4726'. [ 778.793365][T23763] netlink: 208 bytes leftover after parsing attributes in process `syz.5.4726'. [ 778.820146][ T30] audit: type=1800 audit(1758197246.432:11): pid=23759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4726" name="memory.events" dev="tmpfs" ino=1357 res=0 errno=0 [ 778.842526][ T30] audit: type=1804 audit(1758197246.432:12): pid=23759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.4726" name="/newroot/261/memory.events" dev="tmpfs" ino=1357 res=1 errno=0 [ 778.989076][T23772] netlink: 'syz.0.4729': attribute type 1 has an invalid length. [ 778.999414][T23772] netlink: 'syz.0.4729': attribute type 1 has an invalid length. [ 779.008676][T23768] tipc: Enabling of bearer rejected, already enabled [ 779.020437][T23773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4729'. [ 779.060818][T23776] syzkaller0: entered promiscuous mode [ 779.067777][T23772] netlink: 'syz.0.4729': attribute type 1 has an invalid length. [ 779.077738][T23776] syzkaller0: entered allmulticast mode [ 779.143426][T23778] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4732'. [ 779.199437][T23790] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4731'. [ 779.264143][T23768] IPVS: Scheduler module ip_vs_ not found [ 779.270421][T23776] netlink: 'syz.5.4728': attribute type 2 has an invalid length. [ 779.707943][T23801] netlink: 'syz.5.4735': attribute type 13 has an invalid length. [ 779.724334][T23801] netlink: 'syz.5.4735': attribute type 17 has an invalid length. [ 779.858151][T23801] sit0: left promiscuous mode [ 780.007325][T23801] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 783.411050][T23862] tipc: Enabling of bearer rejected, already enabled [ 784.033103][T23893] __nla_validate_parse: 1 callbacks suppressed [ 784.033127][T23893] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4760'. [ 784.616138][T23899] netlink: 'syz.3.4762': attribute type 9 has an invalid length. [ 784.877204][T23906] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4764'. [ 784.897092][T23906] netlink: 'syz.7.4764': attribute type 1 has an invalid length. [ 784.915400][T23906] bridge1: entered promiscuous mode [ 784.931175][T23906] bridge1: entered allmulticast mode [ 785.504696][T23922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4769'. [ 785.591651][T23935] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4771'. [ 785.632089][T23935] netlink: 3 bytes leftover after parsing attributes in process `syz.7.4771'. [ 785.669646][T23935] batadv1: entered promiscuous mode [ 785.702271][T23935] batadv1: entered allmulticast mode [ 786.058639][T23946] delete_channel: no stack [ 786.065360][T23945] delete_channel: no stack [ 786.269310][T23954] netlink: 'syz.7.4776': attribute type 27 has an invalid length. [ 787.007580][T20079] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.036822][T20079] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.057244][T20079] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.081039][T20079] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.081047][T23959] wg1 speed is unknown, defaulting to 1000 [ 787.337571][T23968] netlink: 'syz.0.4783': attribute type 2 has an invalid length. [ 787.367483][T23968] netlink: 'syz.0.4783': attribute type 2 has an invalid length. [ 787.382838][T23968] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4783'. [ 787.461318][T23976] netlink: 'syz.7.4782': attribute type 13 has an invalid length. [ 787.482532][T23976] netlink: 'syz.7.4782': attribute type 17 has an invalid length. [ 787.569671][T23979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4784'. [ 788.017006][T23976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 788.028810][T23976] 8021q: adding VLAN 0 to HW filter on device team0 [ 788.049095][T23976] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 788.054100][T23988] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 788.081317][T23989] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 788.108521][T20079] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 788.133495][T23959] lo speed is unknown, defaulting to 1000 [ 788.144479][T20079] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 788.166146][T20079] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 788.189546][T20079] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 788.275728][T23995] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4789'. [ 788.407265][T24001] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4789'. [ 788.426119][T24001] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4789'. [ 789.047364][T24034] __nla_validate_parse: 1 callbacks suppressed [ 789.047388][T24034] netlink: 180 bytes leftover after parsing attributes in process `syz.3.4796'. [ 789.218633][T24042] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4799'. [ 789.329477][T24006] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 789.365653][T24050] netlink: 788 bytes leftover after parsing attributes in process `syz.0.4801'. [ 789.700261][T24069] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4805'. [ 789.857971][T24075] wg1 speed is unknown, defaulting to 1000 [ 789.883099][T24068] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 789.995671][T24087] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4809'. [ 790.020325][T24083] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 790.054639][T24083] bridge3: entered allmulticast mode [ 790.222807][T24091] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4810'. [ 790.252349][T24091] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4810'. [ 790.280774][T24091] netlink: 'syz.7.4810': attribute type 4 has an invalid length. [ 790.311848][T24096] netlink: 224 bytes leftover after parsing attributes in process `syz.7.4810'. [ 790.763517][T24114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4814'. [ 791.023719][T24122] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4816'. [ 791.196085][T24075] lo speed is unknown, defaulting to 1000 [ 792.515350][T24219] netlink: 'syz.5.4840': attribute type 49 has an invalid length. [ 792.563237][T24219] netlink: 'syz.5.4840': attribute type 49 has an invalid length. [ 792.751894][T24224] syzkaller0: entered allmulticast mode [ 792.791773][T24224] syzkaller0 (unregistering): left allmulticast mode [ 793.071295][T24230] netlink: 'syz.3.4845': attribute type 6 has an invalid length. [ 793.320942][T24251] wg1 speed is unknown, defaulting to 1000 [ 793.727769][T24273] wg1 speed is unknown, defaulting to 1000 [ 793.861215][T24278] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 793.916936][T24251] lo speed is unknown, defaulting to 1000 [ 794.699219][T24302] netlink: 'syz.6.4861': attribute type 5 has an invalid length. [ 794.722621][T24301] netlink: 'syz.6.4861': attribute type 5 has an invalid length. [ 794.860219][T24307] __nla_validate_parse: 10 callbacks suppressed [ 794.860242][T24307] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4862'. [ 794.904257][T24297] wg1 speed is unknown, defaulting to 1000 [ 794.929733][T24273] lo speed is unknown, defaulting to 1000 [ 795.217132][T24274] sctp: [Deprecated]: syz.5.4854 (pid 24274) Use of struct sctp_assoc_value in delayed_ack socket option. [ 795.217132][T24274] Use struct sctp_sack_info instead [ 795.442652][ T51] Bluetooth: hci6: command 0x0405 tx timeout [ 795.458464][T24297] lo speed is unknown, defaulting to 1000 [ 795.690419][T24327] netlink: 'syz.6.4869': attribute type 12 has an invalid length. [ 795.716437][T24327] netlink: 9472 bytes leftover after parsing attributes in process `syz.6.4869'. [ 796.033300][T24342] tipc: Resetting bearer [ 796.570754][T24342] tipc: Resetting bearer [ 796.672592][T21224] lo speed is unknown, defaulting to 1000 [ 796.680196][ T7948] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.690014][T21224] syz2: Port: 1 Link DOWN [ 796.730413][ T7948] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.832475][ T7948] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.869264][ T7948] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.035940][T24358] 8021q: adding VLAN 0 to HW filter on device bond1 [ 797.294136][T24366] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4875'. [ 797.354959][T24366] netlink: 'syz.7.4875': attribute type 5 has an invalid length. [ 797.389222][T24366] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4875'. [ 797.398065][T24370] wg1 speed is unknown, defaulting to 1000 [ 797.481100][T24366] geneve2: entered promiscuous mode [ 797.495352][T24366] geneve2: entered allmulticast mode [ 797.504259][ T7948] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 797.536129][ T7948] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 797.560491][ T7948] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 797.575040][ T7948] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 797.651067][T24393] veth1_macvtap: left promiscuous mode [ 797.656913][T24393] macsec0: entered allmulticast mode [ 797.970171][T24370] lo speed is unknown, defaulting to 1000 [ 798.000654][T24413] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4889'. [ 798.010430][T24413] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4889'. [ 798.130422][T24416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4890'. [ 798.179835][T24421] netlink: 'syz.6.4892': attribute type 7 has an invalid length. [ 798.216145][T24418] tipc: Enabled bearer , priority 0 [ 798.224237][T24419] tipc: Enabling of bearer rejected, already enabled [ 798.233431][T24418] syzkaller0: entered promiscuous mode [ 798.239198][T24418] syzkaller0: entered allmulticast mode [ 798.268435][T24418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4891'. [ 798.324109][T24419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4891'. [ 798.389168][T24418] tipc: Resetting bearer [ 798.440806][T24417] tipc: Resetting bearer [ 798.496312][T24417] tipc: Disabling bearer [ 798.658752][T24428] !: renamed from dummy0 [ 798.871437][T24431] wg1 speed is unknown, defaulting to 1000 [ 798.890734][T24439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4897'. [ 798.943004][T24439] geneve2: entered promiscuous mode [ 798.948843][T24439] geneve2: entered allmulticast mode [ 799.012572][T20089] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 44780 - 0 [ 799.035268][T20089] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 44780 - 0 [ 799.056367][T20089] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 44780 - 0 [ 799.077309][T20089] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 44780 - 0 [ 799.287933][T24450] wg1 speed is unknown, defaulting to 1000 [ 799.697580][T24431] lo speed is unknown, defaulting to 1000 [ 799.863275][T24477] ipvlan0: entered promiscuous mode [ 800.105223][T24483] __nla_validate_parse: 2 callbacks suppressed [ 800.105246][T24483] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4911'. [ 800.133289][T24492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4912'. [ 800.180007][T24451] netlink: 'syz.6.4902': attribute type 2 has an invalid length. [ 800.261048][T24497] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4914'. [ 800.389967][T24493] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 800.502095][T24450] lo speed is unknown, defaulting to 1000 [ 800.801372][T24509] tipc: Started in network mode [ 800.807440][T24509] tipc: Node identity 4ed79d09588d, cluster identity 4711 [ 800.815303][T24509] tipc: Enabled bearer , priority 0 [ 800.838320][T24511] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4917'. [ 800.873424][T24509] tipc: Disabling bearer [ 801.009679][T24518] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4922'. [ 801.019463][T24518] netem: change failed [ 801.217997][T24530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4924'. [ 801.280158][T24532] netlink: 'syz.5.4925': attribute type 1 has an invalid length. [ 801.464254][T24532] bond5: entered promiscuous mode [ 801.478742][T24532] 8021q: adding VLAN 0 to HW filter on device bond5 [ 801.545906][T24542] 8021q: adding VLAN 0 to HW filter on device bond5 [ 801.553903][T24542] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 801.564307][T24542] bond5: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 801.578368][T24542] bond5: (slave vxcan3): making interface the new active one [ 801.587345][T24542] vxcan3: entered promiscuous mode [ 801.594467][T24542] bond5: (slave vxcan3): Enslaving as an active interface with an up link [ 801.727006][T24560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4932'. [ 801.857177][T24564] netlink: 'syz.3.4934': attribute type 8 has an invalid length. [ 802.007871][T24569] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4935'. [ 802.034531][T24569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4935'. [ 802.072337][T24569] netlink: 248 bytes leftover after parsing attributes in process `syz.3.4935'. [ 802.394542][T24586] macvtap1: entered promiscuous mode [ 802.399918][T24586] veth1: entered promiscuous mode [ 802.442520][T24586] macvtap1: entered allmulticast mode [ 802.448011][T24586] veth1: entered allmulticast mode [ 802.501471][T24594] veth1: left allmulticast mode [ 802.525977][T24594] veth1: left promiscuous mode [ 803.362782][T24631] wg1 speed is unknown, defaulting to 1000 [ 803.397576][T24641] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 803.795612][T24631] lo speed is unknown, defaulting to 1000 [ 804.533434][T24688] wg1 speed is unknown, defaulting to 1000 [ 804.804665][T24695] xt_socket: unknown flags 0x50 [ 805.101682][T24688] lo speed is unknown, defaulting to 1000 [ 805.315813][T24707] netlink: 'syz.3.4964': attribute type 21 has an invalid length. [ 805.324167][T24707] netlink: 'syz.3.4964': attribute type 30 has an invalid length. [ 805.352925][T24706] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 805.432360][T24706] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 805.593735][T24714] netlink: 'syz.7.4966': attribute type 1 has an invalid length. [ 805.594035][T24716] __nla_validate_parse: 9 callbacks suppressed [ 805.594055][T24716] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4966'. [ 805.674764][T24714] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4966'. [ 805.695972][T24714] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4966'. [ 805.876749][T24724] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 805.884095][T24724] IPv6: NLM_F_CREATE should be set when creating new route [ 805.891421][T24724] IPv6: NLM_F_CREATE should be set when creating new route [ 805.898942][T24724] IPv6: NLM_F_CREATE should be set when creating new route [ 805.936604][T18142] hid-generic 0005:16C0:5502.0002: item fetching failed at offset 0/3 [ 805.971135][T18142] hid-generic 0005:16C0:5502.0002: probe with driver hid-generic failed with error -22 [ 806.257748][T24745] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4974'. [ 806.360011][T24747] netlink: 'syz.6.4975': attribute type 39 has an invalid length. [ 806.415441][T24750] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4975'. [ 806.469735][T24750] netlink: 43 bytes leftover after parsing attributes in process `syz.6.4975'. [ 806.528273][T24750] netlink: 'syz.6.4975': attribute type 5 has an invalid length. [ 806.537135][T24750] netlink: 43 bytes leftover after parsing attributes in process `syz.6.4975'. [ 806.552841][T24753] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4977'. [ 806.625165][T24754] vlan4: entered allmulticast mode [ 806.757428][T24751] wg1 speed is unknown, defaulting to 1000 [ 806.999279][T24751] lo speed is unknown, defaulting to 1000 [ 807.110836][T24769] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.4980'. [ 807.158483][T24778] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4981'. [ 807.226184][T24781] netlink: 'syz.5.4984': attribute type 32 has an invalid length. [ 807.265303][T24782] netlink: 'syz.5.4984': attribute type 9 has an invalid length. [ 807.482500][T24778] team0: left allmulticast mode [ 807.504530][T24778] team_slave_0: left allmulticast mode [ 807.515624][T24778] team_slave_1: left allmulticast mode [ 807.527212][T24778] bridge0: port 3(team0) entered disabled state [ 807.554933][T24778] bridge_slave_1: left allmulticast mode [ 807.560728][T24778] bridge_slave_1: left promiscuous mode [ 807.566844][T24778] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.583951][T24778] bridge_slave_0: left promiscuous mode [ 807.589999][T24778] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.809107][T24781] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 807.890844][T24777] wg1 speed is unknown, defaulting to 1000 [ 808.188477][T24814] netlink: 'syz.3.4992': attribute type 11 has an invalid length. [ 808.329667][T24777] lo speed is unknown, defaulting to 1000 [ 808.601100][T24834] netlink: 'syz.5.4995': attribute type 10 has an invalid length. [ 808.967004][T24852] batadv1: entered promiscuous mode [ 808.975852][T24852] batadv1: entered allmulticast mode [ 809.000728][T24856] openvswitch: netlink: IP tunnel dst address not specified [ 809.033944][T24856] openvswitch: netlink: IP tunnel dst address not specified [ 809.051904][T24856] openvswitch: netlink: IP tunnel dst address not specified [ 809.071487][T24856] openvswitch: netlink: IP tunnel dst address not specified [ 809.079795][T24856] openvswitch: netlink: IP tunnel dst address not specified [ 809.773463][T24881] netlink: 'syz.3.5009': attribute type 1 has an invalid length. [ 810.707497][T24912] wg1 speed is unknown, defaulting to 1000 [ 810.839956][T24921] __nla_validate_parse: 12 callbacks suppressed [ 810.839981][T24921] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5024'. [ 811.032400][T24928] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5026'. [ 811.042945][T24928] netlink: 'syz.5.5026': attribute type 8 has an invalid length. [ 811.169522][T24912] lo speed is unknown, defaulting to 1000 [ 811.293459][T24931] wg1 speed is unknown, defaulting to 1000 [ 812.233156][T24931] lo speed is unknown, defaulting to 1000 [ 813.037508][T24963] wg1 speed is unknown, defaulting to 1000 [ 813.315177][T24963] lo speed is unknown, defaulting to 1000 [ 814.008544][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.300709][T24990] netlink: 'syz.3.5044': attribute type 3 has an invalid length. [ 814.341960][T24990] syz_tun: entered allmulticast mode [ 814.458130][ T30] audit: type=1800 audit(1758197282.072:13): pid=24994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5045" name="blkio.bfq.time_recursive" dev="tmpfs" ino=796 res=0 errno=0 [ 814.504545][T24997] siw: device registration error -23 [ 814.509876][ T30] audit: type=1800 audit(1758197282.092:14): pid=24994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5045" name="blkio.bfq.time_recursive" dev="tmpfs" ino=796 res=0 errno=0 [ 814.560362][T24997] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5044'. [ 814.701251][T25005] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5049'. [ 814.712891][T25005] netlink: 'syz.5.5049': attribute type 1 has an invalid length. [ 814.721582][T25005] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5049'. [ 814.742048][T25005] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5049'. [ 814.975185][T25022] tipc: Enabled bearer , priority 0 [ 814.983641][T25022] syzkaller0: entered promiscuous mode [ 815.002314][T25022] syzkaller0: entered allmulticast mode [ 815.094863][T25022] tipc: Resetting bearer [ 815.135164][T25021] tipc: Resetting bearer [ 815.177048][T25021] tipc: Disabling bearer [ 815.189872][T24989] syz_tun: left allmulticast mode [ 815.216308][T25030] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5059'. [ 815.318492][T25034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5060'. [ 815.365568][T25034] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 815.441015][T25039] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5063'. [ 815.455864][T25043] netlink: 'syz.3.5060': attribute type 3 has an invalid length. [ 815.485003][T25043] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.5060'. [ 815.754594][T25056] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 815.860193][T25056] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 816.166562][T25066] __nla_validate_parse: 1 callbacks suppressed [ 816.166587][T25066] netlink: 148 bytes leftover after parsing attributes in process `syz.6.5070'. [ 816.364020][T25070] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5072'. [ 816.529021][T25073] netlink: 'syz.6.5074': attribute type 13 has an invalid length. [ 816.537838][T25073] netlink: 'syz.6.5074': attribute type 17 has an invalid length. [ 816.656901][T25073] team0: left promiscuous mode [ 816.661921][T25073] team_slave_0: left promiscuous mode [ 816.683549][T25073] team_slave_1: left promiscuous mode [ 816.720055][T25073] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 816.780528][T25074] xfrm0: entered promiscuous mode [ 816.786319][T25074] xfrm0: entered allmulticast mode [ 816.948269][T25083] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5075'. [ 816.971813][T25083] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5075'. [ 817.007565][T25083] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5075'. [ 817.022068][T25083] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5075'. [ 817.038051][T25083] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5075'. [ 817.053193][T25083] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5075'. [ 817.066507][T25083] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5075'. [ 817.077812][T25083] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5075'. [ 817.099054][T25083] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 817.241088][T25098] wg1 speed is unknown, defaulting to 1000 [ 817.464944][T25109] ieee802154 phy0 wpan0: encryption failed: -90 [ 818.292494][T25118] syzkaller1: entered promiscuous mode [ 818.298688][T25118] syzkaller1: entered allmulticast mode [ 818.309918][T25118] veth1_to_bond: entered allmulticast mode [ 818.424978][T25115] veth1_to_bond: left allmulticast mode [ 818.520965][T25098] lo speed is unknown, defaulting to 1000 [ 818.905489][T25098] tipc: Enabling of bearer rejected, failed to enable media [ 819.871809][T25168] wg1 speed is unknown, defaulting to 1000 [ 819.927852][T16410] block nbd3: Receive control failed (result -107) [ 819.963865][T25164] nbd3: detected capacity change from 0 to 32 [ 820.113406][T25180] netlink: 'syz.5.5106': attribute type 10 has an invalid length. [ 820.136043][T25180] netlink: 'syz.5.5106': attribute type 10 has an invalid length. [ 820.163034][T25180] bond0: (slave ªªªªª9): Enslaving as an active interface with an up link [ 820.284143][T25168] lo speed is unknown, defaulting to 1000 [ 820.968073][T25209] veth7: entered promiscuous mode [ 821.009461][T25219] syz_tun: entered allmulticast mode [ 821.103830][T25219] pimreg: entered allmulticast mode [ 821.189094][T25224] __nla_validate_parse: 14 callbacks suppressed [ 821.189116][T25224] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5117'. [ 821.216065][T25224] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 821.568197][T25230] bridge0: port 3(syz_tun) entered blocking state [ 821.577567][T25230] bridge0: port 3(syz_tun) entered disabled state [ 821.622950][T25230] syz_tun: entered allmulticast mode [ 821.635291][T25230] syz_tun: entered promiscuous mode [ 821.641630][T25230] bridge0: port 3(syz_tun) entered blocking state [ 821.649776][T25230] bridge0: port 3(syz_tun) entered forwarding state [ 821.779327][T25215] syz_tun: left allmulticast mode [ 821.909686][T25240] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5121'. [ 821.919485][T25240] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5121'. [ 822.152474][T25258] IPv6: sit1: Disabled Multicast RS [ 822.212976][T25260] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5125'. [ 822.264429][T25260] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5125'. [ 822.343522][T25268] syzkaller1: entered promiscuous mode [ 822.349890][T25268] syzkaller1: entered allmulticast mode [ 822.393048][T25268] 8021q: adding VLAN 0 to HW filter on device bond4 [ 822.437623][T25268] 8021q: adding VLAN 0 to HW filter on device bond5 [ 822.613978][T25275] netlink: zone id is out of range [ 822.619733][T25275] netlink: zone id is out of range [ 822.628116][T25275] netlink: zone id is out of range [ 822.637651][T25275] netlink: zone id is out of range [ 822.644641][T25275] netlink: zone id is out of range [ 822.650000][T25275] netlink: zone id is out of range [ 822.655969][T25275] netlink: zone id is out of range [ 822.661256][T25275] netlink: zone id is out of range [ 822.669174][T25275] netlink: zone id is out of range [ 822.676279][T25275] netlink: zone id is out of range [ 822.933165][T25280] wg1 speed is unknown, defaulting to 1000 [ 822.969543][T25281] netlink: 'syz.3.5130': attribute type 1 has an invalid length. [ 822.993702][T25281] netlink: 'syz.3.5130': attribute type 4 has an invalid length. [ 823.001559][T25281] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.5130'. [ 823.020377][T25281] netlink: 'syz.3.5130': attribute type 1 has an invalid length. [ 823.042613][T25281] netlink: 'syz.3.5130': attribute type 4 has an invalid length. [ 823.079087][T25281] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.5130'. [ 823.151913][T25283] wg1 speed is unknown, defaulting to 1000 [ 823.169153][T25286] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5131'. [ 823.178402][T25286] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5131'. [ 823.231458][ T7689] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 823.231623][T25286] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5131'. [ 823.258254][ T7689] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 823.289360][ T7689] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 823.318831][ T7689] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 823.443700][T25280] lo speed is unknown, defaulting to 1000 [ 823.964984][ T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 823.983081][ T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 823.992999][ T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 824.001309][ T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 824.010756][ T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 824.144210][T25283] lo speed is unknown, defaulting to 1000 [ 824.169671][T25297] wg1 speed is unknown, defaulting to 1000 [ 824.438179][T25306] wg1 speed is unknown, defaulting to 1000 [ 825.218365][T25306] lo speed is unknown, defaulting to 1000 [ 825.248627][T25297] lo speed is unknown, defaulting to 1000 [ 825.821086][T25327] netlink: 'syz.7.5145': attribute type 4 has an invalid length. [ 825.910845][T25297] chnl_net:caif_netlink_parms(): no params data found [ 826.083108][ T51] Bluetooth: hci7: command tx timeout [ 826.131679][T25330] netlink: 'syz.5.5146': attribute type 1 has an invalid length. [ 826.244339][T25330] 8021q: adding VLAN 0 to HW filter on device bond6 [ 826.446679][T25342] bond6: (slave gretap1): making interface the new active one [ 826.505989][T25342] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 826.684388][T25339] wg1 speed is unknown, defaulting to 1000 [ 826.691195][T25297] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.710308][T25297] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.730282][T25297] bridge_slave_0: entered allmulticast mode [ 826.745811][T25297] bridge_slave_0: entered promiscuous mode [ 826.834823][T25297] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.852755][T25297] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.861425][T25297] bridge_slave_1: entered allmulticast mode [ 826.876531][T25297] bridge_slave_1: entered promiscuous mode [ 827.080384][T25367] wg1 speed is unknown, defaulting to 1000 [ 827.093201][T25297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 827.129621][T25297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 827.169286][T25378] __nla_validate_parse: 3 callbacks suppressed [ 827.169310][T25378] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5156'. [ 827.297326][T25381] netlink: 7 bytes leftover after parsing attributes in process `syz.7.5157'. [ 827.324333][T25339] lo speed is unknown, defaulting to 1000 [ 827.409835][T25297] team0: Port device team_slave_0 added [ 827.454466][T25297] team0: Port device team_slave_1 added [ 827.687278][T25297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 827.706741][T25297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 827.767588][T25297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 827.807179][T25297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 827.818747][T25297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 827.847052][T25297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 827.999034][T25367] lo speed is unknown, defaulting to 1000 [ 828.090379][T25297] hsr_slave_0: entered promiscuous mode [ 828.116502][T25297] hsr_slave_1: entered promiscuous mode [ 828.123504][T25297] debugfs: 'hsr0' already exists in 'hsr' [ 828.135794][T25297] Cannot create hsr debugfs directory [ 828.163015][ T51] Bluetooth: hci7: command tx timeout [ 828.774223][T25417] netlink: 'syz.6.5166': attribute type 12 has an invalid length. [ 829.042834][T25425] net_ratelimit: 6 callbacks suppressed [ 829.042856][T25425] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 829.103525][T25422] wg1 speed is unknown, defaulting to 1000 [ 829.137114][T25430] tipc: Enabled bearer , priority 0 [ 829.169428][T25430] tipc: Enabling of bearer rejected, already enabled [ 829.181199][T25430] tipc: Enabling of bearer rejected, already enabled [ 829.205990][T25432] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5170'. [ 829.259461][T25430] tipc: Disabling bearer [ 829.296684][T25297] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 829.355381][T25297] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 829.409880][T25422] lo speed is unknown, defaulting to 1000 [ 829.410683][T25297] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 829.450702][T25297] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 829.889791][T25455] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5179'. [ 829.921353][T25455] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5179'. [ 829.932053][T25455] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5179'. [ 829.944680][T25455] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5179'. [ 829.958810][T25470] netlink: 'syz.6.5181': attribute type 1 has an invalid length. [ 829.967419][T25470] netlink: 224 bytes leftover after parsing attributes in process `syz.6.5181'. [ 829.978932][T25455] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5179'. [ 829.988421][T25455] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5179'. [ 830.199137][T25297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 830.222654][T25480] netlink: 'syz.3.5185': attribute type 13 has an invalid length. [ 830.230789][T25480] netlink: 'syz.3.5185': attribute type 17 has an invalid length. [ 830.244088][ T51] Bluetooth: hci7: command tx timeout [ 830.317571][T20082] bond0: (slave bond_slave_0): interface is now down [ 830.327752][T25480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 830.342735][T20082] bond0: (slave 0!): interface is now down [ 830.363873][T20088] bond0: (slave bond_slave_0): interface is now down [ 830.370622][T20088] bond0: (slave 0!): interface is now down [ 830.373612][T25480] 8021q: adding VLAN 0 to HW filter on device team0 [ 830.412390][T20082] bond0: (slave bond_slave_0): interface is now down [ 830.419556][T20082] bond0: (slave 0!): interface is now down [ 830.457682][T20075] bond0: (slave bond_slave_0): interface is now down [ 830.464591][T20075] bond0: (slave 0!): interface is now down [ 830.483089][T25480] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 830.499492][ T7689] bond0: (slave bond_slave_0): interface is now down [ 830.513932][ T7689] bond0: (slave 0!): interface is now down [ 830.543935][T25478] syzkaller1: entered promiscuous mode [ 830.549477][T25478] syzkaller1: entered allmulticast mode [ 830.565029][ T7689] bond0: (slave bond_slave_0): interface is now down [ 830.581105][ T7689] bond0: (slave 0!): interface is now down [ 830.626341][T20075] bond0: (slave bond_slave_0): interface is now down [ 830.634584][T20075] bond0: (slave 0!): interface is now down [ 830.667642][ T7948] bond0: (slave bond_slave_0): interface is now down [ 830.677538][T25486] wg1 speed is unknown, defaulting to 1000 [ 830.679104][ T7948] bond0: (slave 0!): interface is now down [ 830.732462][ T7689] bond0: (slave bond_slave_0): interface is now down [ 830.739302][ T7689] bond0: (slave 0!): interface is now down [ 830.756928][T25297] 8021q: adding VLAN 0 to HW filter on device team0 [ 830.792544][T20075] bond0: (slave bond_slave_0): interface is now down [ 830.810637][T20075] bond0: (slave 0!): interface is now down [ 830.842299][T20075] bond0: (slave bond_slave_0): interface is now down [ 830.864399][T20075] bond0: (slave 0!): interface is now down [ 830.888096][ T7689] bridge0: port 1(bridge_slave_0) entered blocking state [ 830.895400][ T7689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 830.903985][ T7948] bond0: (slave bond_slave_0): interface is now down [ 830.910735][ T7948] bond0: (slave 0!): interface is now down [ 830.944606][ T7689] bridge0: port 2(bridge_slave_1) entered blocking state [ 830.951851][ T7689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 830.959860][T20075] bond0: (slave bond_slave_0): interface is now down [ 830.968356][T20075] bond0: (slave 0!): interface is now down [ 830.994721][ T7689] bond0: (slave bond_slave_0): interface is now down [ 831.001639][ T7689] bond0: (slave 0!): interface is now down [ 831.032617][ T7689] bond0: (slave bond_slave_0): interface is now down [ 831.049817][ T7689] bond0: (slave 0!): interface is now down [ 831.093552][T20088] bond0: (slave bond_slave_0): interface is now down [ 831.102908][T20088] bond0: (slave 0!): interface is now down [ 831.132471][ T7948] bond0: (slave bond_slave_0): interface is now down [ 831.139522][ T7948] bond0: (slave 0!): interface is now down [ 831.168879][T25486] lo speed is unknown, defaulting to 1000 [ 831.177737][T20089] bond0: (slave bond_slave_0): interface is now down [ 831.194430][T20089] bond0: (slave 0!): interface is now down [ 831.234146][T20089] bond0: (slave bond_slave_0): interface is now down [ 831.260782][T20089] bond0: (slave 0!): interface is now down [ 831.303007][T20089] bond0: (slave bond_slave_0): interface is now down [ 831.313560][T20089] bond0: (slave 0!): interface is now down [ 831.327335][T25505] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 831.337512][T20089] bond0: (slave bond_slave_0): interface is now down [ 831.347628][T20089] bond0: (slave 0!): interface is now down [ 831.392278][T20089] bond0: (slave bond_slave_0): interface is now down [ 831.419447][T20089] bond0: (slave 0!): interface is now down [ 831.460070][T20089] bond0: (slave bond_slave_0): interface is now down [ 831.480474][T20089] bond0: (slave 0!): interface is now down [ 831.505114][T25505] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 831.515342][T20089] bond0: (slave bond_slave_0): interface is now down [ 831.522079][T20089] bond0: (slave 0!): interface is now down [ 831.565669][T20089] bond0: (slave bond_slave_0): interface is now down [ 831.583937][T20089] bond0: (slave 0!): interface is now down [ 831.610568][T25505] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 831.622255][ T7689] bond0: (slave bond_slave_0): interface is now down [ 831.628990][ T7689] bond0: (slave 0!): interface is now down [ 831.662289][T20079] bond0: (slave bond_slave_0): interface is now down [ 831.671416][T25527] netlink: 'syz.7.5197': attribute type 1 has an invalid length. [ 831.679731][T20079] bond0: (slave 0!): interface is now down [ 831.699529][T25297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 831.723941][T20079] bond0: (slave bond_slave_0): interface is now down [ 831.747729][T20079] bond0: (slave 0!): interface is now down [ 831.754174][T25531] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 831.802444][T20088] bond0: (slave bond_slave_0): interface is now down [ 831.818276][T20088] bond0: (slave 0!): interface is now down [ 831.857071][T20079] bond0: (slave bond_slave_0): interface is now down [ 831.878547][T20079] bond0: (slave 0!): interface is now down [ 831.912436][T20082] bond0: (slave bond_slave_0): interface is now down [ 831.919425][T20082] bond0: (slave 0!): interface is now down [ 831.955466][T20079] bond0: (slave bond_slave_0): interface is now down [ 831.963672][T20079] bond0: (slave 0!): interface is now down [ 831.988204][T20082] bond0: (slave bond_slave_0): interface is now down [ 831.996188][T20082] bond0: (slave 0!): interface is now down [ 832.019794][T25505] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 832.033668][T20079] bond0: (slave bond_slave_0): interface is now down [ 832.040615][T20079] bond0: (slave 0!): interface is now down [ 832.064400][T20079] bond0: (slave bond_slave_0): interface is now down [ 832.071150][T20079] bond0: (slave 0!): interface is now down [ 832.096167][T20082] bond0: (slave bond_slave_0): interface is now down [ 832.105905][T20082] bond0: (slave 0!): interface is now down [ 832.123032][T20082] bond0: (slave bond_slave_0): interface is now down [ 832.130584][T20082] bond0: (slave 0!): interface is now down [ 832.153985][T20082] bond0: now running without any active interface! [ 832.226827][T20079] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 832.292064][T20079] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 832.324809][ T51] Bluetooth: hci7: command tx timeout [ 832.365410][ T7689] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 832.417312][T20089] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 832.707745][T25559] FAULT_INJECTION: forcing a failure. [ 832.707745][T25559] name failslab, interval 1, probability 0, space 0, times 0 [ 832.755998][T25559] CPU: 0 UID: 0 PID: 25559 Comm: syz.7.5205 Not tainted syzkaller #0 PREEMPT(full) [ 832.756033][T25559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 832.756048][T25559] Call Trace: [ 832.756058][T25559] [ 832.756069][T25559] dump_stack_lvl+0x189/0x250 [ 832.756104][T25559] ? __pfx____ratelimit+0x10/0x10 [ 832.756129][T25559] ? __pfx_dump_stack_lvl+0x10/0x10 [ 832.756157][T25559] ? __pfx__printk+0x10/0x10 [ 832.756193][T25559] ? __nla_validate_parse+0x2400/0x2d40 [ 832.756229][T25559] should_fail_ex+0x414/0x560 [ 832.756269][T25559] should_failslab+0xa8/0x100 [ 832.756305][T25559] kmem_cache_alloc_noprof+0x73/0x3c0 [ 832.756336][T25559] ? xfrm_state_alloc+0x24/0x2f0 [ 832.756371][T25559] xfrm_state_alloc+0x24/0x2f0 [ 832.756402][T25559] xfrm_add_sa+0x17d1/0x4070 [ 832.756436][T25559] ? __pfx_xfrm_add_sa+0x10/0x10 [ 832.756469][T25559] ? apparmor_capable+0x137/0x1b0 [ 832.756505][T25559] ? __nla_parse+0x40/0x60 [ 832.756535][T25559] xfrm_user_rcv_msg+0x7a3/0xab0 [ 832.756579][T25559] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 832.756659][T25559] ? __pfx___mutex_trylock_common+0x10/0x10 [ 832.756692][T25559] ? rcu_is_watching+0x15/0xb0 [ 832.756717][T25559] ? trace_contention_end+0x39/0x120 [ 832.756744][T25559] ? __mutex_lock+0x335/0x1350 [ 832.756777][T25559] netlink_rcv_skb+0x205/0x470 [ 832.756807][T25559] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 832.756845][T25559] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 832.756890][T25559] ? netlink_deliver_tap+0x2e/0x1b0 [ 832.756916][T25559] ? netlink_deliver_tap+0x2e/0x1b0 [ 832.756946][T25559] xfrm_netlink_rcv+0x79/0x90 [ 832.756990][T25559] netlink_unicast+0x82c/0x9e0 [ 832.757024][T25559] ? __pfx_netlink_unicast+0x10/0x10 [ 832.757051][T25559] ? netlink_sendmsg+0x642/0xb30 [ 832.757076][T25559] ? skb_put+0x11b/0x210 [ 832.757108][T25559] netlink_sendmsg+0x805/0xb30 [ 832.757146][T25559] ? __pfx_netlink_sendmsg+0x10/0x10 [ 832.757178][T25559] ? aa_sock_msg_perm+0xf1/0x1d0 [ 832.757203][T25559] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 832.757228][T25559] ? __pfx_netlink_sendmsg+0x10/0x10 [ 832.757256][T25559] __sock_sendmsg+0x21c/0x270 [ 832.757282][T25559] ____sys_sendmsg+0x505/0x830 [ 832.757318][T25559] ? __pfx_____sys_sendmsg+0x10/0x10 [ 832.757359][T25559] ? import_iovec+0x74/0xa0 [ 832.757394][T25559] ___sys_sendmsg+0x21f/0x2a0 [ 832.757428][T25559] ? __pfx____sys_sendmsg+0x10/0x10 [ 832.757501][T25559] ? __fget_files+0x2a/0x420 [ 832.757519][T25559] ? __fget_files+0x3a0/0x420 [ 832.757550][T25559] __x64_sys_sendmsg+0x19b/0x260 [ 832.757579][T25559] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 832.757618][T25559] ? __pfx_ksys_write+0x10/0x10 [ 832.757645][T25559] ? rcu_is_watching+0x15/0xb0 [ 832.757675][T25559] ? do_syscall_64+0xbe/0x3b0 [ 832.757704][T25559] do_syscall_64+0xfa/0x3b0 [ 832.757726][T25559] ? lockdep_hardirqs_on+0x9c/0x150 [ 832.757748][T25559] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.757770][T25559] ? clear_bhb_loop+0x60/0xb0 [ 832.757798][T25559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.757820][T25559] RIP: 0033:0x7f1f40f8eba9 [ 832.757841][T25559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 832.757861][T25559] RSP: 002b:00007f1f41dad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 832.757886][T25559] RAX: ffffffffffffffda RBX: 00007f1f411d5fa0 RCX: 00007f1f40f8eba9 [ 832.757903][T25559] RDX: 0000000000000804 RSI: 0000200000000100 RDI: 0000000000000003 [ 832.757918][T25559] RBP: 00007f1f41dad090 R08: 0000000000000000 R09: 0000000000000000 [ 832.757933][T25559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 832.757946][T25559] R13: 00007f1f411d6038 R14: 00007f1f411d5fa0 R15: 00007ffe55550fe8 [ 832.757992][T25559] [ 833.146819][T25567] ip6tnl1: entered promiscuous mode [ 833.205887][T25297] veth0_vlan: entered promiscuous mode [ 833.276132][T25297] veth1_vlan: entered promiscuous mode [ 833.320731][T25575] __nla_validate_parse: 20 callbacks suppressed [ 833.320754][T25575] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5210'. [ 833.390011][T25576] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5210'. [ 833.496087][T25297] veth0_macvtap: entered promiscuous mode [ 833.508000][T25297] veth1_macvtap: entered promiscuous mode [ 833.531559][T25297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 833.545117][T25297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 833.585672][T20082] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.598535][T20082] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.609032][T20082] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.618378][T20082] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.699302][T25600] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5216'. [ 833.699307][T25602] FAULT_INJECTION: forcing a failure. [ 833.699307][T25602] name failslab, interval 1, probability 0, space 0, times 0 [ 833.699341][T25602] CPU: 1 UID: 0 PID: 25602 Comm: syz.6.5218 Not tainted syzkaller #0 PREEMPT(full) [ 833.699364][T25602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 833.699378][T25602] Call Trace: [ 833.699387][T25602] [ 833.699397][T25602] dump_stack_lvl+0x189/0x250 [ 833.699435][T25602] ? __pfx____ratelimit+0x10/0x10 [ 833.699464][T25602] ? __pfx_dump_stack_lvl+0x10/0x10 [ 833.699497][T25602] ? __pfx__printk+0x10/0x10 [ 833.699535][T25602] ? __pfx___might_resched+0x10/0x10 [ 833.699563][T25602] should_fail_ex+0x414/0x560 [ 833.699609][T25602] should_failslab+0xa8/0x100 [ 833.699649][T25602] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 833.699686][T25602] ? xfrm_add_sa+0x1eb9/0x4070 [ 833.699716][T25602] kmemdup_noprof+0x2b/0x70 [ 833.699748][T25602] xfrm_add_sa+0x1eb9/0x4070 [ 833.699785][T25602] ? __pfx_xfrm_add_sa+0x10/0x10 [ 833.699821][T25602] ? apparmor_capable+0x137/0x1b0 [ 833.699860][T25602] ? __nla_parse+0x40/0x60 [ 833.699964][T25602] xfrm_user_rcv_msg+0x7a3/0xab0 [ 833.700012][T25602] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 833.700098][T25602] ? __pfx___mutex_trylock_common+0x10/0x10 [ 833.700131][T25602] ? rcu_is_watching+0x15/0xb0 [ 833.700155][T25602] ? trace_contention_end+0x39/0x120 [ 833.700184][T25602] ? __mutex_lock+0x335/0x1350 [ 833.700220][T25602] netlink_rcv_skb+0x205/0x470 [ 833.700253][T25602] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 833.700294][T25602] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 833.700345][T25602] ? netlink_deliver_tap+0x2e/0x1b0 [ 833.700374][T25602] ? netlink_deliver_tap+0x2e/0x1b0 [ 833.700408][T25602] xfrm_netlink_rcv+0x79/0x90 [ 833.700447][T25602] netlink_unicast+0x82c/0x9e0 [ 833.700485][T25602] ? __pfx_netlink_unicast+0x10/0x10 [ 833.700516][T25602] ? netlink_sendmsg+0x642/0xb30 [ 833.700543][T25602] ? skb_put+0x11b/0x210 [ 833.700580][T25602] netlink_sendmsg+0x805/0xb30 [ 833.700624][T25602] ? __pfx_netlink_sendmsg+0x10/0x10 [ 833.700658][T25602] ? aa_sock_msg_perm+0xf1/0x1d0 [ 833.700686][T25602] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 833.700714][T25602] ? __pfx_netlink_sendmsg+0x10/0x10 [ 833.700747][T25602] __sock_sendmsg+0x21c/0x270 [ 833.700776][T25602] ____sys_sendmsg+0x505/0x830 [ 833.700819][T25602] ? __pfx_____sys_sendmsg+0x10/0x10 [ 833.700866][T25602] ? import_iovec+0x74/0xa0 [ 833.700915][T25602] ___sys_sendmsg+0x21f/0x2a0 [ 833.700955][T25602] ? __pfx____sys_sendmsg+0x10/0x10 [ 833.701039][T25602] ? __fget_files+0x2a/0x420 [ 833.701061][T25602] ? __fget_files+0x3a0/0x420 [ 833.701096][T25602] __x64_sys_sendmsg+0x19b/0x260 [ 833.701133][T25602] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 833.701181][T25602] ? __pfx_ksys_write+0x10/0x10 [ 833.701212][T25602] ? rcu_is_watching+0x15/0xb0 [ 833.701245][T25602] ? do_syscall_64+0xbe/0x3b0 [ 833.701283][T25602] do_syscall_64+0xfa/0x3b0 [ 833.701308][T25602] ? lockdep_hardirqs_on+0x9c/0x150 [ 833.701331][T25602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.701357][T25602] ? clear_bhb_loop+0x60/0xb0 [ 833.701387][T25602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.701412][T25602] RIP: 0033:0x7fde0f18eba9 [ 833.701436][T25602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 833.701457][T25602] RSP: 002b:00007fde10104038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 833.701484][T25602] RAX: ffffffffffffffda RBX: 00007fde0f3d5fa0 RCX: 00007fde0f18eba9 [ 833.701503][T25602] RDX: 0000000000000804 RSI: 0000200000000100 RDI: 0000000000000003 [ 833.701520][T25602] RBP: 00007fde10104090 R08: 0000000000000000 R09: 0000000000000000 [ 833.701534][T25602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 833.701550][T25602] R13: 00007fde0f3d6038 R14: 00007fde0f3d5fa0 R15: 00007fffe2270b98 [ 833.701590][T25602] [ 834.057667][T25617] netlink: 'syz.3.5221': attribute type 1 has an invalid length. [ 834.068204][T25600] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5216'. [ 834.289126][T20082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 834.312434][T20082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 834.392112][T20089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 834.420604][T20089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 834.717437][T25643] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5227'. [ 834.879955][T25651] FAULT_INJECTION: forcing a failure. [ 834.879955][T25651] name failslab, interval 1, probability 0, space 0, times 0 [ 834.917891][T25651] CPU: 1 UID: 0 PID: 25651 Comm: syz.8.5229 Not tainted syzkaller #0 PREEMPT(full) [ 834.917925][T25651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 834.917940][T25651] Call Trace: [ 834.917949][T25651] [ 834.917959][T25651] dump_stack_lvl+0x189/0x250 [ 834.917993][T25651] ? __pfx____ratelimit+0x10/0x10 [ 834.918016][T25651] ? __pfx_dump_stack_lvl+0x10/0x10 [ 834.918045][T25651] ? __pfx__printk+0x10/0x10 [ 834.918083][T25651] ? __pfx___might_resched+0x10/0x10 [ 834.918111][T25651] should_fail_ex+0x414/0x560 [ 834.918153][T25651] should_failslab+0xa8/0x100 [ 834.918190][T25651] __kmalloc_node_noprof+0xd1/0x4e0 [ 834.918221][T25651] ? crypto_create_tfm_node+0x83/0x3f0 [ 834.918263][T25651] crypto_create_tfm_node+0x83/0x3f0 [ 834.918303][T25651] crypto_alloc_tfm_node+0x172/0x3f0 [ 834.918349][T25651] esp_init_state+0x36b/0x1140 [ 834.918381][T25651] ? __sock_sendmsg+0x21c/0x270 [ 834.918402][T25651] ? ____sys_sendmsg+0x505/0x830 [ 834.918429][T25651] ? ___sys_sendmsg+0x21f/0x2a0 [ 834.918459][T25651] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.918492][T25651] ? __pfx_esp_init_state+0x10/0x10 [ 834.918535][T25651] ? __lock_acquire+0xab9/0xd20 [ 834.918596][T25651] ? __xfrm_init_state+0x7ef/0x13f0 [ 834.918625][T25651] __xfrm_init_state+0xa73/0x13f0 [ 834.918647][T25651] ? __xfrm_init_state+0x7ef/0x13f0 [ 834.918672][T25651] xfrm_add_sa+0x2f5b/0x4070 [ 834.918704][T25651] ? __pfx_xfrm_add_sa+0x10/0x10 [ 834.918737][T25651] ? apparmor_capable+0x137/0x1b0 [ 834.918772][T25651] ? __nla_parse+0x40/0x60 [ 834.918803][T25651] xfrm_user_rcv_msg+0x7a3/0xab0 [ 834.918853][T25651] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 834.918932][T25651] ? __pfx___mutex_trylock_common+0x10/0x10 [ 834.918964][T25651] ? rcu_is_watching+0x15/0xb0 [ 834.918988][T25651] ? trace_contention_end+0x39/0x120 [ 834.919014][T25651] ? __mutex_lock+0x335/0x1350 [ 834.919047][T25651] netlink_rcv_skb+0x205/0x470 [ 834.919078][T25651] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 834.919116][T25651] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 834.919162][T25651] ? netlink_deliver_tap+0x2e/0x1b0 [ 834.919188][T25651] ? netlink_deliver_tap+0x2e/0x1b0 [ 834.919217][T25651] xfrm_netlink_rcv+0x79/0x90 [ 834.919253][T25651] netlink_unicast+0x82c/0x9e0 [ 834.919289][T25651] ? __pfx_netlink_unicast+0x10/0x10 [ 834.919316][T25651] ? netlink_sendmsg+0x642/0xb30 [ 834.919340][T25651] ? skb_put+0x11b/0x210 [ 834.919373][T25651] netlink_sendmsg+0x805/0xb30 [ 834.919412][T25651] ? __pfx_netlink_sendmsg+0x10/0x10 [ 834.919443][T25651] ? aa_sock_msg_perm+0xf1/0x1d0 [ 834.919467][T25651] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 834.919490][T25651] ? __pfx_netlink_sendmsg+0x10/0x10 [ 834.919517][T25651] __sock_sendmsg+0x21c/0x270 [ 834.919542][T25651] ____sys_sendmsg+0x505/0x830 [ 834.919577][T25651] ? __pfx_____sys_sendmsg+0x10/0x10 [ 834.919617][T25651] ? import_iovec+0x74/0xa0 [ 834.919650][T25651] ___sys_sendmsg+0x21f/0x2a0 [ 834.919682][T25651] ? __pfx____sys_sendmsg+0x10/0x10 [ 834.919758][T25651] ? __fget_files+0x2a/0x420 [ 834.919777][T25651] ? __fget_files+0x3a0/0x420 [ 834.919810][T25651] __x64_sys_sendmsg+0x19b/0x260 [ 834.919852][T25651] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 834.919895][T25651] ? __pfx_ksys_write+0x10/0x10 [ 834.919922][T25651] ? rcu_is_watching+0x15/0xb0 [ 834.919952][T25651] ? do_syscall_64+0xbe/0x3b0 [ 834.919981][T25651] do_syscall_64+0xfa/0x3b0 [ 834.920003][T25651] ? lockdep_hardirqs_on+0x9c/0x150 [ 834.920025][T25651] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.920046][T25651] ? clear_bhb_loop+0x60/0xb0 [ 834.920074][T25651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.920096][T25651] RIP: 0033:0x7fc0ed78eba9 [ 834.920118][T25651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 834.920138][T25651] RSP: 002b:00007fc0ee654038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 834.920162][T25651] RAX: ffffffffffffffda RBX: 00007fc0ed9d5fa0 RCX: 00007fc0ed78eba9 [ 834.920179][T25651] RDX: 0000000000000804 RSI: 0000200000000100 RDI: 0000000000000003 [ 834.920194][T25651] RBP: 00007fc0ee654090 R08: 0000000000000000 R09: 0000000000000000 [ 834.920209][T25651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 834.920223][T25651] R13: 00007fc0ed9d6038 R14: 00007fc0ed9d5fa0 R15: 00007ffe4bf9d788 [ 834.920259][T25651] [ 835.451792][T25660] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5231'. [ 835.570611][T25655] wg1 speed is unknown, defaulting to 1000 [ 836.075763][T25655] lo speed is unknown, defaulting to 1000 [ 836.216240][T25677] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5237'. [ 836.459047][T25679] wg1 speed is unknown, defaulting to 1000 [ 836.814886][T25697] FAULT_INJECTION: forcing a failure. [ 836.814886][T25697] name failslab, interval 1, probability 0, space 0, times 0 [ 836.853437][T25697] CPU: 1 UID: 0 PID: 25697 Comm: syz.8.5242 Not tainted syzkaller #0 PREEMPT(full) [ 836.853471][T25697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 836.853486][T25697] Call Trace: [ 836.853496][T25697] [ 836.853507][T25697] dump_stack_lvl+0x189/0x250 [ 836.853542][T25697] ? __pfx____ratelimit+0x10/0x10 [ 836.853564][T25697] ? __pfx_dump_stack_lvl+0x10/0x10 [ 836.853593][T25697] ? __pfx__printk+0x10/0x10 [ 836.853628][T25697] ? __pfx___might_resched+0x10/0x10 [ 836.853650][T25697] ? fs_reclaim_acquire+0x7d/0x100 [ 836.853692][T25697] should_fail_ex+0x414/0x560 [ 836.853733][T25697] should_failslab+0xa8/0x100 [ 836.853768][T25697] __kmalloc_node_noprof+0xd1/0x4e0 [ 836.853799][T25697] ? __pfx___up_read+0x10/0x10 [ 836.853822][T25697] ? crypto_create_tfm_node+0x83/0x3f0 [ 836.853863][T25697] crypto_create_tfm_node+0x83/0x3f0 [ 836.853910][T25697] crypto_spawn_tfm2+0x5c/0x90 [ 836.853938][T25697] aead_init_geniv+0x169/0x240 [ 836.853976][T25697] crypto_create_tfm_node+0x18c/0x3f0 [ 836.854017][T25697] crypto_alloc_tfm_node+0x172/0x3f0 [ 836.854062][T25697] esp_init_state+0x36b/0x1140 [ 836.854094][T25697] ? __sock_sendmsg+0x21c/0x270 [ 836.854114][T25697] ? ____sys_sendmsg+0x505/0x830 [ 836.854142][T25697] ? ___sys_sendmsg+0x21f/0x2a0 [ 836.854171][T25697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.854204][T25697] ? __pfx_esp_init_state+0x10/0x10 [ 836.854246][T25697] ? __lock_acquire+0xab9/0xd20 [ 836.854307][T25697] ? __xfrm_init_state+0x7ef/0x13f0 [ 836.854336][T25697] __xfrm_init_state+0xa73/0x13f0 [ 836.854357][T25697] ? __xfrm_init_state+0x7ef/0x13f0 [ 836.854384][T25697] xfrm_add_sa+0x2f5b/0x4070 [ 836.854417][T25697] ? __pfx_xfrm_add_sa+0x10/0x10 [ 836.854449][T25697] ? apparmor_capable+0x137/0x1b0 [ 836.854484][T25697] ? __nla_parse+0x40/0x60 [ 836.854513][T25697] xfrm_user_rcv_msg+0x7a3/0xab0 [ 836.854556][T25697] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 836.854634][T25697] ? __pfx___mutex_trylock_common+0x10/0x10 [ 836.854667][T25697] ? rcu_is_watching+0x15/0xb0 [ 836.854690][T25697] ? trace_contention_end+0x39/0x120 [ 836.854716][T25697] ? __mutex_lock+0x335/0x1350 [ 836.854748][T25697] netlink_rcv_skb+0x205/0x470 [ 836.854778][T25697] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 836.854815][T25697] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 836.854861][T25697] ? netlink_deliver_tap+0x2e/0x1b0 [ 836.854887][T25697] ? netlink_deliver_tap+0x2e/0x1b0 [ 836.854924][T25697] xfrm_netlink_rcv+0x79/0x90 [ 836.854959][T25697] netlink_unicast+0x82c/0x9e0 [ 836.854993][T25697] ? __pfx_netlink_unicast+0x10/0x10 [ 836.855020][T25697] ? netlink_sendmsg+0x642/0xb30 [ 836.855045][T25697] ? skb_put+0x11b/0x210 [ 836.855078][T25697] netlink_sendmsg+0x805/0xb30 [ 836.855117][T25697] ? __pfx_netlink_sendmsg+0x10/0x10 [ 836.855149][T25697] ? aa_sock_msg_perm+0xf1/0x1d0 [ 836.855174][T25697] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 836.855200][T25697] ? __pfx_netlink_sendmsg+0x10/0x10 [ 836.855229][T25697] __sock_sendmsg+0x21c/0x270 [ 836.855256][T25697] ____sys_sendmsg+0x505/0x830 [ 836.855294][T25697] ? __pfx_____sys_sendmsg+0x10/0x10 [ 836.855337][T25697] ? import_iovec+0x74/0xa0 [ 836.855372][T25697] ___sys_sendmsg+0x21f/0x2a0 [ 836.855406][T25697] ? __pfx____sys_sendmsg+0x10/0x10 [ 836.855482][T25697] ? __fget_files+0x2a/0x420 [ 836.855501][T25697] ? __fget_files+0x3a0/0x420 [ 836.855535][T25697] __x64_sys_sendmsg+0x19b/0x260 [ 836.855569][T25697] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 836.855612][T25697] ? __pfx_ksys_write+0x10/0x10 [ 836.855640][T25697] ? rcu_is_watching+0x15/0xb0 [ 836.855669][T25697] ? do_syscall_64+0xbe/0x3b0 [ 836.855698][T25697] do_syscall_64+0xfa/0x3b0 [ 836.855721][T25697] ? lockdep_hardirqs_on+0x9c/0x150 [ 836.855742][T25697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.855764][T25697] ? clear_bhb_loop+0x60/0xb0 [ 836.855793][T25697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.855814][T25697] RIP: 0033:0x7fc0ed78eba9 [ 836.855835][T25697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 836.855854][T25697] RSP: 002b:00007fc0ee654038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 836.855878][T25697] RAX: ffffffffffffffda RBX: 00007fc0ed9d5fa0 RCX: 00007fc0ed78eba9 [ 836.855904][T25697] RDX: 0000000000000804 RSI: 0000200000000100 RDI: 0000000000000003 [ 836.855918][T25697] RBP: 00007fc0ee654090 R08: 0000000000000000 R09: 0000000000000000 [ 836.855932][T25697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 836.855946][T25697] R13: 00007fc0ed9d6038 R14: 00007fc0ed9d5fa0 R15: 00007ffe4bf9d788 [ 836.855984][T25697] [ 836.906891][T25679] lo speed is unknown, defaulting to 1000 [ 838.040211][T25710] wg1 speed is unknown, defaulting to 1000 [ 838.151658][T25716] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5250'. [ 838.561351][T25730] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5253'. [ 838.582996][T25730] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5253'. [ 838.602443][T25730] netlink: 'syz.5.5253': attribute type 20 has an invalid length. [ 838.630018][T25710] lo speed is unknown, defaulting to 1000 [ 838.674653][T25730] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5253'. [ 839.118985][T25745] netlink: 224 bytes leftover after parsing attributes in process `syz.6.5259'. [ 839.240491][T25751] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5261'. [ 839.424325][T25761] sctp: [Deprecated]: syz.8.5264 (pid 25761) Use of int in max_burst socket option deprecated. [ 839.424325][T25761] Use struct sctp_assoc_value instead [ 839.654225][T25771] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5268'. [ 839.790749][T25782] netlink: 'syz.3.5273': attribute type 10 has an invalid length. [ 839.834709][T25782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 839.851948][T25779] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5272'. [ 839.885884][T25782] team0: Port device bond0 added [ 840.146758][T25801] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5280'. [ 840.161797][T25804] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5281'. [ 840.190402][T25804] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5281'. [ 840.372668][T25811] digital: digital_start_poll: Unknown protocol [ 840.553596][T25824] FAULT_INJECTION: forcing a failure. [ 840.553596][T25824] name failslab, interval 1, probability 0, space 0, times 0 [ 840.556060][T25823] netlink: 'syz.8.5288': attribute type 1 has an invalid length. [ 840.583969][T25824] CPU: 1 UID: 0 PID: 25824 Comm: syz.6.5287 Not tainted syzkaller #0 PREEMPT(full) [ 840.584003][T25824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 840.584018][T25824] Call Trace: [ 840.584027][T25824] [ 840.584038][T25824] dump_stack_lvl+0x189/0x250 [ 840.584072][T25824] ? __pfx____ratelimit+0x10/0x10 [ 840.584096][T25824] ? __pfx_dump_stack_lvl+0x10/0x10 [ 840.584124][T25824] ? __pfx__printk+0x10/0x10 [ 840.584163][T25824] ? __pfx___might_resched+0x10/0x10 [ 840.584183][T25824] ? fs_reclaim_acquire+0x7d/0x100 [ 840.584225][T25824] should_fail_ex+0x414/0x560 [ 840.584267][T25824] should_failslab+0xa8/0x100 [ 840.584303][T25824] __kmalloc_node_noprof+0xd1/0x4e0 [ 840.584334][T25824] ? crypto_create_tfm_node+0x83/0x3f0 [ 840.584376][T25824] crypto_create_tfm_node+0x83/0x3f0 [ 840.584417][T25824] crypto_ahash_init_tfm+0x162/0x770 [ 840.584448][T25824] ? __kmalloc_node_noprof+0x293/0x4e0 [ 840.584488][T25824] crypto_create_tfm_node+0x18c/0x3f0 [ 840.584539][T25824] crypto_spawn_tfm2+0x5c/0x90 [ 840.584567][T25824] crypto_ccm_init_tfm+0x4a/0x1f0 [ 840.584604][T25824] crypto_create_tfm_node+0x18c/0x3f0 [ 840.584645][T25824] crypto_spawn_tfm2+0x5c/0x90 [ 840.584677][T25824] crypto_rfc4309_init_tfm+0x45/0x150 [ 840.584714][T25824] crypto_create_tfm_node+0x18c/0x3f0 [ 840.584755][T25824] crypto_spawn_tfm2+0x5c/0x90 [ 840.584782][T25824] aead_init_geniv+0x169/0x240 [ 840.584820][T25824] crypto_create_tfm_node+0x18c/0x3f0 [ 840.584861][T25824] crypto_alloc_tfm_node+0x172/0x3f0 [ 840.584907][T25824] esp_init_state+0x36b/0x1140 [ 840.584939][T25824] ? __sock_sendmsg+0x21c/0x270 [ 840.584958][T25824] ? ____sys_sendmsg+0x505/0x830 [ 840.584986][T25824] ? ___sys_sendmsg+0x21f/0x2a0 [ 840.585015][T25824] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.585049][T25824] ? __pfx_esp_init_state+0x10/0x10 [ 840.585092][T25824] ? __lock_acquire+0xab9/0xd20 [ 840.585154][T25824] ? __xfrm_init_state+0x7ef/0x13f0 [ 840.585183][T25824] __xfrm_init_state+0xa73/0x13f0 [ 840.585204][T25824] ? __xfrm_init_state+0x7ef/0x13f0 [ 840.585231][T25824] xfrm_add_sa+0x2f5b/0x4070 [ 840.585265][T25824] ? __pfx_xfrm_add_sa+0x10/0x10 [ 840.585297][T25824] ? apparmor_capable+0x137/0x1b0 [ 840.585332][T25824] ? __nla_parse+0x40/0x60 [ 840.585363][T25824] xfrm_user_rcv_msg+0x7a3/0xab0 [ 840.585406][T25824] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 840.585483][T25824] ? __pfx___mutex_trylock_common+0x10/0x10 [ 840.585515][T25824] ? rcu_is_watching+0x15/0xb0 [ 840.585547][T25824] ? trace_contention_end+0x39/0x120 [ 840.585572][T25824] ? __mutex_lock+0x335/0x1350 [ 840.585605][T25824] netlink_rcv_skb+0x205/0x470 [ 840.585635][T25824] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 840.585673][T25824] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 840.585719][T25824] ? netlink_deliver_tap+0x2e/0x1b0 [ 840.585745][T25824] ? netlink_deliver_tap+0x2e/0x1b0 [ 840.585775][T25824] xfrm_netlink_rcv+0x79/0x90 [ 840.585811][T25824] netlink_unicast+0x82c/0x9e0 [ 840.585847][T25824] ? __pfx_netlink_unicast+0x10/0x10 [ 840.585874][T25824] ? netlink_sendmsg+0x642/0xb30 [ 840.585898][T25824] ? skb_put+0x11b/0x210 [ 840.585931][T25824] netlink_sendmsg+0x805/0xb30 [ 840.585971][T25824] ? __pfx_netlink_sendmsg+0x10/0x10 [ 840.586004][T25824] ? aa_sock_msg_perm+0xf1/0x1d0 [ 840.586029][T25824] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 840.586054][T25824] ? __pfx_netlink_sendmsg+0x10/0x10 [ 840.586084][T25824] __sock_sendmsg+0x21c/0x270 [ 840.586110][T25824] ____sys_sendmsg+0x505/0x830 [ 840.586166][T25824] ? __pfx_____sys_sendmsg+0x10/0x10 [ 840.586209][T25824] ? import_iovec+0x74/0xa0 [ 840.586244][T25824] ___sys_sendmsg+0x21f/0x2a0 [ 840.586279][T25824] ? __pfx____sys_sendmsg+0x10/0x10 [ 840.586355][T25824] ? __fget_files+0x2a/0x420 [ 840.586376][T25824] ? __fget_files+0x3a0/0x420 [ 840.586409][T25824] __x64_sys_sendmsg+0x19b/0x260 [ 840.586444][T25824] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 840.586487][T25824] ? __pfx_ksys_write+0x10/0x10 [ 840.586516][T25824] ? rcu_is_watching+0x15/0xb0 [ 840.586554][T25824] ? do_syscall_64+0xbe/0x3b0 [ 840.586584][T25824] do_syscall_64+0xfa/0x3b0 [ 840.586606][T25824] ? lockdep_hardirqs_on+0x9c/0x150 [ 840.586628][T25824] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.586650][T25824] ? clear_bhb_loop+0x60/0xb0 [ 840.586678][T25824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.586699][T25824] RIP: 0033:0x7fde0f18eba9 [ 840.586718][T25824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 840.586737][T25824] RSP: 002b:00007fde10104038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 840.586761][T25824] RAX: ffffffffffffffda RBX: 00007fde0f3d5fa0 RCX: 00007fde0f18eba9 [ 840.586777][T25824] RDX: 0000000000000804 RSI: 0000200000000100 RDI: 0000000000000003 [ 840.586791][T25824] RBP: 00007fde10104090 R08: 0000000000000000 R09: 0000000000000000 [ 840.586804][T25824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 840.586817][T25824] R13: 00007fde0f3d6038 R14: 00007fde0f3d5fa0 R15: 00007fffe2270b98 [ 840.586855][T25824] [ 841.116989][T25825] gretap1: entered allmulticast mode [ 841.289928][T25823] tipc: Started in network mode [ 841.296688][T25823] tipc: Node identity f267a02a2108, cluster identity 4711 [ 841.325610][T25823] tipc: Enabled bearer , priority 0 [ 841.349848][T25825] syzkaller0: entered promiscuous mode [ 841.371578][T25825] syzkaller0: entered allmulticast mode [ 841.478721][T25821] tipc: Resetting bearer [ 841.545655][T25821] tipc: Disabling bearer [ 841.912519][ T7948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 841.927950][ T7948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 842.456319][T25888] veth0_to_bond: entered promiscuous mode [ 842.677584][T25900] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 842.740100][T25899] netlink: 'syz.6.5309': attribute type 4 has an invalid length. [ 843.425965][T25946] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 843.462790][T25935] wg1 speed is unknown, defaulting to 1000 [ 843.478085][ T30] audit: type=1804 audit(1758197311.092:15): pid=25949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.5322" name="/newroot/163/cgroup.controllers" dev="tmpfs" ino=846 res=1 errno=0 [ 843.536319][ T30] audit: type=1800 audit(1758197311.122:16): pid=25949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5322" name="cgroup.controllers" dev="tmpfs" ino=846 res=0 errno=0 [ 843.553109][T25951] vlan4: entered promiscuous mode [ 843.563947][T25951] bond0: entered promiscuous mode [ 843.569163][T25951] bond_slave_0: entered promiscuous mode [ 843.577680][T25951] bond_slave_1: entered promiscuous mode [ 843.584076][T25951] vlan4: entered allmulticast mode [ 843.589807][T25951] bond0: entered allmulticast mode [ 843.596060][T25951] bond_slave_0: entered allmulticast mode [ 843.606839][T25951] bond_slave_1: entered allmulticast mode [ 843.626006][T25949] wg1 speed is unknown, defaulting to 1000 [ 844.140207][T25935] lo speed is unknown, defaulting to 1000 [ 844.147773][T25975] __nla_validate_parse: 8 callbacks suppressed [ 844.147796][T25975] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5331'. [ 844.175965][T25976] tipc: Enabled bearer , priority 0 [ 844.267503][T25976] syzkaller0: entered promiscuous mode [ 844.275370][T25976] syzkaller0: entered allmulticast mode [ 844.385369][T25980] tipc: Resetting bearer [ 844.422904][T25973] tipc: Resetting bearer [ 844.467648][T25973] tipc: Disabling bearer [ 844.629414][T25949] lo speed is unknown, defaulting to 1000 [ 844.950043][T26001] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5338'. [ 844.966109][T26004] wg1 speed is unknown, defaulting to 1000 [ 844.985601][T26001] vlan5: entered promiscuous mode [ 844.991510][T26001] erspan0: entered promiscuous mode [ 845.305771][T26026] bond6: entered promiscuous mode [ 845.311984][T26026] 8021q: adding VLAN 0 to HW filter on device bond6 [ 845.533123][T26004] lo speed is unknown, defaulting to 1000 [ 846.059416][T26054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5353'. [ 846.107675][T26054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5353'. [ 846.149411][T26058] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5354'. [ 846.160475][T26054] netlink: 'syz.3.5353': attribute type 11 has an invalid length. [ 846.165957][T26058] netlink: 'syz.8.5354': attribute type 4 has an invalid length. [ 846.180928][T26054] netlink: 'syz.3.5353': attribute type 11 has an invalid length. [ 846.469929][T26070] batadv_slave_1: entered promiscuous mode [ 846.480252][T26070] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5360'. [ 846.567638][T26069] batadv_slave_1: left promiscuous mode [ 846.584108][T26075] syzkaller1: entered promiscuous mode [ 846.589794][T26075] syzkaller1: entered allmulticast mode [ 846.634460][T26078] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5364'. [ 846.858102][T26083] netlink: 104 bytes leftover after parsing attributes in process `syz.7.5366'. [ 846.895629][T26088] vlan1: entered promiscuous mode [ 846.900757][T26088] macvtap0: entered promiscuous mode [ 847.071047][T26083] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5366'. [ 847.221736][T26111] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 848.179511][T26133] : entered promiscuous mode [ 848.276649][T26111] wg1 speed is unknown, defaulting to 1000 [ 848.312844][T26139] netlink: 68 bytes leftover after parsing attributes in process `syz.8.5379'. [ 848.688490][T26153] ip6tnl1: entered promiscuous mode [ 848.693954][T26153] ip6tnl1: entered allmulticast mode [ 849.160151][T26183] policy can only be matched on NF_INET_PRE_ROUTING [ 849.160175][T26183] unable to load match [ 849.504902][T26111] lo speed is unknown, defaulting to 1000 [ 849.517928][T26201] __nla_validate_parse: 3 callbacks suppressed [ 849.517951][T26201] netlink: 68 bytes leftover after parsing attributes in process `syz.8.5393'. [ 849.563920][T26201] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5393'. [ 849.587425][T26201] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5393'. [ 850.085679][T26218] wg1 speed is unknown, defaulting to 1000 [ 850.134648][T26225] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5397'. [ 850.159271][T26225] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 850.357579][T26230] netlink: 100 bytes leftover after parsing attributes in process `syz.8.5400'. [ 850.455995][T26218] lo speed is unknown, defaulting to 1000 [ 850.999998][T26239] openvswitch: netlink: IPv4 tun info is not correct [ 851.010542][T26239] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5403'. [ 851.028693][T26239] batadv1: entered promiscuous mode [ 851.035156][T26239] batadv1: entered allmulticast mode [ 851.626915][T26252] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 851.647261][T26252] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 851.875841][T26262] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5412'. [ 851.895716][T26262] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5412'. [ 851.918433][T26264] netlink: 'syz.3.5413': attribute type 2 has an invalid length. [ 851.951216][T26264] : entered promiscuous mode [ 852.020817][T26262] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5412'. [ 852.075665][T26262] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5412'. [ 852.145060][T26268] nbd: must specify a size in bytes for the device [ 852.302727][T26280] sctp: [Deprecated]: syz.5.5415 (pid 26280) Use of struct sctp_assoc_value in delayed_ack socket option. [ 852.302727][T26280] Use struct sctp_sack_info instead [ 852.608973][T26295] wg1 speed is unknown, defaulting to 1000 [ 853.019109][T26295] lo speed is unknown, defaulting to 1000 [ 853.792086][T26345] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 853.801825][T26345] dvmrp1: linktype set to 773 [ 853.841902][T26348] RDS: rds_bind could not find a transport for ::ffff:172.30.1.6, load rds_tcp or rds_rdma? [ 854.057680][T26348] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 854.071823][T26348] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 854.090031][T26348] bond0 (unregistering): (slave ªªªªª9): Releasing backup interface [ 854.104868][T26348] bond0 (unregistering): Released all slaves [ 854.300359][T26359] tipc: Enabled bearer , priority 0 [ 854.332123][T26359] syzkaller0: entered promiscuous mode [ 854.337925][T26359] syzkaller0: entered allmulticast mode [ 854.387022][T26359] tipc: Resetting bearer [ 854.435261][T26359] tipc: Disabling bearer [ 854.561503][T26376] netlink: 'syz.5.5441': attribute type 21 has an invalid length. [ 854.574339][T26376] netlink: 'syz.5.5441': attribute type 1 has an invalid length. [ 854.582132][T26376] __nla_validate_parse: 8 callbacks suppressed [ 854.588501][T26376] netlink: 144 bytes leftover after parsing attributes in process `syz.5.5441'. [ 854.598545][T26378] netlink: 'syz.6.5440': attribute type 5 has an invalid length. [ 854.608806][T26373] wg1 speed is unknown, defaulting to 1000 [ 854.620986][ T1209] IPVS: starting estimator thread 0... [ 854.667663][T26378] IPVS: set_ctl: invalid protocol: 4 172.30.0.7:20002 [ 854.713703][T26379] IPVS: using max 27 ests per chain, 64800 per kthread [ 854.896969][T26373] lo speed is unknown, defaulting to 1000 [ 855.009315][T26393] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5445'. [ 855.047790][T26393] netlink: 'syz.3.5445': attribute type 2 has an invalid length. [ 855.070873][T26393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5445'. [ 855.119386][T26397] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5447'. [ 855.131888][T26393] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5445'. [ 855.157922][T26397] macsec1: entered promiscuous mode [ 855.163541][T26397] mac80211_hwsim hwsim53 wlan1: entered promiscuous mode [ 855.175948][T26397] mac80211_hwsim hwsim53 wlan1: left promiscuous mode [ 855.243807][T20075] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 855.690220][T26414] netlink: 'syz.8.5453': attribute type 1 has an invalid length. [ 855.735711][T26414] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5453'. [ 855.745648][T26413] netlink: 'syz.8.5453': attribute type 1 has an invalid length. [ 855.764082][T26413] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5453'. [ 856.128634][T26434] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5460'. [ 856.155208][T26436] syzkaller0: entered promiscuous mode [ 856.160753][T26436] syzkaller0: entered allmulticast mode [ 856.529218][T26450] netlink: 52 bytes leftover after parsing attributes in process `syz.8.5465'. [ 856.619221][T26452] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5466'. [ 856.667883][T26452] syz_tun: left allmulticast mode [ 856.674303][T26452] syz_tun: left promiscuous mode [ 856.679539][T26452] bridge0: port 3(syz_tun) entered disabled state [ 856.690606][T26452] bridge_slave_1: left allmulticast mode [ 856.697007][T26452] bridge_slave_1: left promiscuous mode [ 856.703028][T26452] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.715359][T26452] bridge_slave_0: left allmulticast mode [ 856.721067][T26452] bridge_slave_0: left promiscuous mode [ 856.735468][T26452] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.825376][T26464] netlink: 'syz.3.5468': attribute type 1 has an invalid length. [ 856.947205][T26464] bond7: (slave bridge4): Enslaving as a backup interface with an up link [ 856.962961][T26463] bond7: entered promiscuous mode [ 856.968223][T26463] bridge4: entered promiscuous mode [ 856.976204][T26463] bond7: entered allmulticast mode [ 856.981512][T26463] bridge4: entered allmulticast mode [ 856.988021][T26463] 8021q: adding VLAN 0 to HW filter on device bond7 [ 857.023691][T20075] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 857.039197][ T30] audit: type=1800 audit(1758197324.642:17): pid=26468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.5469" name="memory.events" dev="tmpfs" ino=373 res=0 errno=0 [ 857.068570][T16410] Bluetooth: hci3: command 0x0406 tx timeout [ 857.129007][ T30] audit: type=1804 audit(1758197324.642:18): pid=26468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.5469" name="/newroot/71/memory.events" dev="tmpfs" ino=373 res=1 errno=0 [ 857.242859][T20075] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 857.485114][T26488] netlink: 'syz.3.5473': attribute type 1 has an invalid length. [ 857.571509][T26491] siw: device registration error -23 [ 857.593604][T26493] netlink: 'syz.6.5475': attribute type 6 has an invalid length. [ 857.750496][T26501] netlink: 'syz.8.5477': attribute type 29 has an invalid length. [ 857.856542][T26507] netlink: 'syz.3.5479': attribute type 3 has an invalid length. [ 858.794807][T26527] IPVS: set_ctl: invalid protocol: 113 224.0.0.1:20000 [ 858.863086][T26533] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma? [ 859.243869][T26557] tipc: Enabled bearer , priority 0 [ 859.261612][T26557] syzkaller0: entered promiscuous mode [ 859.268298][T26557] syzkaller0: entered allmulticast mode [ 859.311123][T26556] wg1 speed is unknown, defaulting to 1000 [ 859.468387][T26557] tipc: Resetting bearer [ 859.502086][T26555] tipc: Resetting bearer [ 859.540913][T26555] tipc: Disabling bearer [ 859.794060][T26556] lo speed is unknown, defaulting to 1000 [ 859.862483][T26584] netlink: 'syz.5.5500': attribute type 1 has an invalid length. [ 860.050130][T26591] IPVS: set_ctl: invalid protocol: 44 100.1.1.0:20004 [ 860.097717][T26591] __nla_validate_parse: 10 callbacks suppressed [ 860.097741][T26591] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5501'. [ 860.513846][T26600] tipc: Enabled bearer , priority 0 [ 860.533756][T26600] syzkaller0: entered promiscuous mode [ 860.539313][T26600] syzkaller0: entered allmulticast mode [ 860.630514][T26600] tipc: Resetting bearer [ 860.675824][T26599] tipc: Resetting bearer [ 860.706071][T26608] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5507'. [ 860.717695][T26599] tipc: Disabling bearer [ 860.999917][T26614] netlink: 45 bytes leftover after parsing attributes in process `syz.8.5510'. [ 861.501507][T26636] wg1 speed is unknown, defaulting to 1000 [ 861.740376][T26636] lo speed is unknown, defaulting to 1000 [ 861.996658][T26659] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5519'. [ 862.081261][T26656] netlink: 'syz.8.5518': attribute type 12 has an invalid length. [ 862.461054][T26674] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5525'. [ 862.606765][T26681] geneve3: entered promiscuous mode [ 862.614941][T20088] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.644407][T20088] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.667604][T20088] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.682408][T20088] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.187801][T26745] netlink: 92 bytes leftover after parsing attributes in process `syz.8.5546'. [ 864.503155][T26770] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 864.558160][T26776] netlink: 'syz.5.5554': attribute type 27 has an invalid length. [ 864.587050][T26770] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5553'. [ 864.587639][T26771] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5553'. [ 865.013025][T26800] netlink: 112 bytes leftover after parsing attributes in process `syz.6.5564'. [ 865.022574][T26802] netlink: 'syz.5.5567': attribute type 2 has an invalid length. [ 865.030855][T26802] netlink: 'syz.5.5567': attribute type 1 has an invalid length. [ 865.039498][T26802] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5567'. [ 865.112037][T26806] sysfs: cannot create duplicate filename '/class/ieee80211/!å' [ 865.119992][T26806] CPU: 1 UID: 0 PID: 26806 Comm: syz.5.5568 Not tainted syzkaller #0 PREEMPT(full) [ 865.120024][T26806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 865.120035][T26806] Call Trace: [ 865.120042][T26806] [ 865.120050][T26806] dump_stack_lvl+0x189/0x250 [ 865.120078][T26806] ? __pfx_dump_stack_lvl+0x10/0x10 [ 865.120098][T26806] ? __pfx__printk+0x10/0x10 [ 865.120125][T26806] ? kernfs_path_from_node+0x2f/0x290 [ 865.120143][T26806] ? kernfs_path_from_node+0x250/0x290 [ 865.120159][T26806] ? kernfs_path_from_node+0x2f/0x290 [ 865.120182][T26806] sysfs_warn_dup+0x8e/0xa0 [ 865.120200][T26806] sysfs_do_create_link_sd+0xc0/0x110 [ 865.120220][T26806] device_add_class_symlinks+0x1cf/0x240 [ 865.120244][T26806] device_add+0x475/0xb50 [ 865.120267][T26806] wiphy_register+0x1c81/0x2aa0 [ 865.120302][T26806] ? __pfx_wiphy_register+0x10/0x10 [ 865.120321][T26806] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 865.120350][T26806] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 865.120377][T26806] ieee80211_register_hw+0x3442/0x40a0 [ 865.120414][T26806] ? ieee80211_register_hw+0x1451/0x40a0 [ 865.120456][T26806] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 865.120483][T26806] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 865.120516][T26806] ? __hrtimer_setup+0x187/0x210 [ 865.120539][T26806] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 865.120566][T26806] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 865.120637][T26806] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 865.120669][T26806] ? trace_kmalloc+0x1f/0xd0 [ 865.120697][T26806] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 865.120724][T26806] ? kstrndup+0xbf/0x160 [ 865.120750][T26806] hwsim_new_radio_nl+0xea4/0x1b10 [ 865.120778][T26806] ? __pfx___nla_validate_parse+0x10/0x10 [ 865.120808][T26806] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 865.120844][T26806] ? __nla_parse+0x40/0x60 [ 865.120864][T26806] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 865.120897][T26806] genl_family_rcv_msg_doit+0x212/0x300 [ 865.120933][T26806] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 865.120984][T26806] ? bpf_lsm_capable+0x9/0x20 [ 865.121016][T26806] ? security_capable+0x7e/0x2e0 [ 865.121062][T26806] genl_rcv_msg+0x60e/0x790 [ 865.121104][T26806] ? __pfx_genl_rcv_msg+0x10/0x10 [ 865.121132][T26806] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 865.121169][T26806] netlink_rcv_skb+0x205/0x470 [ 865.121188][T26806] ? __lock_acquire+0xab9/0xd20 [ 865.121212][T26806] ? __pfx_genl_rcv_msg+0x10/0x10 [ 865.121238][T26806] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 865.121279][T26806] ? down_read+0x1ad/0x2e0 [ 865.121300][T26806] genl_rcv+0x28/0x40 [ 865.121322][T26806] netlink_unicast+0x82c/0x9e0 [ 865.121347][T26806] ? __pfx_netlink_unicast+0x10/0x10 [ 865.121366][T26806] ? netlink_sendmsg+0x642/0xb30 [ 865.121383][T26806] ? skb_put+0x11b/0x210 [ 865.121407][T26806] netlink_sendmsg+0x805/0xb30 [ 865.121440][T26806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 865.121463][T26806] ? aa_sock_msg_perm+0xf1/0x1d0 [ 865.121481][T26806] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 865.121499][T26806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 865.121519][T26806] __sock_sendmsg+0x21c/0x270 [ 865.121538][T26806] ____sys_sendmsg+0x505/0x830 [ 865.121565][T26806] ? __pfx_____sys_sendmsg+0x10/0x10 [ 865.121595][T26806] ? import_iovec+0x74/0xa0 [ 865.121620][T26806] ___sys_sendmsg+0x21f/0x2a0 [ 865.121644][T26806] ? __pfx____sys_sendmsg+0x10/0x10 [ 865.121706][T26806] ? __fget_files+0x2a/0x420 [ 865.121735][T26806] ? __fget_files+0x3a0/0x420 [ 865.121772][T26806] __x64_sys_sendmsg+0x19b/0x260 [ 865.121798][T26806] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 865.121830][T26806] ? rcu_is_watching+0x15/0xb0 [ 865.121851][T26806] ? do_syscall_64+0xbe/0x3b0 [ 865.121872][T26806] do_syscall_64+0xfa/0x3b0 [ 865.121888][T26806] ? lockdep_hardirqs_on+0x9c/0x150 [ 865.121903][T26806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.121919][T26806] ? clear_bhb_loop+0x60/0xb0 [ 865.121939][T26806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.121955][T26806] RIP: 0033:0x7fb0f618eba9 [ 865.121971][T26806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 865.121985][T26806] RSP: 002b:00007fb0f7053038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 865.122002][T26806] RAX: ffffffffffffffda RBX: 00007fb0f63d5fa0 RCX: 00007fb0f618eba9 [ 865.122014][T26806] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000d [ 865.122025][T26806] RBP: 00007fb0f6211e19 R08: 0000000000000000 R09: 0000000000000000 [ 865.122035][T26806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 865.122044][T26806] R13: 00007fb0f63d6038 R14: 00007fb0f63d5fa0 R15: 00007ffd16d58408 [ 865.122071][T26806] [ 865.679932][T26815] netlink: 'syz.5.5570': attribute type 58 has an invalid length. [ 865.697198][T26815] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5570'. [ 865.843829][T26824] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5572'. [ 865.964736][T26818] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.972674][T26818] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.361742][T26842] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5579'. [ 866.375061][T26842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5579'. [ 866.381687][T26818] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 866.429489][T26818] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 866.523445][T16410] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 866.535646][T16410] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 866.544656][T16410] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 866.553780][T16410] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 866.563454][T16410] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 866.625602][T26818] ip6tnl1: left promiscuous mode [ 866.630619][T26818] ip6tnl1: left allmulticast mode [ 866.669776][T26840] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 866.678706][T26840] bridge1: entered allmulticast mode [ 866.684737][T15654] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.737676][T15654] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.763394][T15654] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.788738][T15654] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.821736][T26845] wg1 speed is unknown, defaulting to 1000 [ 866.836071][T26854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5582'. [ 867.375720][T26845] lo speed is unknown, defaulting to 1000 [ 867.532676][T26888] netlink: 'syz.6.5593': attribute type 13 has an invalid length. [ 867.561721][T26888] netlink: 'syz.6.5593': attribute type 17 has an invalid length. [ 868.014197][T26904] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5596'. [ 868.050524][T26908] netlink: 192 bytes leftover after parsing attributes in process `syz.8.5598'. [ 868.060942][T26908] netlink: 'syz.8.5598': attribute type 2 has an invalid length. [ 868.070097][T26908] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5598'. [ 868.077535][T26896] wg1 speed is unknown, defaulting to 1000 [ 868.081133][T26908] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5598'. [ 868.204908][T26912] tipc: Enabling of bearer rejected, failed to enable media [ 868.510897][T26896] lo speed is unknown, defaulting to 1000 [ 868.643808][T16410] Bluetooth: hci8: command tx timeout [ 868.656959][T26845] chnl_net:caif_netlink_parms(): no params data found [ 868.680724][T26935] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 868.691345][T26935] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.753589][T26935] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 868.763848][T26935] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.874025][T26935] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 868.886710][T26935] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.105418][T26935] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 869.116850][T26935] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.228163][T26845] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.236031][T26845] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.243713][T26845] bridge_slave_0: entered allmulticast mode [ 869.252108][T26845] bridge_slave_0: entered promiscuous mode [ 869.269058][T26845] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.277183][T26845] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.284729][T26845] bridge_slave_1: entered allmulticast mode [ 869.293391][T26845] bridge_slave_1: entered promiscuous mode [ 869.304308][ T7948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 869.315206][ T7948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 869.413129][T26947] wg1 speed is unknown, defaulting to 1000 [ 869.509290][T26845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 869.555152][T26845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 869.775231][T15654] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 869.784896][T15654] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.899904][T20088] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 869.922361][T20088] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.945473][T26845] team0: Port device team_slave_0 added [ 869.958932][T26845] team0: Port device team_slave_1 added [ 869.966028][T26973] FAULT_INJECTION: forcing a failure. [ 869.966028][T26973] name failslab, interval 1, probability 0, space 0, times 0 [ 869.980480][T26973] CPU: 1 UID: 0 PID: 26973 Comm: syz.8.5614 Not tainted syzkaller #0 PREEMPT(full) [ 869.980512][T26973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 869.980527][T26973] Call Trace: [ 869.980536][T26973] [ 869.980546][T26973] dump_stack_lvl+0x189/0x250 [ 869.980579][T26973] ? __pfx____ratelimit+0x10/0x10 [ 869.980603][T26973] ? __pfx_dump_stack_lvl+0x10/0x10 [ 869.980629][T26973] ? __pfx__printk+0x10/0x10 [ 869.980661][T26973] ? __pfx___might_resched+0x10/0x10 [ 869.980679][T26973] ? fs_reclaim_acquire+0x7d/0x100 [ 869.980712][T26973] should_fail_ex+0x414/0x560 [ 869.980745][T26973] should_failslab+0xa8/0x100 [ 869.980773][T26973] __kmalloc_node_noprof+0xd1/0x4e0 [ 869.980799][T26973] ? __pfx___up_read+0x10/0x10 [ 869.980818][T26973] ? crypto_create_tfm_node+0x83/0x3f0 [ 869.980851][T26973] crypto_create_tfm_node+0x83/0x3f0 [ 869.980883][T26973] crypto_spawn_tfm2+0x5c/0x90 [ 869.980904][T26973] aead_init_geniv+0x169/0x240 [ 869.980934][T26973] crypto_create_tfm_node+0x18c/0x3f0 [ 869.980966][T26973] crypto_alloc_tfm_node+0x172/0x3f0 [ 869.981019][T26973] esp_init_state+0x36b/0x1140 [ 869.981049][T26973] ? __sock_sendmsg+0x21c/0x270 [ 869.981064][T26973] ? ____sys_sendmsg+0x505/0x830 [ 869.981087][T26973] ? ___sys_sendmsg+0x21f/0x2a0 [ 869.981110][T26973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.981136][T26973] ? __pfx_esp_init_state+0x10/0x10 [ 869.981169][T26973] ? __lock_acquire+0xab9/0xd20 [ 869.981218][T26973] ? __xfrm_init_state+0x7ef/0x13f0 [ 869.981240][T26973] __xfrm_init_state+0xa73/0x13f0 [ 869.981256][T26973] ? __xfrm_init_state+0x7ef/0x13f0 [ 869.981278][T26973] xfrm_add_sa+0x2f5b/0x4070 [ 869.981303][T26973] ? __pfx_xfrm_add_sa+0x10/0x10 [ 869.981329][T26973] ? apparmor_capable+0x137/0x1b0 [ 869.981363][T26973] ? __nla_parse+0x40/0x60 [ 869.981387][T26973] xfrm_user_rcv_msg+0x7a3/0xab0 [ 869.981421][T26973] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 869.981483][T26973] ? __pfx___mutex_trylock_common+0x10/0x10 [ 869.981507][T26973] ? rcu_is_watching+0x15/0xb0 [ 869.981526][T26973] ? trace_contention_end+0x39/0x120 [ 869.981546][T26973] ? __mutex_lock+0x335/0x1350 [ 869.981571][T26973] netlink_rcv_skb+0x205/0x470 [ 869.981594][T26973] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 869.981624][T26973] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 869.981659][T26973] ? netlink_deliver_tap+0x2e/0x1b0 [ 869.981680][T26973] ? netlink_deliver_tap+0x2e/0x1b0 [ 869.981704][T26973] xfrm_netlink_rcv+0x79/0x90 [ 869.981732][T26973] netlink_unicast+0x82c/0x9e0 [ 869.981760][T26973] ? __pfx_netlink_unicast+0x10/0x10 [ 869.981780][T26973] ? netlink_sendmsg+0x642/0xb30 [ 869.981801][T26973] ? skb_put+0x11b/0x210 [ 869.981827][T26973] netlink_sendmsg+0x805/0xb30 [ 869.981858][T26973] ? __pfx_netlink_sendmsg+0x10/0x10 [ 869.981882][T26973] ? aa_sock_msg_perm+0xf1/0x1d0 [ 869.981903][T26973] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 869.981923][T26973] ? __pfx_netlink_sendmsg+0x10/0x10 [ 869.981946][T26973] __sock_sendmsg+0x21c/0x270 [ 869.981966][T26973] ____sys_sendmsg+0x505/0x830 [ 869.981996][T26973] ? __pfx_____sys_sendmsg+0x10/0x10 [ 869.982030][T26973] ? import_iovec+0x74/0xa0 [ 869.982064][T26973] ___sys_sendmsg+0x21f/0x2a0 [ 869.982091][T26973] ? __pfx____sys_sendmsg+0x10/0x10 [ 869.982157][T26973] ? __fget_files+0x2a/0x420 [ 869.982175][T26973] ? __fget_files+0x3a0/0x420 [ 869.982207][T26973] __x64_sys_sendmsg+0x19b/0x260 [ 869.982247][T26973] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 869.982288][T26973] ? __pfx_ksys_write+0x10/0x10 [ 869.982315][T26973] ? rcu_is_watching+0x15/0xb0 [ 869.982344][T26973] ? do_syscall_64+0xbe/0x3b0 [ 869.982373][T26973] do_syscall_64+0xfa/0x3b0 [ 869.982395][T26973] ? lockdep_hardirqs_on+0x9c/0x150 [ 869.982418][T26973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.982440][T26973] ? clear_bhb_loop+0x60/0xb0 [ 869.982463][T26973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.982480][T26973] RIP: 0033:0x7fc0ed78eba9 [ 869.982497][T26973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 869.982513][T26973] RSP: 002b:00007fc0ee654038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 869.982532][T26973] RAX: ffffffffffffffda RBX: 00007fc0ed9d5fa0 RCX: 00007fc0ed78eba9 [ 869.982546][T26973] RDX: 0000000000000804 RSI: 0000200000000100 RDI: 0000000000000003 [ 869.982557][T26973] RBP: 00007fc0ee654090 R08: 0000000000000000 R09: 0000000000000000 [ 869.982568][T26973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 869.982579][T26973] R13: 00007fc0ed9d6038 R14: 00007fc0ed9d5fa0 R15: 00007ffe4bf9d788 [ 869.982608][T26973] [ 870.473639][T16545] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 870.482071][T16545] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.530710][T26947] lo speed is unknown, defaulting to 1000 [ 870.603866][T26845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 870.611195][T26845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 870.638275][T26845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 870.656383][T26845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 870.664139][T26845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 870.699829][T26845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 870.724662][T16410] Bluetooth: hci8: command tx timeout [ 870.730557][T15654] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 870.739541][T15654] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.924508][T26845] hsr_slave_0: entered promiscuous mode [ 870.931549][T26845] hsr_slave_1: entered promiscuous mode [ 870.938232][T26845] debugfs: 'hsr0' already exists in 'hsr' [ 870.944101][T26845] Cannot create hsr debugfs directory [ 870.990030][T26997] macsec1: entered promiscuous mode [ 870.997304][T26997] mac80211_hwsim hwsim50 wlan1: entered promiscuous mode [ 871.008800][T26997] mac80211_hwsim hwsim50 wlan1: left promiscuous mode [ 871.021267][T26999] netlink: 'syz.3.5622': attribute type 9 has an invalid length. [ 871.131252][T27000] netlink: 'syz.3.5622': attribute type 5 has an invalid length. [ 871.379634][T27007] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 871.545154][T27011] netlink: 1 bytes leftover after parsing attributes in process `syz.8.5627'. [ 871.580021][T26845] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 872.040382][T26845] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 872.077104][T26845] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 872.100954][T27025] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5630'. [ 872.123518][T26845] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 872.541343][T27049] wg1 speed is unknown, defaulting to 1000 [ 872.564177][T27050] geneve2: entered promiscuous mode [ 872.578041][T27050] geneve2: entered allmulticast mode [ 872.579852][T27052] netlink: zone id is out of range [ 872.589876][T27052] netlink: zone id is out of range [ 872.603713][T27052] netlink: zone id is out of range [ 872.609055][T27052] netlink: zone id is out of range [ 872.614713][T27052] netlink: zone id is out of range [ 872.620167][T27052] netlink: zone id is out of range [ 872.632709][T27052] netlink: zone id is out of range [ 872.662542][T27052] netlink: zone id is out of range [ 872.690284][T26845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 872.698797][T27052] netlink: zone id is out of range [ 872.746284][T26845] 8021q: adding VLAN 0 to HW filter on device team0 [ 872.776032][T15654] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.783260][T15654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 872.812255][T16410] Bluetooth: hci8: command tx timeout [ 872.838284][T20075] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.845510][T20075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 872.897948][T27063] netlink: 'syz.3.5640': attribute type 1 has an invalid length. [ 873.558627][T27049] lo speed is unknown, defaulting to 1000 [ 873.697899][T27086] tipc: Enabling of bearer rejected, failed to enable media [ 873.710955][T27083] netlink: 'syz.6.5646': attribute type 2 has an invalid length. [ 873.720364][T27087] tipc: Enabling of bearer rejected, failed to enable media [ 873.838216][T26845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 873.930099][T27098] netlink: 'syz.3.5648': attribute type 13 has an invalid length. [ 873.939092][T27098] netlink: 'syz.3.5648': attribute type 17 has an invalid length. [ 874.162085][T27102] wg1 speed is unknown, defaulting to 1000 [ 874.616605][T26845] veth0_vlan: entered promiscuous mode [ 874.645755][T26845] veth1_vlan: entered promiscuous mode [ 874.738551][T26845] veth0_macvtap: entered promiscuous mode [ 874.757816][T26845] veth1_macvtap: entered promiscuous mode [ 874.837388][T26845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 874.876264][T27102] lo speed is unknown, defaulting to 1000 [ 874.882516][T16410] Bluetooth: hci8: command tx timeout [ 874.885425][T26845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 874.913442][T27129] netlink: 'syz.5.5658': attribute type 10 has an invalid length. [ 874.932723][T27129] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5658'. [ 874.958544][T15654] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.996363][T15654] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.036452][T15654] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.048360][T15654] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.211692][T15654] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 875.235399][T15654] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 875.278278][T20075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 875.289920][T20075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 875.311509][T27141] wg1 speed is unknown, defaulting to 1000 [ 875.341307][T27146] netlink: 'syz.5.5663': attribute type 8 has an invalid length. [ 875.367595][T27146] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5663'. [ 875.711516][T27159] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5575'. [ 875.731011][T27159] netlink: 152 bytes leftover after parsing attributes in process `syz.9.5575'. [ 875.856286][T27164] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5666'. [ 876.059927][T27141] lo speed is unknown, defaulting to 1000 [ 876.296481][ T30] audit: type=1800 audit(1758197343.902:19): pid=27180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5670" name="@" dev="tmpfs" ino=2526 res=0 errno=0 [ 876.484969][T20082] net_ratelimit: 22 callbacks suppressed [ 876.484992][T20082] bond7: (slave bridge4): failed to get link speed/duplex [ 876.601435][T27191] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5673'. [ 876.624510][T27188] wg1 speed is unknown, defaulting to 1000 [ 876.743754][T20089] bond7: (slave bridge4): failed to get link speed/duplex [ 876.865216][T15654] bond7: (slave bridge4): failed to get link speed/duplex [ 877.006474][ T7948] bond7: (slave bridge4): failed to get link speed/duplex [ 877.241810][T27195] wg1 speed is unknown, defaulting to 1000 [ 877.249540][T27205] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5676'. [ 877.252505][T16545] bond7: (slave bridge4): failed to get link speed/duplex [ 877.402593][T20089] bond7: (slave bridge4): failed to get link speed/duplex [ 877.488854][T27211] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5678'. [ 877.491184][T27188] lo speed is unknown, defaulting to 1000 [ 877.541720][T27212] netlink: 'syz.5.5678': attribute type 21 has an invalid length. [ 877.591691][T27212] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5678'. [ 877.613667][T27211] netlink: 'syz.5.5678': attribute type 12 has an invalid length. [ 877.642692][T20075] bond7: (slave bridge4): failed to get link speed/duplex [ 877.752569][T16545] bond7: (slave bridge4): failed to get link speed/duplex [ 877.781015][T27221] netlink: 'syz.5.5682': attribute type 1 has an invalid length. [ 877.851455][T27221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 877.926822][T27229] bond0: (slave veth13): Enslaving as an active interface with a down link [ 877.942700][T27221] gretap2: entered promiscuous mode [ 877.951374][T27221] bond0: (slave gretap2): making interface the new active one [ 877.960653][T27221] bond0: (slave gretap2): Enslaving as an active interface with an up link [ 877.970046][T27222] wg1 speed is unknown, defaulting to 1000 [ 877.976213][T27195] lo speed is unknown, defaulting to 1000 [ 877.979270][T27228] syzkaller0: entered promiscuous mode [ 877.992777][T27228] syzkaller0: entered allmulticast mode [ 878.023493][T27221] macvlan0: entered promiscuous mode [ 878.028926][T27221] macvlan0: entered allmulticast mode [ 878.036208][T27221] bond0: entered promiscuous mode [ 878.043871][T27221] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 878.052017][T27221] bond0: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 878.068805][T27230] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5683'. [ 878.079806][T27221] bond0: left promiscuous mode [ 878.130221][T27230] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 878.252026][T27232] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5684'. [ 878.335047][T27222] lo speed is unknown, defaulting to 1000 [ 878.352838][ T7948] bond7: (slave bridge4): failed to get link speed/duplex [ 878.380378][T27232] netlink: 'syz.5.5684': attribute type 2 has an invalid length. [ 878.392500][T27232] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5684'. [ 878.403384][ T51] Bluetooth: hci8: command 0x0405 tx timeout [ 878.613176][T20075] bond7: (slave bridge4): failed to get link speed/duplex [ 878.732631][T27250] tipc: Enabled bearer , priority 0 [ 878.740979][T27247] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5687'. [ 878.767600][T27249] syzkaller0: entered promiscuous mode [ 878.774542][T27249] syzkaller0: entered allmulticast mode [ 878.900233][T27249] tipc: Resetting bearer [ 878.953143][T27249] tipc: Disabling bearer [ 878.966254][T27254] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5689'. [ 879.295807][T27266] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5691'. [ 879.401599][T27263] 8021q: adding VLAN 0 to HW filter on device bond8 [ 879.409653][T27258] wg1 speed is unknown, defaulting to 1000 [ 879.443183][T27273] team0: Port device bond0 removed [ 879.455473][T27273] bond0: (slave 0!): Releasing backup interface [ 879.475293][T27273] bond0: (slave bond_slave_0): Releasing backup interface [ 879.485432][T27273] team0: Port device team_slave_0 removed [ 879.494040][T27273] team0: Port device team_slave_1 removed [ 879.501378][T27273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 879.510751][T27273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 879.577257][T27275] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 880.035680][T27258] lo speed is unknown, defaulting to 1000 [ 880.581297][T27301] syzkaller0: entered promiscuous mode [ 880.588140][T27301] syzkaller0: entered allmulticast mode [ 883.241100][T27310] netlink: 'syz.9.5702': attribute type 3 has an invalid length. [ 883.259048][T27318] syz_tun: entered allmulticast mode [ 883.284086][T20082] net_ratelimit: 13 callbacks suppressed [ 883.284110][T20082] bond7: (slave bridge4): failed to get link speed/duplex [ 883.426074][T27320] syz_tun: left allmulticast mode [ 883.453364][T20082] bond7: (slave bridge4): failed to get link speed/duplex [ 883.576210][T20082] bond7: (slave bridge4): failed to get link speed/duplex [ 883.607954][T27346] tipc: Started in network mode [ 883.613235][T27346] tipc: Node identity a6973c6f7fd8, cluster identity 4711 [ 883.616084][T27351] __nla_validate_parse: 1 callbacks suppressed [ 883.616106][T27351] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5713'. [ 883.633454][T27346] tipc: Enabled bearer , priority 0 [ 883.651082][T27346] syzkaller0: entered promiscuous mode [ 883.658106][T27346] syzkaller0: entered allmulticast mode [ 883.708118][T27351] geneve2: entered promiscuous mode [ 883.714058][T27351] geneve2: entered allmulticast mode [ 883.740555][T27346] tipc: Resetting bearer [ 883.749076][ T7948] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 51867 - 0 [ 883.761702][ T7948] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 51867 - 0 [ 883.777479][T27345] tipc: Resetting bearer [ 883.801612][T27345] tipc: Disabling bearer [ 883.815782][ T7948] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 51867 - 0 [ 883.825260][ T7948] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 51867 - 0 [ 883.838971][T27362] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5717'. [ 883.887282][T27355] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5715'. [ 883.897037][T27355] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5715'. [ 883.933225][ T7948] bond7: (slave bridge4): failed to get link speed/duplex [ 884.011270][T27366] pim6reg: entered allmulticast mode [ 884.082953][T15654] bond7: (slave bridge4): failed to get link speed/duplex [ 884.107946][T27358] pim6reg: left allmulticast mode [ 884.385628][T16545] bond7: (slave bridge4): failed to get link speed/duplex [ 884.405300][T27381] wg1 speed is unknown, defaulting to 1000 [ 884.502577][T16545] bond7: (slave bridge4): failed to get link speed/duplex [ 884.652867][T27381] lo speed is unknown, defaulting to 1000 [ 884.753603][T16545] bond7: (slave bridge4): failed to get link speed/duplex [ 884.952306][T20088] bond7: (slave bridge4): failed to get link speed/duplex [ 885.095063][T20089] bond7: (slave bridge4): failed to get link speed/duplex [ 885.239656][T27413] sctp: [Deprecated]: syz.9.5730 (pid 27413) Use of struct sctp_assoc_value in delayed_ack socket option. [ 885.239656][T27413] Use struct sctp_sack_info instead [ 885.343817][T27401] wg1 speed is unknown, defaulting to 1000 [ 885.376523][T27418] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5732'. [ 885.394852][T27407] wg1 speed is unknown, defaulting to 1000 [ 885.413270][T27419] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5732'. [ 885.733089][T27430] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 885.938463][T27436] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5735'. [ 885.965411][T27436] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5735'. [ 886.322980][ T31] INFO: task syz.1.4357:22431 blocked for more than 143 seconds. [ 886.330769][ T31] Not tainted syzkaller #0 [ 886.358015][T27408] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5726'. [ 886.372902][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 886.400586][ T31] task:syz.1.4357 state:D stack:25416 pid:22431 tgid:22430 ppid:17161 task_flags:0x400140 flags:0x00004004 [ 886.416619][ T31] Call Trace: [ 886.420090][ T31] [ 886.424460][ T31] __schedule+0x1798/0x4cc0 [ 886.429386][ T31] ? __lock_acquire+0xab9/0xd20 [ 886.435596][ T31] ? __lock_acquire+0xab9/0xd20 [ 886.440726][ T31] ? __pfx___schedule+0x10/0x10 [ 886.442525][T27401] lo speed is unknown, defaulting to 1000 [ 886.470365][ T31] ? schedule+0x91/0x360 [ 886.478162][ T31] schedule+0x165/0x360 [ 886.508605][ T31] schedule_preempt_disabled+0x13/0x30 [ 886.547941][T27450] ieee80211 phy77: Selected rate control algorithm 'minstrel_ht' [ 886.562949][ T31] __mutex_lock+0x7e6/0x1350 [ 886.577648][ T31] ? __mutex_lock+0x5bb/0x1350 [ 886.602932][ T31] ? nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290 [ 886.628457][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 886.653365][ T31] ? stack_trace_save+0x9c/0xe0 [ 886.662368][ T31] ? stack_depot_save_flags+0x40/0x860 [ 886.668393][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 886.674281][ T31] nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290 [ 886.680320][ T31] ? __kmalloc_node_track_caller_noprof+0x271/0x4e0 [ 886.687381][ T31] ? kmalloc_reserve+0x136/0x290 [ 886.692630][ T31] ? __alloc_skb+0x142/0x2d0 [ 886.697315][ T31] ? netlink_dump+0x1b7/0xe90 [ 886.702305][ T31] ? __netlink_dump_start+0x5cb/0x7e0 [ 886.707812][ T31] ? genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 886.713974][ T31] ? genl_rcv_msg+0x5da/0x790 [ 886.718714][ T31] ? netlink_rcv_skb+0x205/0x470 [ 886.723871][ T31] ? genl_rcv+0x28/0x40 [ 886.728267][ T31] ? netlink_unicast+0x82c/0x9e0 [ 886.733329][ T31] ? netlink_sendmsg+0x805/0xb30 [ 886.738574][ T31] ? __sock_sendmsg+0x21c/0x270 [ 886.744189][ T31] ? ____sys_sendmsg+0x505/0x830 [ 886.749389][ T31] ? ___sys_sendmsg+0x21f/0x2a0 [ 886.754368][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 886.759790][ T31] ? do_syscall_64+0xfa/0x3b0 [ 886.764563][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.771299][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 886.777992][ T31] ? rcu_is_watching+0x15/0xb0 [ 886.783270][ T31] ? trace_kmalloc+0x1f/0xd0 [ 886.787916][ T31] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 886.794788][ T31] ? __build_skb_around+0x257/0x3e0 [ 886.800054][ T31] genl_dumpit+0x10b/0x1b0 [ 886.804991][ T31] netlink_dump+0x6e4/0xe90 [ 886.809657][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 886.814840][ T31] ? genl_start+0x1c9/0x6c0 [ 886.819650][ T31] ? genl_start+0x499/0x6c0 [ 886.824361][ T31] __netlink_dump_start+0x5cb/0x7e0 [ 886.829863][ T31] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 886.839998][ T31] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 886.847950][ T31] ? genl_get_cmd+0x496/0x910 [ 886.855080][ T31] ? __pfx_genl_start+0x10/0x10 [ 886.860002][ T31] ? __pfx_genl_dumpit+0x10/0x10 [ 886.866258][ T31] ? __pfx_genl_done+0x10/0x10 [ 886.871211][ T31] ? stack_trace_save+0x9c/0xe0 [ 886.877900][ T31] genl_rcv_msg+0x5da/0x790 [ 886.883181][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 886.888355][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 886.895913][ T31] netlink_rcv_skb+0x205/0x470 [ 886.900803][ T31] ? __lock_acquire+0xab9/0xd20 [ 886.906738][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 886.911913][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 886.918490][ T31] ? down_read+0x1ad/0x2e0 [ 886.923786][ T31] genl_rcv+0x28/0x40 [ 886.927822][ T31] netlink_unicast+0x82c/0x9e0 [ 886.933702][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 886.939219][ T31] ? netlink_sendmsg+0x642/0xb30 [ 886.944994][ T31] ? skb_put+0x11b/0x210 [ 886.949324][ T31] netlink_sendmsg+0x805/0xb30 [ 886.955372][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 886.960721][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 886.968371][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 886.974514][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 886.979996][ T31] __sock_sendmsg+0x21c/0x270 [ 886.985033][ T31] ____sys_sendmsg+0x505/0x830 [ 886.989871][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 886.997112][ T31] ? import_iovec+0x74/0xa0 [ 887.001695][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 887.007108][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 887.011316][T27407] lo speed is unknown, defaulting to 1000 [ 887.013675][ T31] ? __fget_files+0x2a/0x420 [ 887.024043][ T31] ? __fget_files+0x3a0/0x420 [ 887.028803][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 887.035133][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 887.040718][ T31] ? rcu_is_watching+0x15/0xb0 [ 887.046429][ T31] ? do_syscall_64+0xbe/0x3b0 [ 887.051166][ T31] do_syscall_64+0xfa/0x3b0 [ 887.056791][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 887.062834][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.069037][ T31] ? clear_bhb_loop+0x60/0xb0 [ 887.075437][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.082025][ T31] RIP: 0033:0x7f474578eba9 [ 887.088116][ T31] RSP: 002b:00007f4746691038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 887.098490][ T31] RAX: ffffffffffffffda RBX: 00007f47459d5fa0 RCX: 00007f474578eba9 [ 887.108089][ T31] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000009 [ 887.117013][ T31] RBP: 00007f4745811e19 R08: 0000000000000000 R09: 0000000000000000 [ 887.126888][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 887.135648][ T31] R13: 00007f47459d6038 R14: 00007f47459d5fa0 R15: 00007ffeffec0118 [ 887.144342][ T31] [ 887.147594][ T31] [ 887.147594][ T31] Showing all locks held in the system: [ 887.156073][ T31] 1 lock held by rcu_exp_gp_kthr/18: [ 887.161436][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 887.176029][ T31] 1 lock held by khungtaskd/31: [ 887.181402][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 887.191502][ T31] 3 locks held by kworker/0:2/1209: [ 887.197069][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 887.208635][ T31] #1: ffffc90003bdfbc0 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 887.219858][ T31] #2: ffffffff8e13fa40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 887.230028][ T31] 2 locks held by getty/5626: [ 887.236309][ T31] #0: ffff88814e5a20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 887.246371][ T31] #1: ffffc900036c32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 887.258181][ T31] 4 locks held by kworker/u8:23/16545: [ 887.263859][ T31] #0: ffff88801b2fe948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 887.275078][ T31] #1: ffffc9000ab27bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 887.288051][ T31] #2: ffffffff8f52d230 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 887.297689][ T31] #3: ffffffff8f53a0c8 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1c/0x1d0 [ 887.308202][ T31] 3 locks held by kworker/u8:43/20089: [ 887.314747][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 887.326559][ T31] #1: ffffc9000d5ffbc0 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 887.338413][ T31] #2: ffffffff8e13fb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 887.349711][ T31] 2 locks held by kworker/0:7/21225: [ 887.355171][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 887.366451][ T31] #1: ffffc90004377bc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 887.376971][ T31] 2 locks held by syz.2.4081/21466: [ 887.382281][ T31] #0: ffffffff8f59f890 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 887.390936][ T31] #1: ffffffff8e4189c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 887.401346][ T31] 3 locks held by syz.1.4357/22431: [ 887.406665][ T31] #0: ffffffff8f59f890 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 887.414964][ T31] #1: ffff8880517c06e0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 887.425891][ T31] #2: ffffffff8e4189c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290 [ 887.436486][ T31] 2 locks held by syz.0.4990/24809: [ 887.441702][ T31] #0: ffffffff8f59f890 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 887.450134][ T31] #1: ffffffff8e4189c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 887.460588][ T31] 2 locks held by syz.7.5402/26235: [ 887.465864][ T31] #0: ffffffff8f59f890 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 887.474125][ T31] #1: ffffffff8e4189c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 887.484378][ T31] 3 locks held by syz.3.5729/27407: [ 887.489961][ T31] #0: ffffffff8f52d230 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 887.499748][ T31] #1: ffffffff8f53a0c8 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990 [ 887.509056][ T31] #2: ffffffff8e13fb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 887.520073][ T31] [ 887.525364][ T31] ============================================= [ 887.525364][ T31] [ 887.533908][ T31] NMI backtrace for cpu 1 [ 887.533930][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 887.533955][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 887.533969][ T31] Call Trace: [ 887.533978][ T31] [ 887.533990][ T31] dump_stack_lvl+0x189/0x250 [ 887.534026][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 887.534054][ T31] ? __pfx__printk+0x10/0x10 [ 887.534099][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 887.534136][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 887.534169][ T31] ? __pfx__printk+0x10/0x10 [ 887.534205][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 887.534251][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 887.534286][ T31] watchdog+0xf93/0xfe0 [ 887.534323][ T31] ? watchdog+0x1de/0xfe0 [ 887.534361][ T31] kthread+0x70e/0x8a0 [ 887.534392][ T31] ? __pfx_watchdog+0x10/0x10 [ 887.534421][ T31] ? __pfx_kthread+0x10/0x10 [ 887.534448][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 887.534481][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 887.534501][ T31] ? __pfx_kthread+0x10/0x10 [ 887.534530][ T31] ret_from_fork+0x436/0x7d0 [ 887.534556][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 887.534586][ T31] ? __switch_to_asm+0x39/0x70 [ 887.534614][ T31] ? __switch_to_asm+0x33/0x70 [ 887.534640][ T31] ? __pfx_kthread+0x10/0x10 [ 887.534670][ T31] ret_from_fork_asm+0x1a/0x30 [ 887.534717][ T31] [ 887.534727][ T31] Sending NMI from CPU 1 to CPUs 0: [ 887.684206][ C0] NMI backtrace for cpu 0 [ 887.684225][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 887.684247][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 887.684260][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 887.684285][ C0] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 e9 0d 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 887.684302][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 887.684319][ C0] RAX: 82065a35fa364600 RBX: ffffffff819693f8 RCX: 82065a35fa364600 [ 887.684334][ C0] RDX: 0000000000000001 RSI: ffffffff8d9b9907 RDI: ffffffff8be33c00 [ 887.684348][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 887.684362][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa38830 [ 887.684377][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20 [ 887.684390][ C0] FS: 0000000000000000(0000) GS:ffff888125c16000(0000) knlGS:0000000000000000 [ 887.684405][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 887.684419][ C0] CR2: 00005555769d85c8 CR3: 000000000df36000 CR4: 00000000003526f0 [ 887.684436][ C0] Call Trace: [ 887.684444][ C0] [ 887.684451][ C0] default_idle+0x13/0x20 [ 887.684473][ C0] default_idle_call+0x74/0xb0 [ 887.684496][ C0] do_idle+0x1e8/0x510 [ 887.684519][ C0] ? __pfx_do_idle+0x10/0x10 [ 887.684547][ C0] cpu_startup_entry+0x44/0x60 [ 887.684565][ C0] rest_init+0x2de/0x300 [ 887.684590][ C0] start_kernel+0x3a9/0x410 [ 887.684612][ C0] x86_64_start_reservations+0x24/0x30 [ 887.684637][ C0] x86_64_start_kernel+0x143/0x1c0 [ 887.684663][ C0] common_startup_64+0x13e/0x147 [ 887.684698][ C0] [ 887.686953][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 887.867500][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 887.876609][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 887.886672][ T31] Call Trace: [ 887.889965][ T31] [ 887.892906][ T31] dump_stack_lvl+0x99/0x250 [ 887.897545][ T31] ? __asan_memcpy+0x40/0x70 [ 887.902216][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 887.907470][ T31] ? __pfx__printk+0x10/0x10 [ 887.912145][ T31] vpanic+0x281/0x750 [ 887.916193][ T31] ? __pfx_vpanic+0x10/0x10 [ 887.920699][ T31] ? preempt_schedule+0xae/0xc0 [ 887.925581][ T31] ? preempt_schedule_common+0x83/0xd0 [ 887.931059][ T31] panic+0xb9/0xc0 [ 887.934788][ T31] ? __pfx_panic+0x10/0x10 [ 887.939214][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 887.944598][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 887.950762][ T31] watchdog+0xfd2/0xfe0 [ 887.954935][ T31] ? watchdog+0x1de/0xfe0 [ 887.959299][ T31] kthread+0x70e/0x8a0 [ 887.963377][ T31] ? __pfx_watchdog+0x10/0x10 [ 887.968064][ T31] ? __pfx_kthread+0x10/0x10 [ 887.972658][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 887.977947][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 887.983157][ T31] ? __pfx_kthread+0x10/0x10 [ 887.987760][ T31] ret_from_fork+0x436/0x7d0 [ 887.992355][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 887.997646][ T31] ? __switch_to_asm+0x39/0x70 [ 888.002424][ T31] ? __switch_to_asm+0x33/0x70 [ 888.007221][ T31] ? __pfx_kthread+0x10/0x10 [ 888.011834][ T31] ret_from_fork_asm+0x1a/0x30 [ 888.016660][ T31] [ 888.020128][ T31] Kernel Offset: disabled [ 888.024506][ T31] Rebooting in 86400 seconds..